Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File: 7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier: satfF0pdCAfBptfZpZk1mZzfXHSS3JnsGaKM7ahWKbo=
Subject key identifier: DB:6A:5E:11:39:A5:39:BA:E5:02:CD:A8:E3:BD:2D:1F:7A:76:F1:90
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer: /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial: 019F17F920A396469DBD0CF1E620A29DF5C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number: 0966
Signing time: Tue 30 Jun 2026 10:00:30 +0000
Manifest this update: Tue 30 Jun 2026 10:00:30 +0000
Manifest next update: Wed 01 Jul 2026 10:00:30 +0000
Files and hashes: 1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: M5JPq39zbeAUd6HNQfWe2u98akbnr67zu4JP5hKp11o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:20:a3:96:46:9d:bd:0c:f1:e6:20:a2:9d:f5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Validity
Not Before: Jun 30 10:00:30 2026 GMT
Not After : Jul 1 10:00:30 2026 GMT
Subject: CN=db6a5e1139a539bae502cda8e3bd2d1f7a76f190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:29:4f:d1:e9:8d:dc:09:1e:50:24:68:f0:
c2:75:e6:97:af:4f:78:d3:a0:63:2d:94:80:7c:ce:
0e:c5:08:7c:60:7f:5b:3c:44:4e:cf:20:8a:3f:a5:
5e:b3:8b:74:ff:34:e4:1c:50:d0:8f:97:98:9f:34:
bf:89:f4:b6:4d:96:c0:24:2c:e7:4c:26:95:61:2c:
55:5f:40:ee:68:e6:ff:ec:62:e5:2f:4d:13:d0:0c:
d8:47:72:e9:b4:f7:e2:1e:76:fd:0f:49:b4:6e:d8:
33:4c:9e:a2:ef:3a:67:06:8a:58:0c:62:7b:3d:e4:
0d:07:db:48:a6:ec:18:ce:d4:c9:b6:27:29:c1:09:
1a:93:17:ea:45:17:fc:2d:c4:04:b5:bc:c1:cc:01:
ee:46:9c:dc:f5:e6:b4:71:16:cb:8a:1e:f6:cd:b2:
72:1c:f7:6c:e2:15:dc:c4:17:45:51:e2:54:2a:46:
06:35:db:52:a2:1f:0e:aa:fb:c5:90:01:c6:48:2a:
c7:de:fd:d5:da:08:5a:a2:cc:79:5b:64:e0:38:3c:
76:b2:ed:b1:95:85:ad:d9:5a:e3:81:31:71:27:f7:
0a:97:65:75:73:e7:61:3f:8a:e0:76:fd:7a:8c:57:
70:f1:bd:17:6b:dc:41:51:24:e2:ce:15:fb:84:63:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6A:5E:11:39:A5:39:BA:E5:02:CD:A8:E3:BD:2D:1F:7A:76:F1:90
X509v3 Authority Key Identifier:
keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b5:99:fc:26:c3:0a:8e:65:3a:6c:03:d2:3d:60:2d:d1:7c:
b1:ef:d9:22:a1:2f:4e:5d:c8:af:3e:38:2b:8f:19:be:d6:5e:
8e:9d:2c:55:50:52:fe:db:59:30:2e:7b:8a:1f:6d:fa:19:60:
62:b8:f9:fb:03:bb:47:74:15:3b:0d:ef:2d:5e:bd:de:a0:87:
d0:6d:e0:65:08:d7:23:43:c3:93:b6:ff:96:bc:46:ac:69:da:
8a:4c:a6:57:26:cc:81:7a:39:ef:25:94:94:b1:2e:22:17:fa:
69:66:15:04:81:d5:dd:bf:72:19:d8:33:de:3f:6d:0e:d6:c3:
4c:09:d2:3d:dd:72:fd:d0:86:9c:da:8a:31:69:25:32:40:78:
13:58:ba:22:e3:b7:f6:63:99:98:b0:b7:81:c1:62:4c:83:bd:
1a:91:40:4c:9f:9f:79:28:09:e7:82:92:08:37:93:03:b9:41:
4a:a0:80:31:f9:b3:a7:72:3e:67:97:9c:5d:af:53:5f:32:1c:
69:15:c3:04:7a:a3:5a:ef:3f:b2:ee:73:38:1d:c0:02:57:5b:
da:c0:63:36:92:63:23:54:b8:c5:f5:ff:3b:89:67:76:15:90:
97:ad:e5:24:7a:e3:99:c3:97:d5:3e:5a:ea:48:7a:b5:4a:68:
d2:3f:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:05 2026 by rpki-client