
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File: 7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier: 8+JUdKECmK3rIiX1zgLAXWdt5/lGfqCvjneCk2un7F4=
Subject key identifier: E2:EB:57:25:B9:03:A9:C1:54:6B:B1:05:AB:BF:9E:00:15:A0:C2:9B
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 019CE6DB127F3BB27BB33CBA479E786AA480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number: 071D
Signing time: Fri 13 Mar 2026 11:00:42 +0000
Manifest this update: Fri 13 Mar 2026 11:00:42 +0000
Manifest next update: Sat 14 Mar 2026 11:00:42 +0000
Files and hashes: 1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: 4tujOi1nIGGteIrnP5IAMMn9pW6fuDTP5TATGnivNRA=)
2: Owvlv8hWBTHcz2euf127oUQRekA.roa (hash: fn0HdByXArdl+3YOgps4Nupdy6FY/Lip+b5OMSzQ6L4=)
3: wBNaW5KI2bk7rKftygUeDW0sZPw.roa (hash: 92vTX700phahUrU+qTurYQRSfJQb0PnxRKVm95D4uhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:db:12:7f:3b:b2:7b:b3:3c:ba:47:9e:78:6a:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Mar 13 11:00:42 2026 GMT
Not After : Mar 14 11:00:42 2026 GMT
Subject: CN=e2eb5725b903a9c1546bb105abbf9e0015a0c29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:4c:6f:42:09:a9:97:94:f7:67:16:de:3e:
25:5d:8b:66:54:e9:6f:46:e6:1e:ea:51:ff:aa:87:
0c:53:e6:6f:5b:31:83:72:b2:00:e7:96:4e:8f:e8:
df:66:57:c4:9b:83:0c:88:52:25:50:1e:e4:c5:af:
27:9a:cd:37:d9:ec:e8:2f:ab:fb:dc:49:05:5c:1a:
4a:58:9d:c1:a6:94:55:64:af:89:5a:ef:ce:7f:09:
a3:83:cb:a1:52:16:a1:a9:25:e0:5f:51:1e:31:f7:
9d:14:db:9a:ed:32:3a:ee:bd:8a:ba:3e:65:ff:3d:
b1:8c:8a:83:2e:c1:78:45:b0:2e:4d:b8:df:4d:85:
85:d6:48:9a:51:3d:f8:91:4c:1c:e8:2c:80:32:8b:
40:44:d0:10:50:0f:27:17:68:fd:88:b6:e8:f6:90:
f5:8d:da:c1:4f:eb:47:4d:5e:86:a2:4b:6c:69:40:
6f:fd:2f:5c:08:0a:b1:d4:79:c6:d2:82:54:13:8b:
02:b5:6f:94:97:a4:13:67:d5:b1:43:84:83:4f:5c:
3c:67:bc:cc:ff:cd:11:ee:3d:63:ce:33:b0:da:4d:
03:7e:8c:ee:1d:e5:2b:55:01:52:25:b4:96:c4:fc:
2b:3c:c2:be:c3:c8:57:d6:6c:ca:f3:61:49:49:e0:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EB:57:25:B9:03:A9:C1:54:6B:B1:05:AB:BF:9E:00:15:A0:C2:9B
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2c:a3:0b:2e:08:0c:27:04:fb:ed:55:91:b5:10:28:be:fd:
2a:4f:42:76:55:ae:66:8f:dd:da:c5:3f:aa:30:ae:c6:bb:92:
3d:35:21:ca:f9:c0:85:71:82:61:cd:2b:0b:04:a7:7a:c9:31:
49:46:03:f3:b3:a8:26:99:a3:3a:91:31:f5:0e:ea:1e:04:7d:
44:d0:40:53:d1:d1:fc:d9:31:ab:59:c6:8a:82:62:27:36:24:
39:92:f3:6b:d8:1f:a8:e3:9f:41:ef:16:35:e3:04:8a:43:8b:
b6:32:72:67:ce:9b:f3:12:58:f3:4e:90:a0:d1:f2:82:3b:65:
bd:a2:e4:93:98:d6:51:8f:61:28:bd:44:01:65:e7:61:50:69:
41:3b:2a:a7:ab:76:a0:f2:05:c4:06:0c:64:54:4e:d4:c6:eb:
e8:76:3e:d3:af:57:31:8c:7a:4e:15:8b:51:b2:e3:28:ef:1f:
62:62:86:70:19:6f:0f:c1:af:df:43:43:5e:47:29:a2:1e:57:
1d:7f:d4:42:b0:83:bf:1f:4a:06:c9:8d:7f:16:31:86:76:dd:
31:f4:0f:d1:f6:7f:6f:ab:54:ce:8d:2f:fd:43:b2:09:75:8f:
a9:c2:c7:76:15:a6:5d:6a:6a:71:44:46:5b:d1:9c:ae:0d:18:
12:07:da:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:08:15 2026 by rpki-client