Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
File: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json)
Hash identifier: VmbpRzdHcA6I7PaVv2ahyrb4N71knGWsO9Em0rKuP/E=
Subject key identifier: F7:2E:CB:66:DF:00:30:3F:FB:61:A6:C0:8D:7A:E2:A2:8B:7B:2B:E0
Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
Certificate issuer: /CN=eff987189da4e38385b0721854feccc3ef466a96
Certificate serial: 019D39AEF35F6BC233BC50B89EE60AB73A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
Manifest number: 0F28
Signing time: Sun 29 Mar 2026 13:01:00 +0000
Manifest this update: Sun 29 Mar 2026 13:01:00 +0000
Manifest next update: Mon 30 Mar 2026 13:01:00 +0000
Files and hashes: 1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: jyrc+KZWI2brS7hMXtJ7t0DIsXLJ/+l3W/WnWkd6h/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:f3:5f:6b:c2:33:bc:50:b8:9e:e6:0a:b7:3a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96
Validity
Not Before: Mar 29 13:01:00 2026 GMT
Not After : Mar 30 13:01:00 2026 GMT
Subject: CN=f72ecb66df00303ffb61a6c08d7ae2a28b7b2be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:e6:8d:1d:b3:47:4e:1c:b0:67:26:f5:f3:
d8:ce:ea:92:f7:47:ca:9a:17:87:1a:9e:62:19:10:
ea:85:90:bb:c1:0a:5f:75:34:e6:20:35:13:59:17:
00:85:5f:2d:c7:31:2f:21:2b:1b:cb:a7:64:ec:1d:
ab:3f:89:aa:25:1f:8a:b3:e1:ab:44:c9:bc:19:98:
14:e4:b7:f6:47:b2:62:bb:0e:a7:a3:6f:c5:e3:16:
26:5e:da:b4:23:ad:c8:49:43:97:1f:13:12:57:38:
13:ba:f8:9c:cc:d4:86:4f:7b:e4:ad:5b:57:48:cb:
9c:05:88:d3:d8:3d:27:57:31:68:3a:10:84:76:be:
6c:51:7b:32:e7:48:bf:01:ea:d4:ea:df:33:83:65:
f5:3b:fd:ff:4f:33:b5:7f:a2:af:56:42:e9:9b:22:
c7:44:da:7c:b3:22:37:bc:ed:10:71:8f:b5:24:da:
8c:60:2d:b4:61:0d:45:5b:69:7d:0d:97:91:e1:56:
21:f2:f9:3e:7c:68:a3:e0:aa:8f:e5:3c:08:f4:fb:
80:71:cd:db:8b:b2:50:a1:00:d9:63:79:b9:27:27:
b0:5b:48:20:71:85:dd:4b:47:19:6c:08:49:fe:c2:
29:ba:4c:c1:89:c0:ba:15:64:cb:f8:da:03:ed:bd:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2E:CB:66:DF:00:30:3F:FB:61:A6:C0:8D:7A:E2:A2:8B:7B:2B:E0
X509v3 Authority Key Identifier:
keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:b9:df:16:0e:05:a0:2e:2d:19:a2:60:00:91:33:a5:84:e3:
fb:85:65:da:d9:a8:17:e7:60:84:31:ec:70:15:ed:e5:bf:4c:
33:c7:ae:bc:2c:65:fd:61:70:35:4f:ab:4d:2c:d5:72:2f:65:
c1:51:89:0a:95:1e:d7:bc:71:e2:46:6d:34:e2:8c:69:6b:33:
e6:66:9a:3a:02:ab:93:c5:7e:00:5c:11:54:8d:73:97:c0:0c:
1a:ff:1a:44:39:cc:1b:3e:99:2d:3e:f2:54:a9:ed:90:02:ed:
30:63:04:c5:11:6f:bc:85:56:7a:e6:92:1c:28:9c:c9:10:6f:
56:75:ce:48:eb:bc:54:0f:35:b0:e9:83:39:eb:32:b4:fb:9e:
27:46:cd:62:8b:48:ec:5c:91:0a:f0:b2:68:a1:99:04:81:a7:
63:22:8b:81:15:0f:1a:c9:ed:df:09:22:0f:4e:28:c7:eb:31:
b1:ec:d9:c2:b2:47:7b:c5:c2:db:3d:23:2d:bf:19:66:32:e6:
3c:cc:cd:97:74:4a:1e:f2:ae:8b:8b:05:ac:40:32:ca:a5:f3:
f9:c5:8d:43:d3:29:28:6e:5c:55:7b:a8:4d:4c:1e:f2:a2:9e:
d8:cd:ce:99:29:00:09:9c:52:62:67:c0:33:4b:bb:fb:a3:88:
5d:39:b2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:49 2026 by rpki-client