Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
File: p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json)
Hash identifier: Nfiqcr/KCZ7yyooowenAHfSNbfqfBXf4Fmxc8zOLZG4=
Subject key identifier: E0:33:C3:89:22:64:16:9E:D7:02:64:4F:67:BC:90:A8:7F:43:45:36
Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
Certificate issuer: /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Certificate serial: 019D37C0CDF5D008F49310B72F18BFE7C9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
Manifest number: 0BFF
Signing time: Sun 29 Mar 2026 04:01:15 +0000
Manifest this update: Sun 29 Mar 2026 04:01:15 +0000
Manifest next update: Mon 30 Mar 2026 04:01:15 +0000
Files and hashes: 1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: VRSq68/IKxfiVDkWZkZ9LQQhs8gIKYkpRTDATCfbXhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:cd:f5:d0:08:f4:93:10:b7:2f:18:bf:e7:c9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Validity
Not Before: Mar 29 04:01:15 2026 GMT
Not After : Mar 30 04:01:15 2026 GMT
Subject: CN=e033c3892264169ed702644f67bc90a87f434536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ec:e6:b1:35:48:74:11:1e:a0:b1:c8:d6:53:
02:9b:47:6b:69:d5:8c:c2:ad:44:8b:2a:c6:7d:3a:
06:64:9e:c8:85:2a:f2:5f:20:67:82:7a:fd:2f:60:
de:18:1b:2f:5b:82:69:1c:82:7a:82:83:01:48:4a:
8e:f0:dc:6f:74:74:27:eb:a2:66:59:15:4d:84:6f:
ef:3f:1e:bd:72:8f:5c:4f:90:1a:a9:4a:1b:60:61:
33:92:8c:3f:a9:4d:9b:b0:5f:af:1d:d4:c3:cd:06:
f0:80:4b:80:95:19:a2:ed:5e:c1:54:47:2d:bc:ac:
f4:b9:51:91:c9:cd:53:cb:9d:a6:1d:5b:db:73:94:
cb:49:ab:76:3b:68:44:f8:04:50:53:8a:db:04:40:
e3:ce:58:59:36:ed:ad:c6:ed:31:eb:fa:d4:f6:61:
2d:37:bc:c6:c2:c9:3c:25:ee:45:ee:46:10:10:de:
4c:da:f0:fa:60:7b:c7:ac:5c:5d:b1:cd:3a:9f:48:
a5:4b:bb:47:2d:e6:20:96:1e:d0:49:1f:15:64:41:
7d:74:f8:48:e5:13:03:63:91:fb:24:ff:de:3d:e9:
79:0f:53:9a:c0:e7:94:e3:9c:96:34:e5:4c:13:73:
28:88:4d:18:0f:70:0f:b9:ad:4d:c5:27:c8:90:c0:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:33:C3:89:22:64:16:9E:D7:02:64:4F:67:BC:90:A8:7F:43:45:36
X509v3 Authority Key Identifier:
keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:62:b9:7b:57:de:59:65:00:99:e7:6d:58:9f:5e:1d:4c:0d:
2f:20:3c:ae:a1:16:78:78:fc:4d:6a:fb:28:ab:08:7e:34:e7:
42:2a:71:9c:54:4b:fb:f9:b8:45:8c:e9:07:e3:f7:7c:fd:f6:
f7:e5:4a:c5:fd:f0:48:39:23:3f:1c:64:03:bc:3f:87:58:d3:
1d:9c:3c:82:3f:bc:d5:0d:ae:68:a6:b9:5a:30:68:69:eb:25:
76:8a:f3:96:41:27:ee:f4:bb:fd:f5:96:fe:36:03:09:54:86:
40:f4:4c:42:cf:84:a3:a6:9c:e6:ae:fc:fd:2f:08:64:56:64:
34:34:51:1c:fc:78:bb:27:f1:82:6a:9d:bf:52:b9:a7:96:30:
c1:4a:d3:ef:e2:15:39:42:92:da:e3:d0:b9:83:3a:26:ce:81:
35:80:91:7e:f5:71:5a:e3:5c:8c:02:7b:59:7d:b5:66:83:3a:
8b:da:14:04:18:2f:ac:45:3b:26:ad:e4:7c:1b:b9:29:9c:7c:
a6:b8:de:40:e3:29:ba:eb:71:44:34:81:c5:f1:83:8e:dd:94:
7f:44:e0:7d:5d:a2:8e:25:e6:25:a1:33:16:25:51:9e:53:ae:
23:c4:cb:0f:ba:8a:d4:b1:ee:9b:31:4e:38:66:cf:d3:bb:32:
18:aa:fa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:46 2026 by rpki-client