Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: vdkAIIVih/9JZhfEyIZWa30zg8OzYGSq4OpkheQGYwQ=
Subject key identifier: 0E:52:D9:65:94:BC:80:65:58:1D:FF:C2:91:8B:E4:27:12:49:DF:3C
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 019D284E3B2FEDCBA3CB630DBD2A62B9D984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 073D
Signing time: Thu 26 Mar 2026 04:01:48 +0000
Manifest this update: Thu 26 Mar 2026 04:01:48 +0000
Manifest next update: Fri 27 Mar 2026 04:01:48 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: GL4EDag9wymNbn4nK+UHl6aoJBg9dblEKCV14reEK/I=)
2: QanxQFNXzm9WZ4FLagQm8rqjYVg.roa (hash: z/pk9haxpoiUwaj9wllu1rSy4e1+a+aVccYlUM/WIn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:3b:2f:ed:cb:a3:cb:63:0d:bd:2a:62:b9:d9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Mar 26 04:01:48 2026 GMT
Not After : Mar 27 04:01:48 2026 GMT
Subject: CN=0e52d96594bc8065581dffc2918be4271249df3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:2a:43:3e:5a:d3:36:01:9a:80:13:09:21:
a2:20:3b:f8:63:a4:c7:2b:c7:a9:5b:65:e8:ad:d6:
66:27:b8:67:f7:d6:e8:ea:70:9d:db:fa:14:50:0e:
be:89:5f:9a:08:13:ce:a1:eb:0e:03:5d:36:91:91:
2e:15:30:03:b4:f3:9d:de:45:78:a2:9e:88:20:e2:
df:9d:a5:0e:8f:11:22:3f:b4:c2:45:a3:70:79:93:
61:56:7a:fd:c9:d9:e4:64:0e:60:d3:6d:3e:8a:a9:
b9:86:40:c1:12:d1:74:79:f4:70:0d:28:ec:7b:70:
06:07:46:f0:8c:f5:4a:6d:72:57:d9:8e:67:44:32:
9b:7a:87:15:b8:4d:37:ac:4e:83:9c:01:29:83:62:
96:72:21:36:db:8a:7f:da:41:dc:08:b1:19:03:b2:
c2:6d:26:d0:e6:bd:e0:7f:d6:fe:0f:ed:0f:70:c1:
b5:1b:6c:66:59:bd:b8:a6:80:bb:75:5b:78:e9:01:
49:82:1c:01:40:d9:68:f4:77:7a:8a:04:c9:59:82:
c6:46:6a:57:42:e8:9f:0e:ad:60:a2:f0:3c:ed:f9:
65:23:96:fc:82:ca:7a:4e:f5:22:bd:75:2c:c0:d6:
79:0a:b5:8d:2a:9e:7d:e9:c7:99:dd:ab:99:9a:89:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:52:D9:65:94:BC:80:65:58:1D:FF:C2:91:8B:E4:27:12:49:DF:3C
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:66:33:7c:d2:00:b9:37:16:de:5a:31:72:52:92:ad:1c:bd:
2e:5e:d8:05:46:f1:ff:f6:5b:c0:1f:a3:c1:7a:19:bf:bb:fc:
ac:c3:f6:6e:9e:2a:90:dc:52:38:b3:1c:11:4a:fc:98:5a:30:
35:b0:ae:91:2a:43:43:71:ee:da:cf:63:38:13:e6:ae:3d:7a:
bf:5e:32:9e:18:31:5c:ef:57:f6:77:4f:e9:7e:cd:e8:be:c8:
67:49:38:48:4c:14:e8:f1:b1:3d:61:6c:a9:bd:a7:75:b7:a8:
09:ba:6f:80:de:03:a0:6a:59:64:7a:48:a0:de:05:b6:42:2b:
b3:bc:1b:95:a0:a6:38:a8:a4:9b:16:c8:ff:54:15:55:9c:18:
3a:46:ec:5d:36:8a:86:e3:87:6d:8c:11:70:ed:9f:cb:44:14:
88:93:9b:51:51:71:3c:13:04:02:d5:82:3b:73:b4:0c:29:2b:
6d:b7:4c:48:56:d5:8c:b5:f4:64:0d:b7:f2:10:11:2c:07:82:
6f:8d:ad:2e:cc:9f:ab:3a:20:85:b4:b8:eb:86:f1:a9:3e:21:
8c:18:88:83:99:90:a4:fc:a3:da:43:af:79:92:83:19:a2:6d:
f2:dd:64:2c:94:21:a9:8f:16:6c:5c:cf:5c:07:0d:2e:bd:53:
36:ae:66:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:41 2026 by rpki-client