
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
File: f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft (raw, json)
Hash identifier: pbTm2kSYJnFFfKqxUjCaQnwGYTSRrv9u6K1YaY53uuI=
Subject key identifier: 54:01:83:C1:0D:92:58:1B:AC:D8:39:4D:D4:25:ED:25:C5:3C:02:3D
Authority key identifier: 7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
Certificate issuer: /CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Certificate serial: 019D292930CF1E43580D1253997A2E165A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 08:00:58 +0000
Manifest this update: Thu 26 Mar 2026 08:00:58 +0000
Manifest next update: Fri 27 Mar 2026 08:00:58 +0000
Files and hashes: 1: Ix0TT5IrmKD226rBGnrwxJKMQZE.roa (hash: kT8aM1b7+8tvbyvrC/BU4Ml9NWdK/DRuTi32q1ndZgU=)
2: f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl (hash: IwH3ooJHGFbT3S83pfX+D15RjHIl8ShAAdEX0NN/q3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:30:cf:1e:43:58:0d:12:53:99:7a:2e:16:5a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Validity
Not Before: Mar 26 08:00:58 2026 GMT
Not After : Mar 27 08:00:58 2026 GMT
Subject: CN=540183c10d92581bacd8394dd425ed25c53c023d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:9f:61:3a:c5:11:8d:ef:36:78:75:fe:1f:
4f:e4:da:31:ba:13:21:8d:7d:f3:35:ce:51:16:e0:
61:d1:ed:da:d3:7b:77:98:22:d5:3c:de:ac:b1:4f:
e3:9b:09:f9:2e:2d:97:47:09:32:33:fe:40:31:ff:
1b:ea:39:1c:2b:fb:b7:4e:19:c0:0c:a7:3b:5a:1b:
44:46:d7:5d:96:da:4e:3e:d8:51:f7:ad:0e:10:37:
c1:df:df:4f:60:72:19:c6:5e:47:53:3e:d2:29:51:
69:05:09:0a:28:20:f5:61:92:b8:bb:9c:34:af:9b:
b3:d4:60:bd:e2:ae:7c:cd:ef:f2:6a:3f:b0:29:a0:
19:d3:f9:69:3d:78:25:cb:5c:d1:46:12:2a:1f:b4:
a6:57:96:49:4d:aa:65:7e:b3:df:ef:1a:27:b2:c2:
10:0b:1c:9b:05:9d:a3:cd:cb:a1:31:c5:97:bc:8c:
fa:21:40:6e:b4:71:5c:68:62:05:e0:fe:ff:b2:39:
2f:9a:c2:bb:d2:98:51:99:20:81:e9:75:f7:d7:71:
4a:cd:a5:78:b4:f9:bc:cb:78:f8:52:3c:67:0f:b0:
e3:07:22:d5:5c:11:d7:74:4d:d9:4b:e4:5b:04:8a:
ac:f5:02:57:65:35:03:83:78:d8:7f:1d:35:20:a5:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:01:83:C1:0D:92:58:1B:AC:D8:39:4D:D4:25:ED:25:C5:3C:02:3D
X509v3 Authority Key Identifier:
keyid:7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4c:8f:a9:12:bc:c6:a5:da:63:54:a8:df:35:ad:99:02:41:
3e:cb:21:20:0d:6e:e3:31:28:d8:1b:49:ed:17:c3:3d:f7:17:
57:e9:87:a3:4a:84:a0:47:87:c0:36:87:50:4c:5b:fd:24:13:
06:64:c7:19:4b:46:1b:ee:ea:02:c6:50:4c:02:e0:37:31:63:
9e:02:e6:e9:09:f1:0a:4c:af:d8:7f:2b:90:3d:0f:b1:c8:8c:
72:8d:b2:55:aa:11:bd:86:a7:d6:ee:3a:02:85:70:bb:b7:9f:
dd:06:af:e8:84:8c:3d:d3:90:fe:1c:49:5d:34:a1:8b:f0:73:
44:b2:63:76:2b:e3:fb:80:e5:b4:79:a5:dd:ff:4d:94:f9:01:
92:db:f8:94:a8:97:f5:7d:a1:a5:7b:c9:32:8c:61:db:2e:2f:
68:f3:fd:4f:06:fe:a5:6e:93:ce:84:08:7d:4d:92:64:9b:8b:
1c:06:ef:e9:e6:f7:14:32:98:5d:b9:e5:27:89:35:72:5c:ee:
d8:93:5e:2e:b4:3c:12:f8:f7:07:56:1c:74:b5:66:88:c5:c1:
06:5f:63:7c:bd:39:d6:a0:b1:6a:bd:a4:db:53:25:bc:de:63:
dd:53:ff:9d:08:75:ad:05:5c:8f:e7:28:e6:b0:93:89:05:d0:
f9:fa:65:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:16:04 2026 by rpki-client