Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: dmCxWZ5TBr8xNPFv0nVv8nFFjxG5/bEYPzX/otV90EU=
Subject key identifier: FC:F3:5C:E3:63:8E:9A:73:CF:FE:15:32:37:B3:63:34:20:C0:C6:CA
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 019D2AE0B7F707351A62AF3B5FDF2204F5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 16:01:03 +0000
Manifest this update: Thu 26 Mar 2026 16:01:03 +0000
Manifest next update: Fri 27 Mar 2026 16:01:03 +0000
Files and hashes: 1: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: +dXSYlUZTMEyQgoZ/5aFg7BJxnhbgnUOnPJxZ0DsYNw=)
2: lBKb95x_7BAv49LYfrO19Hosuas.roa (hash: u8R/9/gVEM8wPOouFpMqLvJteQ0bg4i6gAiI/GzejGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:b7:f7:07:35:1a:62:af:3b:5f:df:22:04:f5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Mar 26 16:01:03 2026 GMT
Not After : Mar 27 16:01:03 2026 GMT
Subject: CN=fcf35ce3638e9a73cffe153237b3633420c0c6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:68:df:67:c8:06:3f:db:0a:4c:a7:49:26:
11:c0:36:dd:2b:5e:c1:a7:2f:17:e4:fb:54:72:e8:
50:80:8b:0f:64:e8:6d:52:14:cd:56:53:d9:ee:e5:
a5:af:70:3a:7c:a8:3d:73:e3:fa:7b:7f:0f:8f:46:
73:c7:6e:49:de:b2:6b:a5:7e:0b:c8:a6:41:88:eb:
1b:a9:92:19:12:03:f7:7d:76:5e:da:69:b6:9b:8f:
73:94:e5:80:4a:28:1c:1b:f8:ca:fe:3f:61:93:1c:
3e:1f:17:c2:5a:45:38:a5:25:e5:c0:2b:b5:2b:46:
43:d6:ae:a0:81:05:a4:c0:0d:e3:50:73:35:db:8a:
b5:ca:fb:ce:9e:92:cf:ce:77:66:64:ee:d8:02:0d:
5d:22:64:d0:64:da:1e:db:b4:18:9e:5d:45:73:21:
be:5e:fe:05:ae:7b:12:9b:71:86:a6:ef:da:df:74:
6e:4f:09:cd:b7:df:9e:6a:28:ad:a0:c3:a8:b0:ca:
13:1c:6b:b5:59:30:aa:23:51:6b:38:91:7d:51:20:
92:42:5c:98:9d:9f:91:b2:db:5a:ae:ef:33:05:cd:
0b:7c:a4:9f:60:1b:50:f8:9d:68:e6:23:4d:58:19:
dd:0e:af:7b:8c:8b:7f:27:c1:e4:41:07:a0:95:12:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F3:5C:E3:63:8E:9A:73:CF:FE:15:32:37:B3:63:34:20:C0:C6:CA
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:dc:dc:95:1b:e4:0b:86:24:e8:c6:d5:86:ec:d8:73:a9:e5:
08:5d:66:69:f9:24:fa:02:73:00:17:72:17:ff:38:d6:61:ed:
68:3b:d9:b5:95:1e:f0:04:7c:db:23:77:3a:28:f2:f2:dc:74:
88:47:8c:de:5d:be:bd:bc:36:02:d7:10:e8:6e:d2:29:35:89:
eb:6d:07:aa:bc:cd:09:f3:38:4e:a9:03:08:ba:d2:4d:24:18:
fd:d8:52:80:bf:0b:c6:b4:65:55:5d:94:80:cb:18:10:19:68:
f7:2d:8b:d3:0c:97:77:a3:71:7f:e2:64:a4:c4:f0:38:0d:22:
35:c5:38:d4:19:53:2a:a6:85:b3:8c:85:e4:9a:bd:8a:b0:6f:
b6:a9:2d:92:5a:e7:96:e8:7b:72:cc:49:04:45:31:33:51:78:
d4:e9:c8:a6:be:2c:cf:94:27:c3:15:55:fd:af:f4:f6:c3:62:
8b:05:35:62:dd:45:e7:a0:02:b7:17:1b:0c:69:8e:57:1a:b1:
d2:0c:71:69:10:24:89:4d:b5:fd:ba:aa:d8:9b:bc:16:8d:b3:
38:d7:89:7f:f6:de:96:6e:08:d8:d9:4a:40:41:29:c0:17:96:
c1:82:55:39:4a:0f:9d:99:3e:c8:5e:41:92:60:be:3a:81:4f:
5e:51:75:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:49 2026 by rpki-client