Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: Apac5c38GpJx+vxam2ZLVc1amky1Kz9ojCGhr5EHf5M=
Subject key identifier: 6E:C8:F1:B7:8D:F4:BE:CF:34:B1:12:FD:4A:19:71:E5:E9:49:36:45
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019D27DF5BAA286E8C24096FD1325E5CE189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 18A4
Signing time: Thu 26 Mar 2026 02:00:42 +0000
Manifest this update: Thu 26 Mar 2026 02:00:42 +0000
Manifest next update: Fri 27 Mar 2026 02:00:42 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: oSDtg7suSl8hJQSavHNNxiyh9khEhlrid1cOR7Oi7d8=)
2: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (hash: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c=)
3: QjmmSQtuTEwVRLNgjWi1-_buOYk.roa (hash: iGWXEQ+bzEdCoqctThCJX9CzR90FyOfcbpLC/ESLWio=)
4: UV-Za1MLDNSaG4DuH_q131i6c6o.roa (hash: /nY7i2nihg09pwfCz4ZETusOQgWbnKeEZAo2lp/8PQQ=)
5: XwwEduTGUdEUmzQ6Vn1Qh0lULKE.roa (hash: yP/C4oSHOkCL3b3u7lTD0ceM0Z9V/7tsggm9f4RRupE=)
6: gDu74A_Z1ksatoKHQD455fxsAx0.roa (hash: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig=)
7: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (hash: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o=)
8: zx3WBwHkzNsgOV5-TkoYXRcSw5A.roa (hash: 4eHXkHe5YH2jE8fgsQc251JhI+IMaU/jZg/f89akxiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:5b:aa:28:6e:8c:24:09:6f:d1:32:5e:5c:e1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Mar 26 02:00:42 2026 GMT
Not After : Mar 27 02:00:42 2026 GMT
Subject: CN=6ec8f1b78df4becf34b112fd4a1971e5e9493645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ed:3c:39:28:2e:0d:4b:0c:d7:06:8c:c9:25:
f4:8f:5c:07:ab:2d:42:bb:6f:94:5f:22:df:93:4b:
6d:4d:6f:36:e5:62:37:93:c9:df:43:ce:e2:4a:38:
2e:62:44:c4:8b:00:2b:45:94:5a:b7:3f:c4:15:25:
20:fb:78:fc:18:b6:ff:1f:8a:3c:60:09:94:9f:a3:
1d:f5:27:32:f6:b2:26:7c:9c:b9:7a:20:8d:f5:ee:
65:c7:ab:37:51:bb:06:f9:ae:b9:74:23:82:75:c1:
76:ad:9a:65:f6:39:6f:ea:57:10:ed:0b:33:5f:33:
ee:a5:e9:d7:03:83:76:7d:2d:67:02:14:39:d2:0d:
7e:b2:68:a1:a9:f5:55:99:f4:a7:6b:ac:69:bb:49:
d7:5d:0a:54:03:92:a6:d4:51:98:88:2f:16:df:94:
f1:6a:2a:51:bc:d8:66:b0:4d:35:0f:7d:37:7d:70:
2a:51:5a:09:77:f9:8b:7a:e5:49:37:b8:97:50:e4:
e2:4f:21:6c:77:6c:5d:6b:33:09:be:f9:89:f2:0e:
2d:fb:e0:d1:e3:cf:63:75:c6:96:9e:db:19:e3:c3:
d3:94:73:31:fa:8f:1f:d1:d9:e4:50:ee:a7:b6:0d:
c9:18:a5:04:ba:20:e8:c4:72:cc:ec:e4:2f:c4:13:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C8:F1:B7:8D:F4:BE:CF:34:B1:12:FD:4A:19:71:E5:E9:49:36:45
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b6:ad:58:50:81:89:5c:79:c6:ba:fe:81:b8:de:9f:d7:7c:
7e:a6:11:4e:d5:d6:1b:56:f3:21:81:d6:61:91:68:91:b5:13:
a0:fc:8c:b5:2a:ef:ff:b7:ba:c5:dc:47:78:5d:cb:14:94:f0:
68:9c:1c:eb:bf:6a:a9:95:a7:b0:63:54:85:d1:2c:53:37:f0:
2b:7b:e9:cb:7a:33:52:4d:8a:6d:c6:66:30:62:b0:c1:b5:51:
5f:6d:ed:d8:b9:b1:5f:83:9a:1a:f3:76:08:29:98:39:6c:79:
6f:7a:4e:99:83:3d:6d:9c:91:ad:83:c6:cb:1e:81:11:e5:56:
51:7d:a3:0b:be:99:39:88:3f:c3:75:fc:ce:83:45:f4:e9:d6:
75:13:12:47:b9:d3:d0:df:00:13:6f:76:2a:66:49:bc:be:88:
93:94:22:2b:d7:65:d1:38:27:8a:3e:56:e3:d6:0e:85:50:85:
16:58:78:6a:61:f6:54:48:ca:fa:5e:5b:0c:88:9c:8a:7c:3a:
e2:cb:94:8c:a7:82:69:91:d9:6a:41:57:ed:9d:5c:af:53:80:
39:d6:2f:5a:67:74:d2:39:0f:23:2a:7b:8e:cc:2e:f7:70:f0:
de:4c:df:43:0d:03:a9:3d:1d:b9:c9:ac:9d:1a:e0:48:f1:48:
ab:9e:c3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:06 2026 by rpki-client