Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: +yRVPBIZFe5XemR6cp5HE/k2JnM9DeXSBMrF5RX89DA=
Subject key identifier: 37:7C:F3:8D:62:0B:FA:7A:09:A2:2D:7C:14:73:E8:EB:B2:27:6C:E5
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 019D27DFC1F4AB3A0545DE53A55571CDC730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 02:01:08 +0000
Manifest this update: Thu 26 Mar 2026 02:01:08 +0000
Manifest next update: Fri 27 Mar 2026 02:01:08 +0000
Files and hashes: 1: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (hash: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: HQy2igQCNzA0H99Ka5i+nYPK7JwfkfO+Hou7CL1vhMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c1:f4:ab:3a:05:45:de:53:a5:55:71:cd:c7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Mar 26 02:01:08 2026 GMT
Not After : Mar 27 02:01:08 2026 GMT
Subject: CN=377cf38d620bfa7a09a22d7c1473e8ebb2276ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:49:6e:c2:bb:37:31:bd:8a:00:f8:92:6f:
ee:ed:12:ac:0f:45:82:0d:98:41:67:d2:1b:4b:f1:
2c:e0:3b:7e:fc:b4:78:53:fa:e3:c5:74:39:0c:b3:
f8:09:59:19:49:3c:79:a1:c1:eb:ed:c4:b7:33:08:
77:f8:5a:09:32:88:13:c9:69:ff:20:09:cb:ed:de:
a5:a1:a7:9f:ec:9a:2d:ee:12:01:c8:4e:71:45:5a:
1c:89:90:69:fc:da:c5:f9:49:9e:56:b2:89:69:a3:
4d:78:19:62:2c:c1:52:b6:b0:1e:a8:5a:d8:e2:b1:
f5:98:4c:44:62:f1:51:6f:3b:50:4d:61:58:2d:7f:
9b:af:cb:6f:f9:04:b4:83:90:67:83:7f:08:7c:2e:
c2:ab:53:13:87:49:b1:44:39:4b:65:5d:19:ea:f5:
ef:64:a1:7a:41:e5:2d:0e:fb:86:2f:d9:2b:52:56:
01:e7:5f:0a:cc:33:9a:6b:ca:ed:e8:d2:88:ad:37:
ca:7b:28:30:7b:22:ee:c8:10:f2:f6:31:f1:c8:de:
c3:dc:52:d7:2f:5c:22:6d:e0:a3:bd:41:f2:8c:46:
c3:5d:1a:43:04:63:71:45:46:4b:12:7e:0b:73:b6:
44:88:80:99:15:4d:c3:49:e0:a2:44:b4:66:a1:03:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7C:F3:8D:62:0B:FA:7A:09:A2:2D:7C:14:73:E8:EB:B2:27:6C:E5
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:14:93:3b:30:1c:ea:25:3b:fd:e4:27:01:09:41:76:10:db:
90:88:60:20:77:db:1c:70:97:91:b7:90:59:3f:78:66:05:b5:
9a:06:72:1c:3b:59:49:1a:1c:06:d0:63:f4:e9:ec:9e:e6:ce:
67:8f:5a:8e:47:ba:20:68:e8:a9:05:20:11:63:b9:0e:73:a0:
c6:f4:c6:ef:d2:6f:e2:f2:bb:90:27:99:79:93:17:21:0e:a0:
fd:34:9c:c6:dd:9c:78:4c:4c:36:d4:df:43:bf:91:98:8a:80:
e4:e8:dc:1e:21:57:ef:5a:1e:91:56:1b:bc:00:ee:da:9b:87:
5b:78:6f:2a:ed:d8:49:20:67:2e:0c:a3:4a:3c:aa:53:39:71:
71:b6:31:8b:2c:f0:65:05:5b:be:69:f1:67:80:49:88:d8:1a:
92:51:be:97:7d:c9:dd:a0:23:55:ee:60:0e:29:0a:40:87:83:
42:5d:f1:57:37:e1:f8:ae:89:c9:eb:d2:e3:a4:58:bf:1a:84:
d6:e4:26:cb:fa:58:df:ba:b3:1c:15:23:9b:a6:1d:60:95:b9:
2d:2d:b5:c7:b6:08:be:11:cf:3b:d8:87:4b:22:9b:1c:4b:c2:
87:81:71:4e:f5:da:41:ce:d2:0c:99:aa:6f:9f:7b:e4:ec:91:
a3:b2:74:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:54 2026 by rpki-client