Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
File: 7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft (raw, json)
Hash identifier: ID1L1xD4ZsaefZrllQUSn+XjcMZOV5cdTeok8w3GAaU=
Subject key identifier: 15:37:78:AC:EE:85:73:B8:3C:7A:55:39:7F:22:53:80:28:86:69:00
Authority key identifier: EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
Certificate issuer: /CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Certificate serial: 019D2AA94A60DBB71FA8DF19D98E096FA920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
Manifest number: 19
Signing time: Thu 26 Mar 2026 15:00:30 +0000
Manifest this update: Thu 26 Mar 2026 15:00:30 +0000
Manifest next update: Fri 27 Mar 2026 15:00:30 +0000
Files and hashes: 1: 7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl (hash: o+Gq4dbFe+4sSiNfY7H5qxuLSMSs7le0281XQY0J258=)
2: Rubo6-NbY96YPObrTra-uq3P8fU.roa (hash: ky/M0LbnwTKBtipN4E15VVxICNF2Xh8wtPVIJDRLAKs=)
3: rBifEteMiJ25R5DQDU12NebJRS4.roa (hash: zud/trrJppI6pE83KUPt6r47Ql1iRfoDUPjneuGZTLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:4a:60:db:b7:1f:a8:df:19:d9:8e:09:6f:a9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Validity
Not Before: Mar 26 15:00:30 2026 GMT
Not After : Mar 27 15:00:30 2026 GMT
Subject: CN=153778acee8573b83c7a55397f22538028866900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:e6:3c:7f:06:e4:0a:d5:ec:9b:49:b5:e8:
a2:0c:19:66:43:80:d7:da:29:97:58:66:96:96:54:
ba:d8:bd:8f:fe:0b:bc:4c:37:08:78:ee:32:c2:b4:
92:3c:4c:ef:69:50:9e:4c:14:bd:02:d5:d7:ee:57:
ee:2a:3b:a1:0b:93:36:72:8a:53:0b:1f:6f:1c:6c:
89:d9:9f:69:c3:b5:0e:eb:06:a8:31:59:73:f0:7c:
f8:ce:d2:38:98:bc:30:36:5b:da:e8:43:8c:1d:e1:
df:9e:ab:b0:81:6f:98:5b:85:2a:6e:92:c5:89:f9:
e6:21:2f:21:63:3d:59:d7:63:b4:35:19:d2:ef:b4:
67:f4:18:de:9b:68:d7:26:86:e9:b5:11:5e:2b:db:
9c:28:ab:a1:33:6e:ae:60:59:56:45:78:d0:e8:3d:
fd:e4:b7:15:42:ab:25:7b:e0:3a:65:9d:70:0a:10:
da:1e:3c:b5:7d:88:51:9f:c9:d3:cd:d0:89:0d:2c:
99:6b:05:f2:b8:68:be:f0:7a:b8:49:72:a4:45:60:
de:2f:a2:2b:83:1d:ad:a8:d5:52:ce:3f:35:78:85:
93:e6:55:e9:7b:9c:7c:3e:c8:6b:46:1b:56:93:d1:
f6:fa:a6:fb:b4:bd:52:d7:16:44:4f:cd:1f:9f:0f:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:37:78:AC:EE:85:73:B8:3C:7A:55:39:7F:22:53:80:28:86:69:00
X509v3 Authority Key Identifier:
keyid:EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:66:ad:ba:5e:b4:e2:ef:53:04:6c:1b:30:be:ca:bc:3b:05:
b7:7c:e5:5b:9d:e3:59:09:13:d2:bc:82:30:2f:76:63:08:57:
54:30:54:c4:1f:41:6a:37:41:44:e8:fa:46:52:3e:a2:24:f0:
05:a2:37:88:fd:87:e5:2f:f3:bc:4b:cc:f7:7a:28:d0:e2:62:
13:b8:a2:a4:38:f4:aa:b6:f7:9a:e2:b4:a7:02:f0:51:07:27:
d0:4e:7f:e4:44:b2:1a:83:82:5a:90:a4:73:b5:7c:ca:4d:fc:
6d:4d:e3:d9:5d:05:51:4d:4a:c3:39:2c:0e:5d:b7:3b:8f:09:
ea:ef:df:ee:7b:33:7f:d8:1f:d2:5e:d0:5f:cc:9e:7a:17:24:
91:5d:ee:a3:74:78:9f:03:65:b9:b5:1d:50:7c:bf:8f:ce:5d:
ef:7c:40:8b:ec:03:5f:37:ff:bd:c0:87:6f:c7:41:85:8d:96:
1c:c9:ec:5a:0d:8e:6c:2a:aa:e7:59:ae:24:0b:5b:84:47:72:
68:dc:65:89:ad:25:f5:56:e5:af:0e:b9:3c:9f:9f:37:73:7a:
80:35:be:9a:d9:a0:ca:76:21:4d:75:bb:3e:70:69:31:5d:ac:
15:c4:1d:ad:d8:b8:62:bd:fa:67:59:de:df:09:8a:39:87:a7:
cd:30:be:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:06:17 2026 by rpki-client