Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
File: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft (raw, json)
Hash identifier: oEvjB+H5y4eZVbi6B6JKTFuQXtWu8nfqYC8Y7pGiuX4=
Subject key identifier: 21:36:A1:64:5F:2B:DE:59:CC:7E:06:CB:C8:63:83:BA:1B:46:24:8E
Authority key identifier: 7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
Certificate issuer: /CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Certificate serial: 019D38D35BE75B163C52C8CDE64D71C95807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
Manifest number: 0F8C
Signing time: Sun 29 Mar 2026 09:01:08 +0000
Manifest this update: Sun 29 Mar 2026 09:01:08 +0000
Manifest next update: Mon 30 Mar 2026 09:01:08 +0000
Files and hashes: 1: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl (hash: 4zJ5lwROwFvJB68F1o0/Pa/qpzXNJOlkTuO96oMCCxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5b:e7:5b:16:3c:52:c8:cd:e6:4d:71:c9:58:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Validity
Not Before: Mar 29 09:01:08 2026 GMT
Not After : Mar 30 09:01:08 2026 GMT
Subject: CN=2136a1645f2bde59cc7e06cbc86383ba1b46248e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:05:be:7a:91:d0:bf:49:db:6d:8a:5e:7f:
94:2e:2f:99:8c:26:5d:d0:2f:f0:b3:03:91:8b:25:
63:ae:b9:e6:db:43:97:47:5c:1c:be:ac:77:0f:0c:
37:6f:77:b0:95:2a:cb:c8:c9:ba:ca:9d:bf:2c:50:
32:39:f9:f0:f6:f6:26:20:e6:01:b7:8a:e5:26:f0:
c2:15:83:f1:30:4a:78:9c:c8:25:32:9e:a4:3a:7f:
c8:cc:0b:c8:cb:cd:8c:ec:7c:05:cb:f6:43:c2:0c:
86:fd:60:10:b1:1a:d2:34:4f:af:7e:1f:04:4b:43:
b1:d0:6f:2e:dc:2d:e3:e5:07:ad:7f:c0:c8:8f:fe:
3a:3c:d7:83:71:f2:65:d5:9b:93:77:03:f2:23:5e:
b3:4f:c0:14:02:91:b7:ef:ad:02:c7:8a:29:76:66:
94:34:da:5b:cb:c3:7b:eb:93:3d:13:9d:e5:98:52:
21:8a:b1:83:23:60:ef:76:49:bd:12:1c:59:05:62:
e9:ac:b6:52:e1:3d:5a:04:14:f8:e6:2b:eb:6a:56:
09:32:fa:ca:c2:36:31:60:a8:38:bf:38:31:ba:ca:
c7:16:ad:ea:ff:ad:18:91:c2:20:ed:d9:c0:26:84:
85:09:06:ad:9a:a9:9b:cd:2a:74:2b:d8:63:75:a5:
2e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:36:A1:64:5F:2B:DE:59:CC:7E:06:CB:C8:63:83:BA:1B:46:24:8E
X509v3 Authority Key Identifier:
keyid:7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ab:eb:b7:e9:79:6f:84:91:6f:71:5d:43:43:5e:0d:41:8b:
d3:22:5b:7f:cd:a9:5b:dd:5a:10:87:e8:1c:01:ff:f6:b4:37:
8d:bf:77:1c:97:5b:d3:ba:da:85:37:c2:9f:85:2e:90:dc:ff:
5d:60:b8:8e:50:b1:d1:ba:44:fa:ab:a9:e9:17:31:c0:ae:1e:
76:f2:e5:9a:1e:ee:24:fd:1f:01:62:2a:8a:93:3f:4d:93:4d:
e8:ec:23:8e:44:18:2b:d5:22:31:04:6e:60:e1:f3:68:c2:c7:
3e:26:fe:28:6d:1d:c8:f9:8f:65:22:d4:22:f9:66:49:08:2f:
39:3d:1f:e5:ff:18:09:ef:70:a7:ed:59:22:62:2f:78:33:11:
16:a7:9c:1f:0d:33:06:39:57:78:ec:bd:ab:ba:89:e4:6b:a7:
d4:22:f9:d2:5a:94:48:fc:3a:af:66:69:f4:2d:8a:70:66:f6:
f0:9c:2d:f8:62:76:15:54:fa:60:18:05:a0:93:13:1e:74:9c:
be:74:a8:c8:d3:85:15:f8:23:e5:e7:ff:e9:92:05:5f:ce:9f:
31:29:20:bb:5c:d9:08:79:7b:56:e8:96:54:a8:0c:a4:fe:ba:
de:a2:20:a8:b4:0e:5b:b6:ce:64:ab:99:4a:42:85:10:c6:43:
d4:9b:58:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:45 2026 by rpki-client