Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
File: 7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json)
Hash identifier: EeAkhIY2/8K2S2kbIbRrbVtTQXITkLGYG1aR0vVbuME=
Subject key identifier: DB:4E:13:5D:F2:86:19:C2:DA:A0:A4:A9:99:B3:BE:19:A4:41:C9:CD
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial: 019D2AE0088E0A36C837E684ABE7564D85A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 16:00:18 +0000
Manifest this update: Thu 26 Mar 2026 16:00:18 +0000
Manifest next update: Fri 27 Mar 2026 16:00:18 +0000
Files and hashes: 1: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: Bj+zCLHCFQ9qEk5HtIfY3Equj/T/99iF7clusL7uZDA=)
2: C7fQ7Ve9jd1KjW3OO8oxR9QhSyI.roa (hash: R/aIjhVfQy4DuH2HYkC6Yf9teDlMa+Wx7kzzvb2vFZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:08:8e:0a:36:c8:37:e6:84:ab:e7:56:4d:85:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Validity
Not Before: Mar 26 16:00:18 2026 GMT
Not After : Mar 27 16:00:18 2026 GMT
Subject: CN=db4e135df28619c2daa0a4a999b3be19a441c9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:7d:05:b8:8f:df:f5:c6:28:a4:dd:33:0b:
43:c9:d5:da:4f:62:33:18:3f:77:04:33:02:bb:96:
14:f4:4b:5d:17:77:32:34:bb:77:c2:08:9e:c0:1e:
e1:04:f1:cd:ab:25:10:20:7f:7a:c1:6a:7d:26:3a:
9c:4f:e7:d1:22:4d:d8:62:2c:cd:d2:56:2b:08:bd:
62:e1:10:c1:4c:0a:1c:bc:42:e7:21:43:4d:7b:e9:
02:76:8e:df:5c:b0:f1:ee:48:58:0a:e7:fa:01:a4:
8c:30:4e:6c:51:7d:6a:96:23:ae:e8:fb:07:2d:fa:
0f:05:98:13:d5:43:d5:3d:54:b9:39:13:89:d3:93:
36:c4:49:1d:e2:30:7f:5e:a7:4d:f9:e8:c3:d9:21:
d9:58:bf:ca:c0:45:b6:93:bf:82:80:2b:d5:5c:ef:
96:2c:f0:0e:05:f9:9b:3e:c0:8e:e1:91:aa:00:7b:
7b:87:06:c8:5f:4b:5b:db:40:61:23:fc:e9:15:c5:
a6:a0:81:2d:fb:91:05:09:7d:67:35:d7:e3:b1:85:
95:ed:0b:3c:81:20:5a:f7:4a:20:ac:62:ee:db:bc:
27:64:d5:bf:ef:eb:ad:a1:33:13:38:cc:dc:00:6c:
71:2c:42:20:5f:a1:aa:c1:06:10:61:ec:61:46:c5:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4E:13:5D:F2:86:19:C2:DA:A0:A4:A9:99:B3:BE:19:A4:41:C9:CD
X509v3 Authority Key Identifier:
keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cd:24:c2:ce:1c:15:45:65:4c:1a:fd:60:b0:81:31:46:99:
83:cf:68:e7:f9:f3:eb:77:73:59:63:dc:e1:90:27:d0:ed:3b:
3d:d4:eb:6b:c4:0a:33:67:23:ef:4c:48:8d:96:41:4f:6a:d3:
a0:8f:93:35:21:23:54:9a:ae:46:f1:f9:9c:c5:d1:d6:28:97:
bb:6d:c1:f6:ae:82:9f:7d:12:b1:db:4e:8f:44:9f:46:e1:23:
3e:9d:e6:cf:cb:f9:84:0e:8e:43:da:50:14:ca:43:95:33:b4:
bb:b5:53:73:33:47:8d:6b:70:9c:5b:fa:e2:d3:53:dd:77:f7:
04:18:5b:eb:d7:b2:ef:89:ff:cf:fd:05:63:15:7d:67:ec:c5:
4a:45:10:2c:4d:9b:3f:41:d1:be:6a:0a:1a:a1:23:fc:66:bc:
98:d9:ab:e0:6c:ff:81:dd:11:07:0b:04:f7:a6:d9:24:1a:fd:
4f:71:73:c0:a6:12:da:77:1d:ca:d7:c4:78:d8:a1:9e:29:7b:
4e:5e:d8:a9:e5:b2:d2:b2:39:b9:fe:ca:ac:8f:db:b1:60:f5:
88:25:d3:b4:b1:2c:9e:88:fe:53:c0:c8:ae:88:50:03:37:3c:
3e:0d:6b:d2:27:f6:f1:a9:18:b2:ed:21:d2:45:8a:66:6a:f0:
57:c9:0c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:34 2026 by rpki-client