Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
File: 7iNCg3Pc6KX5f0XvxsKLn7581U0.mft (raw, json)
Hash identifier: S5WxRF0ZOSid9LAJyLKO9pl2Z1lkxRc6WSEOqKKlvLw=
Subject key identifier: 0C:9E:F8:D8:F6:27:42:89:D9:58:E5:6E:9A:32:F5:84:56:7D:C7:23
Authority key identifier: EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
Certificate issuer: /CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d
Certificate serial: 019EE39EB4A5A0B0A7447670165A4ED3CF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
Manifest number: 02D4
Signing time: Sat 20 Jun 2026 06:01:29 +0000
Manifest this update: Sat 20 Jun 2026 06:01:29 +0000
Manifest next update: Sun 21 Jun 2026 06:01:29 +0000
Files and hashes: 1: 7iNCg3Pc6KX5f0XvxsKLn7581U0.crl (hash: 3k1zVyMsrYVP6cj3Bjuu1kfpmbBbMKd3mmfF8DrPvfI=)
2: qwQxCub0ZLxdSIPTyyt0hid0rjE.roa (hash: 45em9x7vt23Yzt9V9VCNiHhaJfkIP4nZW7OBnn0WqDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e3:9e:b4:a5:a0:b0:a7:44:76:70:16:5a:4e:d3:cf:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d
Validity
Not Before: Jun 20 06:01:29 2026 GMT
Not After : Jun 21 06:01:29 2026 GMT
Subject: CN=0c9ef8d8f6274289d958e56e9a32f584567dc723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:55:ec:92:46:2a:b6:36:5d:e7:50:34:f1:
95:8c:17:b6:e2:20:28:c4:3c:ed:80:b0:84:fa:c8:
c8:3d:ff:c4:53:24:c6:51:1f:8a:cd:6b:06:93:37:
02:4b:0b:ae:53:0d:06:fa:2a:7b:b7:57:f5:89:fc:
d5:9a:1c:42:22:67:de:59:b1:d5:d8:08:3c:a5:6e:
ba:6f:32:70:2d:1d:da:e0:4f:06:bd:ea:40:2f:49:
22:ed:a6:51:6e:aa:c3:5e:59:d3:b9:86:35:46:7a:
d1:44:7e:85:95:ba:fc:52:3e:a9:9e:73:3a:7f:80:
d7:a7:a5:a6:2a:63:58:db:23:ae:f7:6d:68:a9:51:
78:d3:e6:eb:18:79:e9:07:f5:41:5c:90:b2:4e:23:
df:e5:be:10:a8:ae:64:a0:00:3b:8d:61:28:1b:f7:
13:c0:1a:60:b9:43:3c:32:b2:1f:9d:ec:7c:2d:61:
14:26:46:ab:af:de:ca:b0:a0:ec:9f:c8:4e:19:cc:
db:af:13:ed:4f:31:56:01:e6:d8:cd:f3:c2:a3:6e:
2b:80:0d:7b:16:2f:16:8f:85:b9:42:5b:81:a6:d5:
0e:bf:03:30:85:79:22:56:f3:a3:f6:72:5b:d5:77:
22:0a:14:d0:30:68:5f:49:e2:9a:75:9f:81:cc:b3:
32:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9E:F8:D8:F6:27:42:89:D9:58:E5:6E:9A:32:F5:84:56:7D:C7:23
X509v3 Authority Key Identifier:
keyid:EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ec:c9:e5:28:a8:d2:b3:b7:99:74:9e:ad:37:1e:f9:be:b2:
32:82:55:a4:82:29:7f:1b:db:20:e3:5c:b1:35:86:37:d4:f0:
ab:7b:04:5a:7f:7b:12:27:d1:bd:fe:8f:df:ce:60:45:42:5a:
ee:b4:50:6c:27:fa:79:43:08:9f:8a:34:d2:e2:1e:25:9a:31:
fa:2c:0c:e8:21:d2:01:ed:ef:94:90:83:91:9a:ab:ff:85:e0:
d4:80:31:9d:19:f7:65:80:17:e4:80:88:fb:b5:b6:79:8c:9d:
9e:ab:d5:92:53:89:5d:98:a5:90:6d:74:b3:70:8b:67:96:ab:
17:29:34:46:70:4a:a6:6d:64:dc:ec:c5:9f:44:51:81:90:c1:
2f:06:b6:de:15:e4:6e:56:e4:32:ed:25:d2:28:e8:f5:f6:42:
7e:5b:63:c5:9e:07:8a:70:7d:6b:ae:ea:51:32:b1:c9:97:73:
8f:89:e6:41:43:b7:29:c0:36:4e:dc:fc:8d:77:1c:ba:3a:05:
2e:e9:3f:7a:18:44:2b:90:1c:9a:a3:6f:eb:86:24:90:fe:9e:
f8:20:8b:80:e1:59:36:23:1c:4a:3a:52:8d:bb:b4:97:df:ee:
8f:20:18:97:11:48:2c:3c:2a:66:e8:fa:c9:b9:d3:81:3d:d1:
6b:75:42:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:55:22 2026 by rpki-client