
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
File: 7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft (raw, json)
Hash identifier: M89JzoW4fD5wZJXKW+/tNMm+9F5IULsTWQt3GmAqi8k=
Subject key identifier: 3D:69:1F:AE:95:C4:2F:81:6A:07:D6:4D:48:85:63:57:F3:CD:58:B6
Authority key identifier: EF:0F:20:53:3D:CC:79:95:A2:8C:F6:77:67:A0:41:69:86:67:C4:CD
Certificate issuer: /CN=ef0f20533dcc7995a28cf67767a041698667c4cd
Certificate serial: 019F1943E995D87C8B047B2B1973985C326D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
Manifest number: 0ECF
Signing time: Tue 30 Jun 2026 16:01:48 +0000
Manifest this update: Tue 30 Jun 2026 16:01:48 +0000
Manifest next update: Wed 01 Jul 2026 16:01:48 +0000
Files and hashes: 1: 7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl (hash: dcJ3FSEMRS+0HgPDSIrmPuRDomVz064kv2A0r2ucqHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:e9:95:d8:7c:8b:04:7b:2b:19:73:98:5c:32:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0f20533dcc7995a28cf67767a041698667c4cd
Validity
Not Before: Jun 30 16:01:48 2026 GMT
Not After : Jul 1 16:01:48 2026 GMT
Subject: CN=3d691fae95c42f816a07d64d48856357f3cd58b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:51:83:e4:b0:54:8d:a5:04:6b:5c:b9:91:
af:f3:0a:0e:32:1e:8a:f3:0f:2e:ea:c6:bf:67:a5:
a6:db:dc:46:aa:45:6f:39:da:59:d8:5c:e6:16:f8:
95:fe:4e:73:3f:9f:b5:bd:0a:ce:b2:65:2f:52:9e:
e7:d7:43:2e:8e:85:b3:8c:d1:92:b7:83:ce:71:bb:
17:8d:1a:7b:e1:b0:2a:19:06:d9:4d:fe:8a:0e:4a:
56:da:5e:e1:ed:26:b8:21:c0:b7:21:f4:c9:c6:b6:
a5:c2:f9:fe:4d:b2:c7:cd:d7:d1:22:8f:9d:eb:8a:
0a:af:51:d0:de:72:e9:e6:10:f5:4b:cd:c2:4d:4e:
e3:af:97:55:0f:db:5c:78:56:66:b6:fc:4d:89:0a:
d0:6a:90:ff:15:2d:d6:90:2f:d9:66:c7:e2:6b:b2:
f9:07:76:d4:4f:8d:3c:c4:1c:2d:f4:54:9f:b0:eb:
c9:3c:fc:00:a1:fe:ed:59:94:5b:bd:2e:31:d4:08:
c8:99:73:68:8d:a2:29:04:33:e1:85:63:7f:84:41:
c0:0d:b9:02:0b:54:f8:a0:5b:42:7a:ff:95:43:73:
2c:14:af:ff:34:91:93:08:63:b5:29:8e:bc:6d:e1:
e3:c4:a4:fb:70:74:ca:24:6e:e8:d8:ec:42:c7:fa:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:69:1F:AE:95:C4:2F:81:6A:07:D6:4D:48:85:63:57:F3:CD:58:B6
X509v3 Authority Key Identifier:
keyid:EF:0F:20:53:3D:CC:79:95:A2:8C:F6:77:67:A0:41:69:86:67:C4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1a:7b:0c:ef:0b:94:9c:e5:34:82:61:fc:99:0c:5b:04:34:
e6:b0:46:c6:03:67:e7:c5:6c:77:28:0d:96:cc:32:7f:2e:6f:
04:b9:a9:f9:bf:a7:23:e9:94:c1:35:25:44:3c:5e:38:e3:20:
9a:69:1b:1c:89:89:16:b1:3e:43:dc:2a:fc:d4:f8:90:20:d2:
ab:13:20:82:25:42:4a:7e:42:a4:ac:30:14:32:6e:bf:55:68:
3e:54:91:3e:89:ca:53:87:aa:d5:86:6f:c9:c7:c0:07:b6:3e:
dd:74:0c:fd:8e:56:a1:92:b1:9b:61:13:dc:c7:be:ab:64:ea:
34:39:9d:dc:4f:b3:8c:b9:39:6b:d2:74:1c:db:ff:22:87:15:
c1:74:0b:18:5e:61:4b:74:00:98:93:4d:ba:a3:e0:cd:36:1c:
6d:92:34:22:34:52:6b:86:0c:9d:b6:cd:9f:f6:07:c1:99:fe:
e5:e1:60:22:30:b9:bb:d7:1d:0c:fd:d2:a7:65:6e:5f:67:aa:
d2:11:ea:01:b3:5e:5a:ee:00:3b:74:f9:fa:9f:93:be:5a:95:
1e:85:f8:8b:10:17:33:96:19:ef:d2:9d:cb:f8:10:d1:b1:1c:
73:4b:d3:a8:64:2a:22:ff:24:fe:6a:fb:71:92:f9:1c:b9:2e:
a2:34:50:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:35 2026 by rpki-client