Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: YRJ8usBGSYdxbT4PilkYDQx+J2lCIGSwkod9Zcqwx1M=
Subject key identifier: FC:BC:13:99:96:7C:CD:C9:CE:8F:62:70:75:40:5A:FD:A9:B9:70:66
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 019D36E4B770874038CCA09574C426371B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0D10
Signing time: Sun 29 Mar 2026 00:00:52 +0000
Manifest this update: Sun 29 Mar 2026 00:00:52 +0000
Manifest next update: Mon 30 Mar 2026 00:00:52 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: 2m645Kyl8IMkNqJwpmDR9feyVf1BQetvjKuAV2hz9Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:b7:70:87:40:38:cc:a0:95:74:c4:26:37:1b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: Mar 29 00:00:52 2026 GMT
Not After : Mar 30 00:00:52 2026 GMT
Subject: CN=fcbc1399967ccdc9ce8f627075405afda9b97066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:80:0a:c9:7b:c1:6a:ff:3a:fd:89:39:10:
7b:f1:67:26:7e:c5:67:34:38:86:7e:8d:6f:b2:08:
96:4b:76:ee:e1:9b:bf:cf:66:16:53:07:af:98:70:
1d:8c:3f:20:0f:06:ef:13:29:b5:78:3b:89:77:81:
bd:22:68:ff:46:f8:39:4a:26:8d:ca:0a:a6:e8:8d:
4b:0d:c0:11:8c:34:ad:72:6f:fe:75:6d:ad:bb:11:
f3:9f:18:89:e7:31:5a:66:34:2f:e9:45:0b:d8:51:
2f:05:24:ac:0c:3e:de:98:0f:c9:44:58:8f:25:d5:
fe:4e:92:54:38:54:7f:d4:cc:7e:bc:e4:c2:4d:89:
3d:6e:d2:f1:19:79:fe:af:f2:41:d5:e0:d1:3f:6d:
f9:7a:bc:69:79:23:d5:be:88:87:7f:6f:60:36:b8:
a1:ec:31:12:a6:d8:dc:71:5a:68:fe:34:97:e4:b8:
57:69:0a:a7:3d:b0:b0:81:5b:e8:51:40:9e:7a:f8:
04:3f:04:a9:70:de:1b:95:00:7b:82:9d:04:33:24:
a8:7f:4b:1c:13:78:ec:be:79:cb:aa:a1:2d:56:8c:
ae:18:f9:79:8a:d4:61:75:3d:5d:94:01:a3:cd:c1:
a0:ba:46:d6:52:3a:8f:e4:d9:f0:cf:22:d4:95:30:
67:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BC:13:99:96:7C:CD:C9:CE:8F:62:70:75:40:5A:FD:A9:B9:70:66
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8a:fc:3c:f7:71:9b:15:b6:0c:1b:b0:22:1a:5b:aa:ee:bd:
07:db:4e:19:9b:e3:2b:22:94:b7:2d:e1:08:d5:82:8a:66:83:
be:10:13:3e:4d:a1:95:20:be:c6:46:74:d3:67:d5:df:4a:37:
c7:14:a5:31:e9:40:6a:9e:c3:c4:29:22:8e:9c:6c:52:a0:04:
65:d1:f0:9f:6c:d0:ae:f2:5f:29:61:65:99:5f:e4:d5:96:97:
c0:d9:cf:58:44:50:9b:5f:67:ca:1e:5d:61:5a:e1:ae:41:f5:
54:d7:35:44:86:7f:f9:4a:19:e5:b4:ce:55:d5:0e:8a:8e:14:
ab:03:bc:c7:10:c0:ec:83:8c:47:2e:c1:31:05:61:6d:91:00:
68:f5:ac:fe:d7:15:99:6a:62:ff:5b:7a:38:01:62:3a:a2:6e:
b6:2f:1d:31:60:8e:31:1c:78:a9:e1:96:c1:32:bf:39:c1:2a:
32:2c:58:69:ef:1c:bd:e9:ff:78:56:85:52:9f:34:99:42:c2:
25:76:9a:83:cd:b2:0f:a3:53:b5:8c:b2:0d:6d:30:ed:65:85:
c4:e8:4b:97:d3:d0:30:ef:c2:6c:bc:bd:bf:a8:47:99:fa:8b:
b6:6e:4e:3e:d8:69:cb:f6:09:7d:45:5e:c7:5a:a1:69:20:77:
3d:b0:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:24 2026 by rpki-client