Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File: 7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier: w2R3psuPSxWWlzSThAqh4aiCzjAk7B8zE6+7iqhk4no=
Subject key identifier: 2A:91:4F:FE:E5:80:DA:19:51:F2:49:01:66:F8:DF:A8:A0:A0:B6:DD
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer: /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial: 019F19430AD421A5EA7E06250C5F20A3CFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number: 0BFE
Signing time: Tue 30 Jun 2026 16:00:51 +0000
Manifest this update: Tue 30 Jun 2026 16:00:51 +0000
Manifest next update: Wed 01 Jul 2026 16:00:51 +0000
Files and hashes: 1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: kOyoWOvYfVqukIyEFdngyXCPCeYnoAlFfJ9iXDARaP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:0a:d4:21:a5:ea:7e:06:25:0c:5f:20:a3:cf:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
Validity
Not Before: Jun 30 16:00:51 2026 GMT
Not After : Jul 1 16:00:51 2026 GMT
Subject: CN=2a914ffee580da1951f2490166f8dfa8a0a0b6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:7f:94:c1:45:bc:15:cb:f2:9f:8d:03:cb:
00:bc:e3:95:9a:4e:d4:23:01:cd:b4:fe:e4:c4:f6:
4f:21:e7:ac:47:db:63:60:fe:18:20:49:27:89:36:
49:b5:bf:8d:40:5a:03:8c:b4:c0:79:0c:cc:2c:b3:
fb:29:4c:93:02:bb:a0:58:75:87:2f:49:ea:ab:ed:
e0:af:ca:e1:26:94:fa:24:e7:fb:eb:01:65:46:04:
de:d5:8c:37:94:46:b7:62:33:d6:a0:19:ae:a4:62:
b3:8b:6c:4d:34:68:93:de:0f:fa:69:c2:ba:ed:01:
57:21:ba:60:2a:3f:c4:35:90:b2:56:7b:93:5c:99:
2b:36:a8:7b:88:89:a9:e9:1c:2d:41:aa:e4:e1:0a:
89:e1:a8:dc:41:55:ac:f3:d9:11:2e:9a:d6:8d:f0:
f0:f1:21:a6:a9:10:fe:ad:60:a1:38:97:db:bc:d2:
34:cd:ab:73:60:5e:4a:46:01:fd:9c:f5:ae:4e:5e:
3d:87:21:12:b2:75:8c:b4:e0:58:b1:f7:3a:92:6f:
43:67:5d:fe:f8:48:0f:dc:0d:d8:b5:61:4a:9c:02:
b7:66:54:07:54:4c:99:23:28:99:3e:39:2f:e2:b3:
38:d1:c1:94:64:93:d7:09:1f:0a:35:af:49:09:2c:
90:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:91:4F:FE:E5:80:DA:19:51:F2:49:01:66:F8:DF:A8:A0:A0:B6:DD
X509v3 Authority Key Identifier:
keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ba:0d:76:9a:4c:5a:7b:f3:b8:9e:98:23:2b:c6:2a:8e:2c:
7a:62:a5:cc:fb:f2:b5:81:97:f8:39:9c:d3:5d:76:85:fa:c9:
fe:f0:3b:47:93:e0:c5:38:0e:38:a2:02:c5:a0:49:54:2d:40:
d2:30:0e:2d:73:b9:ac:b6:a7:55:e9:5f:1c:ea:ff:3a:74:ed:
89:d0:4d:e6:ae:98:e8:bd:c0:56:fe:6e:f2:e9:56:77:3c:14:
e2:4b:51:13:f6:5c:14:a8:93:72:7e:44:e8:e9:8f:03:a6:00:
f4:3c:94:0e:3d:0d:e5:d5:f0:6b:1d:95:01:3a:23:05:f1:46:
71:a2:7b:ea:0f:76:27:8a:e9:92:bd:86:36:ec:06:b2:58:5a:
40:2f:3b:7a:12:74:d4:63:93:6a:c6:f0:e7:c8:94:90:4e:74:
32:8c:12:38:d8:23:e9:f7:f7:59:1d:50:d7:43:88:1e:70:32:
15:b1:7d:f2:09:3d:de:72:c1:9f:25:a4:e4:3a:b1:7d:e7:ca:
a6:d5:17:5b:b6:83:5b:62:63:60:19:c1:3e:82:9e:d1:21:6e:
68:d8:39:03:4a:f5:7b:8e:09:fd:5a:08:88:45:ee:14:b0:86:
b5:0b:d2:2f:c1:e7:6a:b9:e0:78:40:ed:2c:08:e7:41:73:ff:
bc:41:04:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:19 2026 by rpki-client