Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier: QyTcjA1+E8sRxahbByY5gXlqRnXadYvsHlEGT3ZTuJ4=
Subject key identifier: D5:08:F8:91:D0:46:1D:A3:2C:51:F8:47:F3:23:BD:28:5C:6E:16:26
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 019D2B170DD12D8817DD505FE03682082B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number: 1897
Signing time: Thu 26 Mar 2026 17:00:24 +0000
Manifest this update: Thu 26 Mar 2026 17:00:24 +0000
Manifest next update: Fri 27 Mar 2026 17:00:24 +0000
Files and hashes: 1: EIlm2UOK4a43mkGzeWHWkYSMea0.roa (hash: +wMjOafG8Bh/qQ6ngEeSs6Schjv6y2L45oZoRJ0DZNo=)
2: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: YFG6hllVXBstIjuv9XjjxPbrkYgRBpT5Wd6pOHFQK2U=)
3: luGI1U_JMgcQZM65wInUiA4UdbA.roa (hash: ZyKZURW02DYdgFTMs0cmnkA3UVYypfPPFFRpyjWyugA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:0d:d1:2d:88:17:dd:50:5f:e0:36:82:08:2b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Mar 26 17:00:24 2026 GMT
Not After : Mar 27 17:00:24 2026 GMT
Subject: CN=d508f891d0461da32c51f847f323bd285c6e1626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5b:38:99:d2:6c:27:08:40:21:18:a6:22:66:
e4:2c:47:c9:d7:85:09:e7:6e:dc:1d:6c:73:14:eb:
3f:70:98:7b:94:7a:49:ba:57:1e:b8:a3:ef:29:aa:
1b:40:98:be:24:7d:d0:cf:3b:6d:bd:3c:47:01:b7:
07:01:98:84:c2:6a:44:d0:b6:d2:a9:96:bf:2f:92:
6e:21:28:ed:06:b8:7a:24:1f:12:22:a1:57:e1:39:
9f:fe:81:4b:8b:2c:dd:d8:3a:75:0e:0f:cc:5d:2e:
02:21:6a:79:8c:5b:14:d0:57:36:7a:c2:f0:31:ff:
f5:cb:39:4a:e5:a7:f5:d7:bd:3c:94:46:a6:32:19:
49:06:8f:88:ee:e2:b7:e1:b0:5a:76:fd:82:21:96:
f3:5f:41:df:b9:20:0b:cc:15:60:87:70:d3:ea:31:
b1:c8:04:ee:29:3b:1e:b7:91:d6:36:9d:eb:4a:ac:
64:9e:ec:52:fc:d9:41:dd:f5:46:70:aa:c1:02:ee:
74:65:64:2b:ec:df:0e:b0:a8:d6:62:44:38:5b:27:
47:d8:7a:1d:68:98:64:83:94:a5:4c:2b:38:cb:c8:
e4:59:f5:44:e0:b7:a8:a9:50:c1:de:ae:d2:7d:a1:
9f:b5:98:20:06:73:64:8d:6a:4c:1d:79:33:cf:ae:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:08:F8:91:D0:46:1D:A3:2C:51:F8:47:F3:23:BD:28:5C:6E:16:26
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b9:a1:9b:f0:8a:44:48:d0:b5:d0:58:96:16:81:ce:36:47:
7b:ae:27:19:26:fb:ce:be:36:e3:ed:79:8f:90:eb:25:66:4b:
47:e3:31:24:bd:e1:73:95:54:4b:b6:00:0e:4d:35:51:96:a7:
57:73:b8:31:bf:23:5f:ba:fe:a9:ad:18:32:d4:87:aa:94:fb:
35:6f:3b:8d:58:53:ae:ff:39:d5:f6:74:fb:f1:61:e2:5f:a9:
89:07:e8:d0:c2:e7:53:05:a5:24:d3:cb:20:e9:93:bc:e8:0b:
7d:b0:18:0c:a6:f1:37:a9:74:de:06:5c:86:86:6f:66:3c:13:
f6:b4:35:b3:26:a4:b1:e5:d9:5a:b8:00:c4:82:a5:48:5c:78:
42:55:79:77:25:84:39:e1:45:bf:7a:ce:d0:27:2b:2c:22:9d:
e8:20:e7:84:3f:98:a3:48:12:89:50:04:f2:6a:48:2f:ee:37:
88:67:0c:e5:f5:8f:98:5d:a4:25:a3:4e:0a:fb:31:41:3f:07:
31:81:94:ae:51:eb:55:17:28:fa:32:af:47:c9:af:ce:4a:4e:
8c:dc:33:d9:18:3e:3c:01:d9:f3:e6:ab:b9:3d:f8:99:6d:5a:
2b:d1:d2:89:1b:1b:72:b6:cf:b0:be:89:96:d5:86:eb:49:f1:
d8:ea:22:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:56 2026 by rpki-client