Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
File: 7pl3APBqqbf8Ia67FWIpnVpiXdw.mft (raw, json)
Hash identifier: P4cmVrFdRt30lsdNH6Sv+4M++OXHnIOEG+q6m/Am+Uw=
Subject key identifier: 18:50:C8:C6:AC:B4:4E:0A:05:BA:EB:2D:7A:54:8F:23:6F:7F:78:95
Authority key identifier: EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC
Certificate issuer: /CN=ee997700f06aa9b7fc21aebb1562299d5a625ddc
Certificate serial: 019D390A0C372511B5F8FB8521E7F6E35F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
Manifest number: 01BE
Signing time: Sun 29 Mar 2026 10:00:52 +0000
Manifest this update: Sun 29 Mar 2026 10:00:52 +0000
Manifest next update: Mon 30 Mar 2026 10:00:52 +0000
Files and hashes: 1: 7pl3APBqqbf8Ia67FWIpnVpiXdw.crl (hash: EqzJU7cv8mMX6mCXHj6hOowpgvLyhguH4/4oYK+XH9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:0c:37:25:11:b5:f8:fb:85:21:e7:f6:e3:5f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee997700f06aa9b7fc21aebb1562299d5a625ddc
Validity
Not Before: Mar 29 10:00:52 2026 GMT
Not After : Mar 30 10:00:52 2026 GMT
Subject: CN=1850c8c6acb44e0a05baeb2d7a548f236f7f7895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:77:7b:c6:ab:fc:fb:c5:9b:f9:28:7e:a4:
bf:21:a3:d0:0e:c2:81:15:e5:be:0a:2c:49:a1:58:
85:19:3c:a3:33:dc:a4:be:29:6e:c1:ec:4d:3d:1f:
61:64:8e:96:4f:e8:2f:97:f3:c3:d2:90:5a:ac:28:
04:92:25:d1:bb:b8:25:33:d9:f6:e4:41:46:bf:59:
85:29:03:c6:ea:ef:e9:f7:a0:21:70:8d:0d:cf:61:
b3:fa:1c:a4:e8:e4:dd:b4:9e:e6:fe:d1:18:a5:40:
1f:5e:e8:53:1e:61:e4:d7:f1:c5:04:9a:d5:1b:12:
84:d0:f1:86:33:04:bc:83:ce:0e:cd:d5:06:65:c9:
42:49:e6:c2:68:58:7f:d0:e6:91:8a:5b:71:84:a3:
1b:07:86:33:fe:fc:30:6f:c5:94:01:ff:20:3e:22:
a6:e0:1f:92:c3:b7:82:16:1d:29:86:a3:4a:29:0c:
a4:01:fc:e5:6f:ed:ea:3e:b3:51:52:91:a7:0d:4f:
6c:1d:2b:63:a3:1e:e1:75:58:a9:11:d3:2a:5c:07:
7f:7c:39:57:3b:cf:00:47:29:b3:35:2b:33:fc:85:
36:51:0e:40:9c:2a:45:38:cf:d5:9e:7d:59:72:99:
3b:00:4d:e7:62:3a:4a:54:9b:33:8c:8d:0e:c9:cb:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:50:C8:C6:AC:B4:4E:0A:05:BA:EB:2D:7A:54:8F:23:6F:7F:78:95
X509v3 Authority Key Identifier:
keyid:EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c0:b7:6e:8f:e6:6a:b8:bb:40:a4:f2:06:20:75:d7:07:d8:
6c:b7:b0:be:ac:78:b1:e4:3e:88:c3:c0:8c:ab:93:cd:cd:2b:
83:18:d4:3e:89:61:36:98:b1:d5:3c:7a:18:66:90:62:fe:d3:
d0:96:d6:74:3f:1a:7b:4e:09:60:af:17:a3:11:e7:e8:38:a1:
81:05:e2:e4:b7:2c:3e:63:80:58:ef:31:c0:d0:b4:35:96:16:
d8:60:97:79:b6:15:aa:81:bb:8c:4a:f2:96:2d:2e:15:cc:7f:
a6:dd:42:e6:b1:8b:43:79:4d:72:ae:e0:67:c7:66:e4:a2:b8:
44:2e:3e:23:dc:49:f0:05:10:bf:cd:b7:63:9b:76:29:6b:27:
96:33:e2:3b:f1:f0:af:1f:b1:c5:af:e9:b8:4a:ad:9c:3a:b7:
a6:db:2b:a6:37:be:66:7e:26:71:49:0a:1b:4b:7d:6a:ed:f7:
b6:be:3a:7a:b0:c2:69:5b:04:43:b9:f0:52:b8:73:63:dc:cf:
d4:6c:65:d6:a0:e6:27:2d:97:e3:e6:3d:5c:3b:54:55:f3:08:
fc:5f:f3:08:e0:02:3b:d0:78:c7:cb:3f:0c:df:f5:a1:81:98:
0c:64:11:48:3c:17:a9:13:99:94:f3:ca:ef:56:ad:19:43:33:
12:c2:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:08 2026 by rpki-client