Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
File: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft (raw, json)
Hash identifier: OQEgElG78eXcARmOGN2T9d5+7nx+VEL4WiEOdB57gR8=
Subject key identifier: 1C:21:A8:4D:DA:7A:CE:4C:F9:B0:0C:EA:6E:73:6E:FD:BD:9B:A2:98
Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Certificate issuer: /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Certificate serial: 019D2B1725B89EA5B096BA784F32049016AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
Manifest number: 132C
Signing time: Thu 26 Mar 2026 17:00:30 +0000
Manifest this update: Thu 26 Mar 2026 17:00:30 +0000
Manifest next update: Fri 27 Mar 2026 17:00:30 +0000
Files and hashes: 1: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl (hash: eNCI99HtnO4mwnb2lJzgVQ01k4mobJ5wR6lohtLWYl0=)
2: RWhg5dykMAyiD73Q4T3IDgPuoVY.roa (hash: btU2vDOWfazE6wfyTegJ86hgsn+iO0cAhM7Jywody24=)
3: RsFe9krKRUtkC3L7-MC9WR0bVdM.roa (hash: lbqH6pbmwmSHgVXzsms7NFLtSzq9IEJtOR+CsCDKF1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:25:b8:9e:a5:b0:96:ba:78:4f:32:04:90:16:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Validity
Not Before: Mar 26 17:00:30 2026 GMT
Not After : Mar 27 17:00:30 2026 GMT
Subject: CN=1c21a84dda7ace4cf9b00cea6e736efdbd9ba298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3e:a5:f8:db:86:76:30:df:4e:fe:3c:27:1e:
f1:0e:bd:2a:5c:ff:69:13:ac:b6:d0:ea:18:c5:a0:
6d:42:33:c9:8b:4a:7d:88:3f:3c:99:c0:a8:59:12:
ee:c1:d0:51:7e:c4:27:b7:ca:25:07:32:4a:77:e2:
43:35:67:af:f2:cd:db:af:a5:ac:32:4f:5b:bd:a0:
bf:f9:54:bf:bc:6f:ce:73:34:df:43:4d:a9:c0:6d:
0e:00:95:55:b2:eb:5a:70:63:df:88:eb:03:39:2d:
a5:ce:19:ae:33:d6:67:ef:af:56:99:09:02:65:7a:
ba:2b:3f:a2:69:58:e3:1b:14:7f:bd:cd:a2:70:73:
e4:24:40:9d:f3:73:b4:34:85:39:49:61:d8:9f:04:
4f:ec:32:38:fe:3e:23:85:a0:ce:c8:f0:0c:23:01:
d5:5c:47:89:92:81:a1:b8:5b:58:66:53:fd:20:b2:
0d:47:64:0b:f2:ac:9a:9f:fa:34:03:6d:b7:22:ac:
33:6f:96:99:2a:4c:48:83:2c:66:ad:4e:06:a6:c1:
bd:71:c7:a3:06:c1:b6:a7:fc:16:07:97:90:02:3b:
91:67:fa:b5:a8:0a:19:e4:ae:c9:8f:98:13:a7:02:
44:12:c0:9c:ad:e7:e7:0b:ea:28:be:b5:46:a0:aa:
e8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:21:A8:4D:DA:7A:CE:4C:F9:B0:0C:EA:6E:73:6E:FD:BD:9B:A2:98
X509v3 Authority Key Identifier:
keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:83:26:59:a5:fc:bd:ac:00:9a:d8:5b:bb:09:be:7a:97:fa:
e1:37:f4:b9:44:2c:42:81:55:d4:af:98:83:a1:73:0b:69:ff:
de:b5:22:db:33:4a:00:75:79:09:0e:c1:57:0c:b1:bb:b6:44:
ca:a3:08:dc:a2:1b:00:d1:53:78:ff:64:2d:08:c5:bd:6e:f9:
e8:e8:92:28:ee:f6:d7:0e:ca:8e:75:d3:bb:72:ea:53:81:67:
e0:67:1f:59:5d:21:eb:9a:59:38:84:3c:39:25:82:f6:58:50:
16:72:12:a4:1e:6b:56:84:28:52:b7:cb:8e:b8:eb:a0:a3:99:
ca:2c:47:4c:f8:ff:f6:a3:29:9f:55:0b:42:0d:d1:1f:95:19:
91:ac:c1:ff:cf:f8:fd:2d:a1:57:18:20:2d:a2:90:70:09:74:
20:e4:50:d4:96:60:4a:63:2c:91:d8:ca:58:2d:31:b5:0c:d3:
86:df:fc:77:c9:41:f0:00:e1:10:8c:5f:42:d4:1e:0f:bb:70:
5f:3c:91:c0:03:db:36:ae:28:29:8d:26:3c:0b:a3:03:27:bc:
59:8f:c3:0d:f7:45:50:8d:0e:76:f2:a7:6a:8c:84:01:90:45:
85:f1:04:dc:11:28:43:f9:27:88:c9:ec:79:28:f0:e0:66:55:
b9:3c:fd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:25 2026 by rpki-client