Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File: 7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier: GawM/Raj0JD+0PcKs1GUBRY9+jsnzeEYM/4jR8q6yM8=
Subject key identifier: 24:72:4D:82:D0:3C:0A:E2:A0:6F:E9:04:C2:89:DF:50:E1:B1:67:76
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial: 019D29CE1E09F9290E25FFFCA730C3F86B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number: 11F2
Signing time: Thu 26 Mar 2026 11:01:07 +0000
Manifest this update: Thu 26 Mar 2026 11:01:07 +0000
Manifest next update: Fri 27 Mar 2026 11:01:07 +0000
Files and hashes: 1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: 3oyy3rXd3byXzGZXnPqJ94Gqnp/5yqGh0vOUGw6ggs0=)
2: ROD76SwfYB6C6gAmh6ocy7RmvzY.roa (hash: 8kz9BVZL6aAIte+oXvcJlqrJDsa6yWdXpOPNdQQYCKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:1e:09:f9:29:0e:25:ff:fc:a7:30:c3:f8:6b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Validity
Not Before: Mar 26 11:01:07 2026 GMT
Not After : Mar 27 11:01:07 2026 GMT
Subject: CN=24724d82d03c0ae2a06fe904c289df50e1b16776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:ae:d4:5d:f1:1b:c0:32:3e:8f:e1:4d:74:
e0:f6:6d:fc:3e:49:f0:e4:85:bc:2b:cf:f1:bb:89:
fd:44:dc:5d:d8:1f:26:bc:83:93:97:92:48:2a:6a:
f2:17:03:8f:f1:07:91:43:1d:21:18:d3:72:fe:26:
49:51:74:49:4f:d5:29:c7:8d:5b:97:c4:db:ff:28:
60:29:9d:40:19:60:bb:29:5e:ae:e8:b5:b4:97:a2:
a2:1c:29:7a:49:89:b1:41:ec:d2:39:b8:f0:6f:ce:
57:56:ab:be:75:02:27:80:27:3d:6e:70:09:b5:68:
0b:3e:b7:77:d8:7d:99:cb:d0:29:79:bd:ee:62:dc:
96:77:63:5a:44:3a:8d:13:17:f5:00:e9:e3:84:cf:
ee:93:59:86:a3:9a:db:07:69:dc:98:e2:53:9a:5f:
c9:ee:b8:e7:92:72:3c:4b:dc:3a:0a:96:a3:2b:89:
2b:08:51:18:dc:e7:47:9d:27:ac:08:35:f6:a6:d5:
fb:90:a4:95:73:8b:79:99:d4:e8:3e:77:89:7d:ab:
bb:70:dc:e5:6e:4e:19:9b:f5:3d:49:7f:5b:d3:2c:
07:c9:99:88:b1:b6:e0:a2:c5:e3:e6:02:60:82:ce:
d8:ec:c8:57:73:11:6e:6a:7f:8a:fb:3d:c6:3e:8b:
48:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:72:4D:82:D0:3C:0A:E2:A0:6F:E9:04:C2:89:DF:50:E1:B1:67:76
X509v3 Authority Key Identifier:
keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3d:94:f7:f1:6b:68:9f:0d:71:53:52:c9:e8:47:f6:dd:5b:
f4:09:26:07:b7:89:89:85:1b:b7:cc:3e:bb:be:ce:f9:64:54:
2a:40:30:c6:93:aa:62:66:94:ce:bd:da:eb:23:8b:a5:d6:7e:
e0:c8:7f:a9:0c:cf:c1:e2:f5:d4:10:6f:46:f1:07:50:72:57:
90:9b:fb:b3:28:39:63:ea:2c:3c:31:2b:26:81:c2:7a:f6:30:
ea:71:0c:dc:eb:c5:81:b5:2d:bb:3e:d0:6d:99:05:27:e0:65:
72:c7:0d:29:51:11:a9:c3:06:50:ce:44:61:1d:61:ec:7e:87:
49:67:65:3e:bf:15:73:59:ee:ca:66:9b:91:69:03:71:73:7e:
47:da:dc:56:61:d9:10:25:94:1e:a1:75:a4:fe:10:bb:37:0b:
ca:33:1b:fe:dd:4f:4a:ed:75:65:b9:41:49:61:ab:d4:7d:0b:
1f:57:dc:6a:2a:5c:07:05:16:aa:84:a2:3d:d3:c2:0a:63:38:
9f:69:a3:bd:2b:83:88:64:ab:13:2a:6a:06:02:24:7f:1e:f5:
1e:84:a9:cf:33:71:5e:4e:e1:c5:d7:d4:8d:55:7b:59:41:04:
4b:f3:4f:53:38:0e:8c:e9:80:5f:d1:89:7e:4f:50:b3:62:5f:
fa:06:07:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:06 2026 by rpki-client