Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
File: 7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft (raw, json)
Hash identifier: jBeGKvUI68Afh+jQXA7UMxxFjX57gKQbsiczx/vatuQ=
Subject key identifier: 4A:B2:A7:38:F1:ED:82:68:DA:70:9E:D6:CC:91:9C:1E:65:58:89:6A
Authority key identifier: EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
Certificate issuer: /CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
Certificate serial: 019F1942F979C37BDA4338982AACAC56DA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 16:00:46 +0000
Manifest this update: Tue 30 Jun 2026 16:00:46 +0000
Manifest next update: Wed 01 Jul 2026 16:00:46 +0000
Files and hashes: 1: 7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl (hash: Zj5R6vbW9OF8haZ9bCKzN3qN/gpmcObRaa31W16EvRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:42:f9:79:c3:7b:da:43:38:98:2a:ac:ac:56:da:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
Validity
Not Before: Jun 30 16:00:46 2026 GMT
Not After : Jul 1 16:00:46 2026 GMT
Subject: CN=4ab2a738f1ed8268da709ed6cc919c1e6558896a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:a5:0c:5a:e4:91:8a:54:70:b1:13:b0:f5:
ed:9a:f6:b1:88:e3:df:c4:17:7d:b7:12:6b:a9:84:
c9:98:72:3f:d1:11:51:a0:16:a2:e3:6a:f3:23:ab:
de:fe:7c:ba:e0:91:05:85:03:91:b9:8b:73:2c:68:
0f:e2:bd:ec:0b:fb:0d:eb:54:9d:a1:93:04:c6:77:
88:42:69:e9:fe:fb:6e:40:a2:f6:ef:70:d8:13:95:
5b:d0:aa:c2:44:40:d4:6f:59:d3:3e:c9:ca:65:19:
9e:59:bc:4b:d8:78:4b:03:be:b9:a2:a6:2e:d6:e1:
26:6b:1a:59:2e:58:46:59:b2:7d:65:fd:73:21:67:
d8:d2:3f:3d:b6:44:e9:9d:77:8a:f9:6a:43:05:84:
5b:d2:0a:f3:10:ff:32:0c:6e:d2:85:28:ad:72:72:
f4:b8:e6:f8:e8:49:a7:af:e0:eb:0e:e0:6f:f9:23:
33:bb:3f:ad:14:f2:e1:d4:67:96:4d:c0:da:a6:01:
7c:42:4f:8b:c6:0e:d7:c6:cc:45:c7:e2:fd:38:d8:
74:5c:bd:5c:ef:e9:4d:8b:2b:56:e3:9d:8f:cb:11:
a7:0a:a6:2a:66:1e:c3:3e:ae:fe:24:b2:74:14:6b:
e8:81:e3:db:22:69:6f:29:9e:fe:c2:8d:83:b1:dd:
af:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B2:A7:38:F1:ED:82:68:DA:70:9E:D6:CC:91:9C:1E:65:58:89:6A
X509v3 Authority Key Identifier:
keyid:EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:32:73:1c:b7:37:7a:4e:1e:a9:6f:a5:ec:9e:b6:ee:65:46:
c7:04:64:5f:05:09:40:f4:47:ec:8c:4c:1d:09:38:67:42:e7:
1d:d4:b0:dd:53:9d:85:a2:50:38:ca:d3:ac:b6:8b:91:b6:61:
e9:a6:86:5c:31:84:25:04:6f:1e:bc:a1:24:ef:e9:fc:13:44:
88:7d:04:41:94:f2:3b:69:f7:2a:ba:64:b6:2c:68:c8:7f:7e:
2a:92:0f:b9:a8:25:b3:02:c1:7a:79:69:3a:54:e2:88:00:57:
21:53:ba:d8:8c:cc:56:08:22:a8:99:cf:fc:f9:22:ae:60:a0:
04:85:bf:b7:25:7a:75:c0:8b:c8:8d:de:65:a0:fd:97:33:68:
fa:46:8e:b3:40:c0:90:8a:2a:2d:98:34:29:48:4a:eb:0a:1a:
10:40:5a:99:11:8b:7d:01:9f:fe:a1:18:a3:dd:23:2f:6f:ca:
b8:9b:87:3f:19:4f:9a:fe:8e:eb:af:0b:b8:9c:a0:bb:64:c0:
d0:0e:58:16:42:f8:94:08:e1:a7:fe:c5:52:51:ae:63:b4:4d:
1f:bf:fd:2d:6b:89:38:cb:31:0d:7b:53:3f:4d:8a:ff:1d:f7:
12:cc:67:27:28:d7:d7:9f:24:5b:0f:ff:02:b6:af:6d:71:22:
a7:6e:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:43 2026 by rpki-client