Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
File: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft (raw, json)
Hash identifier: ZmPjB1dClJ1IaFQFPpQ2wCD5hQ0ZtKPrYKII6M7KILY=
Subject key identifier: A8:34:8D:01:6D:82:0E:F3:8B:65:0C:C9:49:87:65:49:72:0C:A4:1A
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial: 019D382EB641302362ACE06553499522B679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
Manifest number: 0411
Signing time: Sun 29 Mar 2026 06:01:18 +0000
Manifest this update: Sun 29 Mar 2026 06:01:18 +0000
Manifest next update: Mon 30 Mar 2026 06:01:18 +0000
Files and hashes: 1: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl (hash: XMMjRx7TRDlmG1963zR/mxmHGtxBPISVZ7GNOO9JOdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:b6:41:30:23:62:ac:e0:65:53:49:95:22:b6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
Validity
Not Before: Mar 29 06:01:18 2026 GMT
Not After : Mar 30 06:01:18 2026 GMT
Subject: CN=a8348d016d820ef38b650cc949876549720ca41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:ce:43:11:61:86:3f:1f:bc:4a:f4:49:96:
7d:d7:3f:30:4c:2d:7e:cc:23:bf:b1:e9:05:9a:24:
69:e0:90:84:b9:47:99:0d:33:2b:cd:cf:d3:c8:f7:
08:f0:55:0e:26:de:51:c4:79:eb:45:fd:73:ff:27:
9c:02:a9:33:8a:b9:4b:b9:a5:07:9e:b4:85:a4:51:
a9:55:e9:64:b7:17:04:55:2f:c5:8e:4f:5a:20:02:
52:8b:f7:b6:fb:ac:1f:26:b7:59:a3:cf:33:92:2c:
7f:0b:02:dd:d5:9f:90:f4:e1:6e:72:6f:0d:3c:d7:
1e:7d:89:92:e2:84:d6:f1:7c:b0:60:ee:dc:89:60:
ac:d5:74:91:96:ec:a6:07:eb:84:54:a8:7a:43:3a:
a9:c5:f2:40:90:82:ab:c5:83:1c:d6:7f:37:96:3e:
c5:bd:4e:cc:c3:19:e9:2f:7c:fa:cf:7f:f3:24:a6:
c8:82:57:fc:b9:49:9f:60:97:a7:62:1d:d0:9a:17:
da:3f:0b:67:30:58:85:ff:46:f1:ba:ae:3a:19:b5:
89:0a:2b:0e:0c:4f:8f:dd:a2:22:f4:d7:66:62:45:
72:41:64:c3:9f:20:23:70:2f:53:b9:39:af:6e:5f:
4e:79:c2:bf:21:80:dd:28:39:dd:47:ea:22:30:9a:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:34:8D:01:6D:82:0E:F3:8B:65:0C:C9:49:87:65:49:72:0C:A4:1A
X509v3 Authority Key Identifier:
keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:62:93:8a:2f:39:1c:f4:af:ec:0b:c8:8b:ed:c8:2e:36:58:
0c:60:50:ea:bc:76:0d:4d:14:00:c1:0b:8f:85:d7:00:5a:9b:
27:8c:f9:b3:71:ec:49:bd:98:b6:bc:5b:62:a9:b0:48:6d:c3:
a1:d8:e2:06:9c:e7:7c:1f:50:1f:5d:d9:74:ae:bc:3e:f8:0c:
17:b5:fa:e2:12:15:6d:eb:5c:45:7b:7e:4e:f4:6c:fc:e3:84:
7e:01:48:46:82:45:61:db:2c:29:fe:21:3f:73:d8:86:59:81:
e2:4e:b0:6f:f4:33:c6:92:9f:74:9a:b2:45:12:97:37:fe:e8:
1f:79:4f:72:a7:fc:01:86:db:a2:6a:74:e0:21:bc:4e:25:bd:
94:ff:bc:4b:e1:47:2b:3f:3c:9f:e9:80:10:b9:cc:61:42:cb:
c6:02:92:2c:91:e7:9a:e1:1a:a9:1f:0e:2b:50:69:76:ea:b2:
90:df:22:b6:f3:fc:b0:71:d6:33:d8:f9:cf:01:8e:32:f8:05:
e4:49:fd:d2:46:3a:53:e5:65:21:00:b9:c9:d1:5a:a3:ec:21:
14:05:15:33:2e:0d:72:cc:f9:a5:ac:57:92:17:1c:6f:23:19:
34:29:51:87:3f:5d:96:a0:7c:6e:cf:12:9d:d8:5e:c5:ac:82:
c0:b1:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:28 2026 by rpki-client