Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier: BqrlPiuIWEmljcNqojY9iG5M0JxaXvKT8DDRGRJvBjI=
Subject key identifier: 7E:BE:D8:13:79:52:0D:79:91:C1:8E:FE:E8:1E:FE:34:3A:F3:57:80
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: 019D29CEBB6FCBA87E7D590E238E2E4058BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number: 11FD
Signing time: Thu 26 Mar 2026 11:01:47 +0000
Manifest this update: Thu 26 Mar 2026 11:01:47 +0000
Manifest next update: Fri 27 Mar 2026 11:01:47 +0000
Files and hashes: 1: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: cnfFlS1CRxizaUGVnqOUYng8dayV7IXBMiSc9In0/Ro=)
2: xbkHK9BjxqqWppD29--gfkSmovk.roa (hash: hkkQkmlB4qFZaOaawyBYcXjPEkqDqcjHyvxZakCPMVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:bb:6f:cb:a8:7e:7d:59:0e:23:8e:2e:40:58:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: Mar 26 11:01:47 2026 GMT
Not After : Mar 27 11:01:47 2026 GMT
Subject: CN=7ebed81379520d7991c18efee81efe343af35780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:0e:17:da:5e:5e:ed:1f:b5:7a:75:ee:d5:
89:6b:91:f0:f7:72:ff:7c:7b:df:e2:59:63:19:d8:
60:2b:2f:74:81:a1:dd:b0:07:89:ba:9e:9d:c1:9d:
bc:b6:0c:47:66:79:b5:71:cf:f8:39:f8:9c:90:4c:
7c:24:ff:03:a8:cf:db:11:e6:c4:b9:00:87:20:b6:
bb:0b:36:25:c2:23:c9:03:b0:3a:07:e9:54:45:43:
a8:f9:92:6c:b6:b5:8b:06:a9:d0:2f:5c:35:84:69:
3e:19:7f:56:9d:01:08:ac:6d:1e:9f:d5:2e:89:bf:
d1:ff:24:30:8a:cb:0e:08:c9:3c:34:cb:a1:1f:53:
ff:71:d0:68:4b:73:1f:01:05:d7:13:a3:9f:30:f7:
93:75:27:ef:7b:f6:0e:66:a7:67:23:74:60:60:f1:
68:36:22:97:ac:98:b0:25:2a:e6:61:58:1c:93:00:
16:17:ab:3d:62:31:f8:64:51:90:60:70:cc:a0:12:
9b:95:7a:c2:fc:7c:92:ba:5e:0e:53:da:68:ae:b7:
89:eb:5a:3b:e5:c9:bd:82:e4:d5:e9:ca:4f:d1:d0:
4c:4d:de:37:0f:77:bc:04:9f:6d:a1:22:19:3e:03:
ab:4f:2c:a7:da:d0:15:0d:3c:ef:59:84:01:de:20:
a5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BE:D8:13:79:52:0D:79:91:C1:8E:FE:E8:1E:FE:34:3A:F3:57:80
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d5:2d:4b:0c:93:04:8e:19:44:3d:d7:b8:d3:ce:99:af:cb:
71:5a:14:96:6e:83:c2:fb:de:b0:6b:29:cd:4b:21:32:52:1a:
52:b1:90:8c:a5:4c:2b:ea:e7:0a:4b:32:8f:83:4b:f2:a2:1f:
a0:e8:1b:6f:ba:a7:d6:ec:81:d2:c9:e9:9f:da:b1:52:4f:60:
23:00:5a:db:2f:50:b2:db:82:10:09:80:39:d3:25:bc:bf:1a:
37:c1:9b:85:3b:c4:f3:01:6c:88:0c:ce:99:1b:89:6f:a0:1e:
17:c4:d5:0b:62:0c:13:f6:40:58:3f:e3:82:64:05:ed:c5:0c:
90:e3:fa:b6:c6:5c:7c:ff:c9:57:59:da:cf:11:0a:d5:bf:24:
5a:fb:f7:39:46:dd:8e:a2:c1:60:8b:7d:12:71:c1:a6:42:56:
dc:2b:3e:02:15:05:bc:d0:aa:02:73:12:a9:e0:4d:06:c9:08:
58:c5:2a:80:ea:51:8f:c4:c6:2e:1d:ef:fa:a0:73:49:f6:e3:
a9:6b:69:0a:3c:f8:3d:71:87:b9:9b:fa:31:3f:ef:59:68:89:
02:60:3a:f3:74:cd:9b:a8:74:9d:b4:d3:93:e4:46:64:1a:ca:
72:d8:19:4f:e4:68:10:0d:44:cd:2f:47:81:29:2c:0d:6c:91:
82:a0:3b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:37 2026 by rpki-client