Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier: XkYeCyFXWRsClslMHvbiD7JLBuKttSlJ27wtffdkqic=
Subject key identifier: AC:67:22:98:94:40:0F:4A:40:8E:C6:00:8D:D6:BA:FC:DF:05:2F:D9
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial: 019D2AA9D6F31D1A2CBE8AB42FFBF2576DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number: 080C
Signing time: Thu 26 Mar 2026 15:01:06 +0000
Manifest this update: Thu 26 Mar 2026 15:01:06 +0000
Manifest next update: Fri 27 Mar 2026 15:01:06 +0000
Files and hashes: 1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: I0L6Z3IDujnwkMNwlcMSp9kpvSSq3758+oHwyQmvZqQ=)
2: ci8f7Y86uB9atamo1D3e8sszzV0.roa (hash: JE0+am3liaO3am6zHqUi0SmfiCv9crbc5X4aX8Cwg8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:d6:f3:1d:1a:2c:be:8a:b4:2f:fb:f2:57:6d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
Validity
Not Before: Mar 26 15:01:06 2026 GMT
Not After : Mar 27 15:01:06 2026 GMT
Subject: CN=ac67229894400f4a408ec6008dd6bafcdf052fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:27:c3:d2:b0:9a:9e:42:92:fb:aa:22:e5:
03:03:fd:05:37:c9:74:3a:01:5c:f9:56:57:62:64:
bb:eb:30:d1:54:11:44:9d:3c:88:bb:fa:1a:34:02:
8a:9e:16:b3:2b:ab:8c:0e:c3:2e:b9:71:11:e1:23:
71:91:bb:6b:82:ce:2c:3f:f2:3e:56:d1:9e:d5:9e:
21:34:e0:08:f2:4b:c2:6c:f9:a5:65:68:6d:89:06:
42:bd:84:1e:5e:cb:8c:58:27:75:11:28:41:a4:77:
59:cb:b7:46:95:a9:e2:96:e9:dd:9f:2f:65:33:e2:
40:7b:a9:3c:27:6e:04:40:89:ee:e6:8c:03:50:84:
49:8e:37:b7:ac:7b:f1:da:94:d5:0e:a3:7d:2b:19:
ec:c4:20:80:27:18:7f:c6:16:c9:14:10:dd:ef:e8:
1b:b8:b4:bb:ff:eb:e8:07:c6:4e:89:46:e1:a7:ba:
6d:d7:90:3c:5d:30:bf:43:29:18:df:20:48:3f:b8:
03:8a:e8:4d:46:9f:e7:8e:90:92:9f:9e:e2:0d:f8:
fc:c5:3e:b0:6f:24:a1:28:55:a2:8f:55:6e:11:64:
e9:1b:42:fb:90:7b:0a:ee:19:ff:82:4c:8a:59:a4:
d4:d3:16:f0:6b:9e:16:5f:4b:8d:9e:6c:fc:89:16:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:22:98:94:40:0F:4A:40:8E:C6:00:8D:D6:BA:FC:DF:05:2F:D9
X509v3 Authority Key Identifier:
keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:86:f4:69:ff:82:f6:e3:94:1e:0c:19:aa:ba:f7:01:fc:7f:
f4:b2:79:62:97:c7:e3:58:aa:79:1f:31:a0:6c:0b:49:4a:3c:
ca:27:37:b9:9e:a0:85:7c:bb:32:e1:62:d8:05:ea:ee:10:4c:
d2:cc:64:bf:9c:b0:5a:6c:17:53:59:d5:ad:3d:43:5c:a4:20:
a7:db:57:57:e5:ff:fd:8e:91:39:0b:5a:96:73:d5:15:f9:2f:
ac:29:db:9e:e9:eb:a3:ad:02:d2:b1:a6:55:8f:a1:94:69:4a:
b1:cf:e4:54:1c:2c:b6:eb:ca:bc:0e:40:5c:60:69:66:24:16:
70:f5:45:3c:89:69:c7:92:d7:c4:32:02:f6:f5:f0:85:1d:9a:
39:12:5a:31:f7:f0:31:c1:f9:7c:00:cc:9a:cc:c7:76:38:84:
ed:dc:49:18:91:14:7b:b1:5d:33:5e:d1:c9:c2:1e:96:4f:11:
91:3e:e8:1f:0c:9b:b2:dc:53:ce:1b:d5:38:66:c1:27:d2:28:
8e:8d:ce:fc:4a:73:85:f2:74:b8:a4:91:43:94:7e:63:6a:23:
66:ea:36:70:7d:8c:4f:ad:10:1e:86:2b:a7:71:1d:0a:d3:16:
3b:a8:a0:dc:bf:a2:d3:10:04:f7:de:92:6f:67:af:16:ba:7e:
de:e7:23:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:15:09 2026 by rpki-client