Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
File: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json)
Hash identifier: iL0sGb6Qu9AImCKPcRxmtn/n1FWEA9divnMnU8xzBpA=
Subject key identifier: B7:54:CD:46:91:17:E0:1A:12:1C:8C:21:A3:D2:23:F3:0C:DE:11:6B
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Certificate issuer: /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial: 019D26CD40C0058B5E35FABEDD33F801D12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
Manifest number: 10C9
Signing time: Wed 25 Mar 2026 21:01:18 +0000
Manifest this update: Wed 25 Mar 2026 21:01:18 +0000
Manifest next update: Thu 26 Mar 2026 21:01:18 +0000
Files and hashes: 1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: UYD9P1qkmFOnxKeYqX4LdHBFagGp7IM7ClnP5j2fLqo=)
2: xkug34IJaWSwOfn5zGdas0MixZ4.roa (hash: IepgvoNLMpyof9xTWeZX3c1cPMLbQuZpVjyEywQxdwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:40:c0:05:8b:5e:35:fa:be:dd:33:f8:01:d1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Validity
Not Before: Mar 25 21:01:18 2026 GMT
Not After : Mar 26 21:01:18 2026 GMT
Subject: CN=b754cd469117e01a121c8c21a3d223f30cde116b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:01:1d:b2:09:49:2b:32:37:4e:fc:0e:d1:c6:
92:ad:90:ff:e4:f5:75:41:15:ff:f3:a5:0a:c0:dd:
91:02:63:6c:dd:5b:e7:62:50:71:30:a5:12:11:6f:
2d:aa:e8:7b:87:29:02:8d:8d:ae:7d:2c:d7:bd:c0:
ff:f3:ca:24:47:e7:ad:c6:6d:98:a2:47:8a:74:d9:
7e:4a:d0:ac:c9:5f:18:e0:42:88:ec:ed:1d:fb:44:
a8:7f:3d:ef:3c:e2:98:e7:1e:cc:2e:b4:27:5d:d7:
30:3d:c9:22:ba:6e:a6:a7:90:8a:15:72:32:01:d7:
e6:91:90:1b:1a:23:4d:a2:72:fb:7b:77:24:ef:38:
da:4b:17:f0:e2:06:61:1f:fd:df:bc:b2:75:03:c5:
1a:14:3e:71:3a:b7:0f:28:ce:86:cb:7f:72:8f:8d:
61:b6:8c:f4:39:80:e0:47:c7:4b:3d:27:05:55:56:
cd:51:98:dc:77:03:97:b2:96:06:16:ab:f3:53:92:
86:f4:6f:24:c1:88:e0:60:59:89:fb:81:e8:ad:69:
86:f2:c5:ac:19:46:b4:e8:96:c7:c8:d2:b2:f1:9f:
83:4f:e7:89:9e:68:eb:b1:64:2b:9e:c6:75:b5:48:
71:87:96:03:23:88:3e:01:04:38:e9:0f:9f:f5:8f:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:54:CD:46:91:17:E0:1A:12:1C:8C:21:A3:D2:23:F3:0C:DE:11:6B
X509v3 Authority Key Identifier:
keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:23:cf:f8:0d:fa:bc:31:cd:26:36:8a:40:42:50:0a:dd:c6:
1f:05:d2:20:df:ef:af:cd:e4:d0:0e:3c:8a:ba:7e:fa:1f:bc:
ef:10:e0:ef:2b:c2:ca:c7:50:b0:6c:04:32:f1:e3:1e:9b:7b:
5a:36:e7:3b:f6:70:e2:71:a4:0f:64:3d:87:9d:23:56:f0:10:
88:9e:fc:50:61:9d:24:2a:dd:d6:1f:a5:94:ec:30:eb:1b:af:
d8:e4:06:12:94:fe:6e:8a:47:ef:ef:fa:2d:b4:78:8c:59:fd:
c6:60:2b:7d:bf:81:66:41:6a:f5:f3:11:31:dd:ac:0a:e6:6a:
3f:48:7d:72:e7:16:59:5f:4b:33:0b:b8:70:9d:2d:c6:fb:7b:
e8:a1:e0:34:91:65:9e:17:b1:cd:0e:5b:71:65:f1:81:4c:d0:
1b:a9:aa:04:10:76:b1:c8:61:5d:ed:23:dc:ec:5e:f9:49:f3:
ac:0f:ae:17:45:b0:7d:16:3a:5a:02:7f:fd:c2:5d:b3:0b:39:
ae:c2:71:0f:32:c8:2d:c3:40:e8:3d:66:aa:c1:12:cb:ce:ec:
6d:ed:fa:91:b1:67:7a:1c:63:9c:eb:a9:c4:ea:cf:b4:e9:a4:
60:d0:08:fa:b7:2c:cd:39:85:29:47:86:eb:e3:11:65:b8:13:
f1:74:9d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:05 2026 by rpki-client