Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: rNWS+tRahMob0UgvBsMeH0WiHzBAiboANSNeVk9VNTM=
Subject key identifier: DD:58:F2:75:79:CA:49:66:78:E5:3C:91:03:53:0A:0E:07:EB:83:C4
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 01A0E7AF3522B4516938A55E5B55246249FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 1A78
Signing time: Mon 28 Sep 2026 11:03:34 +0000
Manifest this update: Mon 28 Sep 2026 11:03:34 +0000
Manifest next update: Tue 29 Sep 2026 11:03:34 +0000
Files and hashes: 1: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: ZG1sWlwhka3W7w279VirAaPMOrW+AJcAqROyscD25+U=)
2: TDkaS-JTvMNiWICWG4ymOlGuWbk.roa (hash: rdEwK1puUd5tKIYhWm5xSUw39iHc4PHVAw0g6tLwiHU=)
3: xfHjlvR4GqmLKHrBF2UQj5zlnl4.roa (hash: 8M7wSB8jbbP+DfjlEMm6KSFYNEcYB3CLaxYLFnfuaa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:35:22:b4:51:69:38:a5:5e:5b:55:24:62:49:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Sep 28 11:03:34 2026 GMT
Not After : Sep 29 11:03:34 2026 GMT
Subject: CN=dd58f27579ca496678e53c9103530a0e07eb83c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:b2:86:d6:ec:a0:02:b5:17:fc:ab:79:69:
9f:3e:bb:38:22:9e:38:1f:12:69:a6:eb:6d:ae:c5:
3f:d1:b1:50:3e:1b:b9:9e:63:82:f0:05:1f:eb:c6:
a3:6c:a3:d3:1d:5b:72:16:c9:9e:3a:7a:e5:00:d4:
13:69:ae:c6:cc:d3:b5:4d:86:32:f1:2e:85:b6:41:
2b:c7:ee:1b:70:5f:09:16:e4:a7:6c:88:05:b5:a4:
04:a4:a8:c5:27:ac:62:e6:72:25:8d:70:d4:2f:24:
1e:f3:af:cd:e8:ad:31:d4:8f:1c:8f:f9:93:86:26:
70:43:ed:de:c9:d4:f3:a2:fc:80:91:d3:4a:3f:46:
0f:88:6c:62:99:12:75:25:ef:c6:4e:ce:77:ee:ff:
0f:fb:80:c8:58:4e:f4:8d:6c:3b:e7:79:e7:b4:ad:
6d:db:bd:fc:b1:52:ca:c7:26:82:07:f3:ee:46:48:
8c:1a:8b:c2:ee:05:0a:1c:3e:89:fe:e8:23:28:c1:
5b:b6:3d:46:43:4d:16:66:c2:b2:47:25:4b:c8:9d:
15:57:04:41:fc:8d:67:68:88:7f:ad:23:a2:4c:86:
e8:ce:d4:21:83:cd:eb:13:21:5c:23:09:e2:38:17:
18:9a:66:4c:9e:76:ad:69:1c:58:cf:5b:8f:95:4c:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:58:F2:75:79:CA:49:66:78:E5:3C:91:03:53:0A:0E:07:EB:83:C4
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bf:6f:e9:1f:5c:55:be:c3:3f:45:40:99:e9:14:4a:df:cb:
4b:cd:b8:b4:72:96:2a:55:56:46:c7:67:dd:9c:f7:85:b1:a0:
b8:f7:7d:ce:5d:b0:bc:35:3b:07:b5:31:04:53:3f:c5:19:57:
37:64:b7:09:fb:37:cc:38:06:54:56:d8:7d:53:5a:48:25:9a:
f1:68:5d:b1:9b:4e:ec:57:41:6c:5f:a2:c7:c5:38:40:b8:5b:
32:10:66:2d:97:30:0f:d7:01:0e:e6:71:38:91:a8:8c:a9:40:
94:2a:58:f9:40:22:6b:2a:0b:57:f9:28:5d:9d:9e:91:9a:a4:
9f:02:ef:ac:ff:1f:19:fa:97:3a:5b:b2:26:a2:e5:f3:b3:3b:
85:7a:f6:63:54:f1:82:3e:8f:a9:f4:f3:6e:e6:1d:e6:c8:82:
ad:1b:69:fc:e7:92:80:36:0f:08:c6:f2:f6:96:98:13:ee:e0:
c9:f8:9d:0d:38:52:0c:34:ba:fa:b8:e9:ac:80:8a:87:f7:a6:
d4:e9:3d:9c:40:e0:18:fa:7f:24:e7:ae:88:1f:f2:64:d8:9f:
0e:9e:64:ba:22:bd:94:19:c7:54:e7:81:98:92:db:bf:54:d9:
fe:93:bf:9e:1a:1e:ee:c4:02:0d:6c:44:50:fd:12:da:2e:c8:
49:34:b9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:30:17 2026 by rpki-client