Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
File: 7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json)
Hash identifier: LFZES2YU7XVAxI546TaRt2/f9y6Apu1zmHFBTQoD2vs=
Subject key identifier: 12:6C:96:51:B1:60:61:EC:4D:50:B6:55:7A:FF:0F:91:E6:5A:47:D1
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Certificate issuer: /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial: 019D38D364DD3256EE65D938639CC6589332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
Manifest number: 08D4
Signing time: Sun 29 Mar 2026 09:01:11 +0000
Manifest this update: Sun 29 Mar 2026 09:01:11 +0000
Manifest next update: Mon 30 Mar 2026 09:01:11 +0000
Files and hashes: 1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: X7AO0++yBL2qna2KDbOdPmpawbYA+0gCOWhJWiyUWY0=)
2: sMDnDS7b5WQ5D-JoFss-D-9gaX4.roa (hash: UIum8I7uAuNske5DioiLLh5KWIejx8PVPwTt3WKIKnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:64:dd:32:56:ee:65:d9:38:63:9c:c6:58:93:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
Validity
Not Before: Mar 29 09:01:11 2026 GMT
Not After : Mar 30 09:01:11 2026 GMT
Subject: CN=126c9651b16061ec4d50b6557aff0f91e65a47d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:dc:46:d0:8c:13:b0:28:e4:28:41:28:62:
49:2b:d8:63:61:23:12:06:05:9c:43:d5:76:13:89:
45:8d:e4:5c:f2:b3:f4:1b:8b:3e:c1:7e:8f:f5:ba:
bd:2f:05:fd:56:ba:a4:2c:77:41:e6:da:26:07:62:
e4:36:9a:a0:61:8a:77:d0:aa:2e:4e:38:cf:56:a4:
7b:c6:2f:b7:36:a1:e0:f7:af:d4:a0:87:57:b6:66:
ec:bc:97:76:df:e1:ef:ab:76:53:19:8e:ca:66:ba:
6c:12:04:c4:80:2f:a7:fc:28:2b:e5:c8:cb:4e:ed:
e8:e8:e4:20:6b:6d:ff:2a:f6:56:e6:fd:27:b6:c2:
90:0d:31:1b:1a:0f:5a:90:f2:1e:4b:be:23:b4:b1:
f9:81:19:65:6c:9d:88:73:64:82:07:58:50:c2:b7:
fb:67:03:79:d0:03:85:e3:a8:0e:78:79:39:f1:42:
4f:af:ec:5b:54:d0:5f:5e:13:c9:92:a6:a8:33:89:
99:77:d1:55:89:1f:d9:37:13:45:7c:2b:de:60:81:
10:83:f6:e6:9d:d7:7d:cd:50:1c:f9:fd:92:19:9e:
c2:03:22:c2:44:3a:bc:a3:9a:f8:21:d7:22:59:5a:
bf:2d:0b:4f:4d:0b:20:04:57:e0:ca:eb:ff:7a:8a:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6C:96:51:B1:60:61:EC:4D:50:B6:55:7A:FF:0F:91:E6:5A:47:D1
X509v3 Authority Key Identifier:
keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b2:06:b5:a1:b5:e1:e9:67:d9:57:60:1d:85:21:52:db:f0:
fe:a8:9b:e8:61:ef:5a:6e:f0:a3:5e:69:82:e6:bc:66:de:48:
de:25:71:bf:ee:40:f1:49:4d:d4:35:28:18:3a:2c:40:bb:80:
fc:98:d0:ec:74:08:90:fc:d4:a4:fc:51:8f:68:f9:92:e8:f9:
7d:13:62:9b:37:d3:41:3e:f4:2c:15:0c:6b:cb:d4:ea:35:b6:
db:10:68:c4:a4:fe:7e:a9:36:fc:47:a4:b0:ce:32:ac:df:0c:
26:ff:a4:4c:31:92:d4:00:2b:4b:5c:3f:cf:7b:ca:60:23:f1:
71:8d:d6:54:76:85:4b:5b:85:28:45:97:cf:05:02:78:53:59:
c7:16:56:e1:88:a7:1e:d9:44:de:5a:8e:66:8a:1e:f7:6b:22:
10:ca:9e:76:07:bb:bc:5f:d0:12:68:52:10:37:af:05:b0:e8:
c3:c1:74:40:74:d4:65:f0:de:87:b8:32:c8:c4:20:a9:cf:db:
d7:ff:79:c2:bd:f5:cd:05:1b:da:c9:e0:c3:bd:81:7b:3c:1a:
be:0b:17:ed:fa:cf:02:38:51:14:44:8c:68:07:15:3e:77:18:
a2:f7:99:f0:90:86:51:b9:d2:23:d0:a8:10:a3:8f:62:5b:cc:
ba:0a:88:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:59 2026 by rpki-client