Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File: 7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier: z1GysGdVz0MhcY5P8WAw6Ky9cuWeun4NIApmlfX3tns=
Subject key identifier: 0A:56:92:72:2B:C3:C8:94:19:0A:29:3A:DA:62:72:97:D8:25:66:F0
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer: /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial: 019E2F9749206792E272E306FACF840B836D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number: 0B85
Signing time: Sat 16 May 2026 07:01:44 +0000
Manifest this update: Sat 16 May 2026 07:01:44 +0000
Manifest next update: Sun 17 May 2026 07:01:44 +0000
Files and hashes: 1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: M7ERVsV2NEz4gKzfdrDbv2fxnTaPz8MSX4hJni7Nq9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:49:20:67:92:e2:72:e3:06:fa:cf:84:0b:83:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
Validity
Not Before: May 16 07:01:44 2026 GMT
Not After : May 17 07:01:44 2026 GMT
Subject: CN=0a5692722bc3c894190a293ada627297d82566f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:ce:37:48:b1:12:8c:a9:86:4c:8d:16:8b:
12:80:05:62:07:b5:57:85:4d:e0:1a:63:ad:03:bd:
e8:56:10:04:ef:57:65:b5:18:bc:e6:8b:ef:80:cb:
24:fe:1a:98:8a:2b:f7:eb:4b:03:55:a8:22:93:61:
2f:e2:57:c5:fc:4e:0b:49:28:d1:e5:bd:2e:48:e0:
e5:3b:10:b9:2e:f2:e0:af:fe:f7:81:8d:cd:fd:1a:
1b:49:0a:2a:ad:73:a7:0d:c8:af:be:0e:bd:9c:28:
30:23:39:94:74:6d:7a:fe:fe:29:ae:fd:69:cd:13:
34:31:9e:30:51:58:e3:46:0c:99:9e:d7:d9:a9:1f:
cf:c3:44:e1:42:86:24:cb:32:3f:a4:7b:68:4e:32:
76:66:0a:67:45:5d:37:e2:2a:33:4f:79:30:07:29:
74:4d:7c:3b:7a:d6:5b:c0:15:b3:a4:f2:ad:fd:9e:
67:89:ef:0e:7a:38:d9:3c:f3:08:cd:9f:f5:1e:e3:
73:f9:4f:42:be:7a:3e:14:6a:d2:e1:d8:43:9f:7f:
24:31:02:54:e5:0a:36:5c:7d:fa:c0:dc:f5:69:4b:
14:0c:21:b1:c3:f7:72:e5:96:6e:5e:bf:e6:26:55:
a2:84:6c:d9:89:7c:09:2b:a4:7f:fa:0c:d3:08:9e:
16:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:56:92:72:2B:C3:C8:94:19:0A:29:3A:DA:62:72:97:D8:25:66:F0
X509v3 Authority Key Identifier:
keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0f:df:99:a4:28:9d:19:db:89:8d:74:bf:7b:9b:64:8d:40:
81:ca:fd:75:72:7d:8f:62:c1:c0:b2:78:ac:0b:70:07:a5:f8:
47:cb:3a:3c:50:ea:f4:1d:47:b4:63:e3:d4:4c:3a:ce:cf:6e:
c3:e2:f3:0d:1c:84:c8:cf:81:69:bf:49:c3:7b:19:da:b4:a0:
75:6c:d3:9c:81:7e:0a:a3:95:6c:86:f1:45:ad:c7:fa:f8:89:
66:b6:16:c2:5b:99:cb:70:a3:12:5d:62:43:dc:0d:b9:18:65:
bb:c1:02:f8:14:48:70:31:c9:32:e0:07:44:7d:ca:e2:49:c1:
bf:ee:f8:d0:71:06:55:54:71:d7:e7:32:d3:09:75:12:a2:0c:
41:cd:bf:24:ad:da:93:dc:27:18:9f:3a:c3:1e:94:1e:25:ed:
8c:12:36:91:a8:cb:ca:f4:b7:10:cb:25:23:32:55:62:14:b4:
d6:eb:e6:ea:24:0b:99:32:42:a4:19:4f:7f:09:df:21:d6:6e:
53:cc:0b:ea:eb:5f:32:dc:84:4f:25:44:64:a6:5e:16:c3:8e:
89:fd:e8:53:c2:8a:cd:eb:22:d9:77:30:5b:c6:a3:a4:4b:08:
84:68:01:63:95:b0:72:af:05:d4:c3:8f:65:cf:6c:9f:50:1a:
2c:97:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:32 2026 by rpki-client