Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
File: x7996xihKSBrrXc8-CId5UTj_YE.mft (raw, json)
Hash identifier: vkt+39uCg4WeGPT1ZdVEb3KQuWTEUMMX2zL+NFB9I5U=
Subject key identifier: D2:29:AD:D6:2C:3D:5E:41:F2:6F:AB:F3:26:22:49:BE:0B:3F:A4:60
Authority key identifier: C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81
Certificate issuer: /CN=c7bf7deb18a129206bad773cf8221de544e3fd81
Certificate serial: 019D38D3A5324310EF7DC0B407A7BD6B82B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
Manifest number: 0B5D
Signing time: Sun 29 Mar 2026 09:01:27 +0000
Manifest this update: Sun 29 Mar 2026 09:01:27 +0000
Manifest next update: Mon 30 Mar 2026 09:01:27 +0000
Files and hashes: 1: x7996xihKSBrrXc8-CId5UTj_YE.crl (hash: PPrn3zdB28FCOdUkZDPRhP5kPiaNm7uh9X35UV6S0oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a5:32:43:10:ef:7d:c0:b4:07:a7:bd:6b:82:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bf7deb18a129206bad773cf8221de544e3fd81
Validity
Not Before: Mar 29 09:01:27 2026 GMT
Not After : Mar 30 09:01:27 2026 GMT
Subject: CN=d229add62c3d5e41f26fabf3262249be0b3fa460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:70:cc:c7:54:20:01:5d:28:49:25:db:46:
1b:e3:cd:a9:fa:f3:1c:a8:7f:ec:14:8a:94:01:37:
e4:cb:1c:19:c6:be:db:ef:74:84:a6:22:d9:ee:b3:
e1:f7:13:ee:61:14:15:1c:13:e9:1d:e5:3b:be:68:
65:5b:07:48:95:0d:48:98:89:98:94:7b:a9:bf:3f:
ad:8b:f2:45:17:e1:21:75:32:10:6a:9d:87:f2:d4:
c0:2a:cf:32:6f:9e:27:51:3d:f0:a2:b5:91:e0:96:
15:32:2b:5d:44:3e:84:cd:64:df:1b:05:18:38:21:
64:ac:58:22:6e:08:f8:67:76:79:12:15:34:cc:77:
2a:bb:aa:b3:e2:26:01:b3:d0:4e:e7:87:7c:61:41:
67:99:df:a4:57:da:39:05:00:c2:67:1d:5d:b9:ca:
79:89:52:ce:72:04:70:ef:48:15:1e:a0:19:fe:91:
50:78:46:b0:83:14:e6:32:78:35:4f:b2:e2:92:cc:
b3:2f:f0:a6:fc:8a:9e:1c:97:5e:7b:38:15:6d:01:
44:d9:94:15:b2:29:46:80:0d:db:7a:c4:55:91:44:
bc:c9:51:e7:2f:99:aa:87:b3:39:d6:c1:23:69:04:
b8:8d:da:fc:d3:bb:a7:7e:55:e3:92:bc:a0:5c:bf:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:29:AD:D6:2C:3D:5E:41:F2:6F:AB:F3:26:22:49:BE:0B:3F:A4:60
X509v3 Authority Key Identifier:
keyid:C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3d:96:d6:ef:4f:f9:57:81:1f:62:0f:ca:df:06:dc:d1:52:
31:56:ea:dc:f6:84:20:fc:13:7c:b0:0d:4e:2d:cc:d4:b5:41:
e2:be:fe:ae:f0:18:fe:bb:65:7f:c9:44:17:60:39:6e:f5:ce:
f5:bb:e0:3b:a4:d4:33:f7:05:18:69:f7:ed:13:85:15:ff:bb:
88:60:8c:15:e9:86:96:7f:f2:c3:e9:c2:c1:b4:a2:8b:92:36:
af:89:f0:e3:16:ed:7e:09:cd:80:7a:8c:e1:a4:ff:1e:ab:34:
5d:33:3d:25:20:9c:ed:47:cc:36:6b:c3:fa:11:62:a5:06:88:
63:90:63:a2:f4:c7:52:d7:59:88:55:3b:28:03:26:f7:02:e5:
32:4e:e4:9b:a1:be:02:2e:bc:d0:16:6b:ae:28:da:cb:dd:44:
a7:77:de:54:6e:36:ec:2f:15:6d:85:b6:2e:3d:58:7f:03:33:
9d:45:f0:19:08:e0:e1:82:c2:dc:98:9e:e0:09:ee:5a:0e:49:
5b:05:bc:1f:dd:01:67:28:d9:d6:c3:5a:7b:64:a3:0a:2d:6a:
e1:94:b8:ae:4a:0f:1e:9d:a6:68:bd:fe:bf:42:0a:98:82:e4:
96:b8:5f:04:56:da:d8:a4:4a:91:d4:52:10:fb:bd:1f:d7:fa:
5c:53:07:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:22 2026 by rpki-client