Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier: r7M6m+V1H81SS2Q0hsBVRnULR1CyyLt4QBrIJ5LztSg=
Subject key identifier: 11:1E:BF:61:E1:99:ED:9B:D2:A6:A1:A7:8A:0A:72:81:B5:B3:25:C6
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer: /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial: 2245EDB6B183B5FF521385C960EDD77AA26807E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number: 028B
Signing time: Sun 29 Mar 2026 14:38:32 +0000
Manifest this update: Sun 29 Mar 2026 14:33:32 +0000
Manifest next update: Mon 30 Mar 2026 18:32:32 +0000
Files and hashes: 1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: wdtgkKUN4CkYFZOie/g6D9B9qW77NqDXX0bu24L+L94=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:45:ed:b6:b1:83:b5:ff:52:13:85:c9:60:ed:d7:7a:a2:68:07:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Validity
Not Before: Mar 29 14:33:32 2026 GMT
Not After : Mar 30 18:32:32 2026 GMT
Subject: CN=111EBF61E199ED9BD2A6A1A78A0A7281B5B325C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:05:0e:76:f6:ef:93:0f:94:94:3f:2a:87:
e4:78:03:d9:de:21:e8:73:6f:da:35:f9:5a:b4:48:
ff:bc:3b:e2:c5:18:13:b1:f8:b9:67:bf:1e:bb:19:
ef:a1:81:58:93:30:88:72:1e:2e:33:fa:0b:45:d9:
78:92:ec:87:65:67:c3:14:1a:9d:98:cd:bd:09:c6:
bc:4b:58:88:df:e4:db:a9:01:3d:09:7a:0e:5b:1c:
05:d3:a4:b4:42:6b:9e:de:c5:64:be:73:6a:83:3a:
e8:29:f4:33:85:86:46:50:d5:3b:43:9c:8d:e7:32:
46:50:f2:a9:4f:21:1d:d3:56:33:20:a4:55:76:1f:
97:bf:14:20:76:67:95:ce:ee:d9:de:6e:de:cc:72:
fd:08:c4:a9:cf:f8:cc:53:42:32:bc:55:af:73:6f:
77:1c:cf:7e:63:da:93:81:11:e0:eb:a8:65:7f:55:
30:7f:71:9f:87:3f:a3:13:a7:d5:d6:c5:e2:c9:34:
d0:ea:35:bb:2c:75:3f:05:b0:41:c3:eb:37:9e:e3:
57:d7:05:e7:3f:f9:f9:e0:f9:35:54:5f:44:85:ef:
ed:0f:e3:28:b5:c7:dc:69:20:dd:bb:70:7c:c6:8c:
99:6c:9d:33:07:3d:82:6e:31:4b:b2:e8:28:ab:56:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1E:BF:61:E1:99:ED:9B:D2:A6:A1:A7:8A:0A:72:81:B5:B3:25:C6
X509v3 Authority Key Identifier:
keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ae:af:e4:24:10:e7:d6:4c:3c:62:20:44:66:4a:44:9c:eb:
2a:ca:89:4a:32:6d:a7:ce:56:ea:22:ef:7a:43:e5:57:18:32:
d7:db:38:81:58:88:24:cc:93:da:e9:eb:39:58:f7:60:6b:51:
c4:b3:a1:07:53:46:3a:67:22:1f:8e:c2:7e:5b:aa:20:28:8c:
3b:f9:62:91:9e:ae:da:ec:9d:ca:72:c8:9d:d0:35:81:4b:02:
3d:50:15:e4:2e:57:ae:34:e3:94:39:db:da:eb:9b:70:32:eb:
a0:33:4d:7e:4c:15:83:45:c4:ee:9d:c2:35:50:aa:3b:ff:28:
55:e7:f6:3c:75:3b:61:40:d8:95:3d:a9:24:44:f2:7d:97:15:
9f:c9:b9:91:2a:00:63:65:4c:d0:95:fe:b7:35:af:94:8e:47:
d4:b8:97:09:69:f5:e5:fa:fe:9d:fb:44:b3:16:cc:7d:49:38:
3f:54:ee:83:6e:76:f9:51:e4:3b:55:89:68:3f:bf:c9:10:21:
c0:a3:63:f3:6e:b5:69:3d:2b:8c:b8:a8:d4:8f:28:92:0d:86:
15:98:e6:7e:de:90:be:84:5f:72:a1:40:39:e0:b1:66:41:40:
32:21:ab:d0:88:46:60:bb:59:75:c7:3d:b9:7a:c3:dc:ae:01:
e7:1f:10:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:19 2026 by rpki-client