Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File: 7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier: UxvwT5OjFZlhZKty41EJ1a4+zdU64GauiEhHxu2Uhzc=
Subject key identifier: 91:51:06:A4:FC:4C:F5:B2:EC:DE:F5:DF:39:CC:83:7F:37:8F:72:3C
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer: /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial: 019D39AEF94E4CFD30C258C40DC8602D0DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number: 1537
Signing time: Sun 29 Mar 2026 13:01:01 +0000
Manifest this update: Sun 29 Mar 2026 13:01:01 +0000
Manifest next update: Mon 30 Mar 2026 13:01:01 +0000
Files and hashes: 1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: /tC1H/SqQ/b/4m9raLYcwIChRlWi7miRjMKmdJrDT9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:f9:4e:4c:fd:30:c2:58:c4:0d:c8:60:2d:0d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Validity
Not Before: Mar 29 13:01:01 2026 GMT
Not After : Mar 30 13:01:01 2026 GMT
Subject: CN=915106a4fc4cf5b2ecdef5df39cc837f378f723c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:d9:d6:26:e8:fc:d9:39:c0:6c:69:aa:ca:
29:1a:33:ff:ef:2c:95:e7:e3:8a:b4:d1:23:92:13:
0b:79:99:af:ee:ba:60:dc:57:9f:b9:41:81:00:50:
26:d6:86:fb:75:25:96:c3:ed:3f:3c:c6:cf:3c:54:
fb:82:dd:2d:6f:1b:d4:d6:2c:e3:8f:b0:45:32:3d:
55:fe:e2:ac:67:f7:35:7e:6f:bb:8a:48:27:59:8b:
14:77:f6:5f:e2:3c:97:b3:96:3b:ca:14:a5:93:b4:
40:31:23:f7:8d:0a:19:d3:b3:5e:5b:f7:a9:9b:e0:
9f:30:40:a0:56:2b:96:07:f8:18:67:1d:33:d2:28:
bd:1f:6d:5a:46:03:51:5f:f8:06:1d:f2:f0:60:17:
21:f6:ec:19:c6:50:08:a6:cd:f5:c8:f2:15:c9:10:
9d:a5:5d:39:92:2e:db:b3:93:2c:36:86:c2:2c:ef:
10:fe:f1:a4:ac:6f:e7:38:bc:de:f9:8f:9d:64:b3:
cd:5f:85:5f:c3:81:57:cc:d4:56:5c:aa:dc:35:74:
6e:cb:9c:7c:6c:5f:72:88:39:a1:3a:b7:1c:d9:1c:
79:41:a8:45:f0:5e:0a:5b:b0:0e:bf:a6:d1:f8:ee:
05:7c:47:b5:d5:41:0d:07:67:ea:0b:65:49:39:2f:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:51:06:A4:FC:4C:F5:B2:EC:DE:F5:DF:39:CC:83:7F:37:8F:72:3C
X509v3 Authority Key Identifier:
keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:54:77:f5:b0:2c:6c:31:98:04:d1:71:0d:59:1b:c8:e7:86:
f1:3b:13:8e:06:96:4c:97:b6:b4:33:d0:55:b9:0d:3f:47:be:
b1:40:db:7e:ad:8f:d4:b3:0d:57:3a:b6:28:aa:e2:fd:4f:58:
7b:75:13:45:e8:08:3d:4b:53:a8:1e:2c:ef:50:0f:d0:d5:7a:
36:d8:f3:8b:cf:6b:30:40:1f:dc:22:b2:a0:92:cf:64:16:b6:
7c:4c:10:67:c8:33:4a:77:f2:38:57:b3:a7:7e:a4:8e:db:d0:
74:24:97:41:46:79:16:1c:7d:2e:cb:a3:79:c8:0e:a9:14:d2:
d9:1b:5e:a6:d9:43:ae:69:a7:90:86:47:9d:09:58:da:7e:3f:
26:ad:31:f2:68:d3:54:aa:dc:9e:c7:a1:4d:1f:f0:fc:a0:f9:
6e:e5:d1:d7:77:d5:b0:a4:76:de:62:17:63:90:44:31:dc:18:
7c:4e:da:ea:00:83:80:3d:f8:cb:d0:e1:3f:41:08:72:65:99:
d8:89:9c:9a:bd:bf:a1:bd:12:10:9a:5d:61:b0:e4:a7:1d:73:
aa:58:16:04:6b:4f:d9:22:08:8c:5d:fd:25:c8:7e:6d:a4:cc:
de:ad:ee:35:4b:eb:54:90:06:17:65:5d:6a:03:29:d9:35:6e:
b4:69:e9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:52 2026 by rpki-client