Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
File: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft (raw, json)
Hash identifier: Dj0BNbVpzaBbW9VvMrlHsOOaBYgkcBSfxlnXkbEX6s4=
Subject key identifier: A8:F7:B3:80:7F:05:96:26:59:47:49:F0:42:92:E2:56:B8:72:65:CD
Authority key identifier: EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
Certificate issuer: /CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Certificate serial: 019D2B4F0B2DE1EC430D31C22FAA511A9FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
Manifest number: A0
Signing time: Thu 26 Mar 2026 18:01:33 +0000
Manifest this update: Thu 26 Mar 2026 18:01:33 +0000
Manifest next update: Fri 27 Mar 2026 18:01:33 +0000
Files and hashes: 1: 2gPdkQWW9jUCbizX1SsNX62y_98.roa (hash: VSRNfwKyTAYD9LB8Wv+fsBtowZBw7KWBvIp7E5dQ+Cg=)
2: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl (hash: sViGcEwTrMmunwkLroEEbMwU+ZnuDwJ9SlT/01YJSVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4f:0b:2d:e1:ec:43:0d:31:c2:2f:aa:51:1a:9f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Validity
Not Before: Mar 26 18:01:33 2026 GMT
Not After : Mar 27 18:01:33 2026 GMT
Subject: CN=a8f7b3807f059626594749f04292e256b87265cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:60:b1:95:ce:5a:01:3a:a8:69:db:4a:4d:
be:ba:b7:bf:11:05:c4:1b:3f:46:06:ba:c5:b4:a4:
16:7b:80:81:5d:be:13:4f:50:3a:a3:19:50:7d:3f:
c7:48:15:16:67:97:38:c6:58:85:7d:d0:61:b3:26:
af:a2:01:10:fe:44:88:16:e8:ab:3b:32:dd:e1:ca:
07:8f:ad:a4:a6:dd:4e:61:c6:4f:95:5f:d6:b4:c7:
60:14:c6:fe:8c:fc:8d:cd:22:d5:88:bf:de:e2:e9:
54:c0:c5:48:8c:ea:78:1d:24:03:3e:0a:5a:ef:26:
71:4c:6b:47:83:72:e6:65:98:13:58:24:7d:f7:c1:
17:e7:97:5a:2e:97:3b:ce:46:49:b0:28:09:75:ae:
b3:47:1b:0d:12:bb:8d:9a:13:d7:ca:33:7b:4b:39:
e7:d4:1e:24:ef:93:d9:f7:13:2c:8e:c5:df:a8:e7:
5c:37:5c:bc:5a:6e:7c:14:b4:4b:50:b1:de:7e:15:
b6:f7:31:5b:54:c8:b0:30:46:4c:63:41:7b:7b:12:
44:44:c0:0f:fa:7c:de:6d:3a:47:ce:e2:41:64:c6:
4f:1c:d6:5b:33:f2:8b:23:c3:38:c2:87:ee:54:3e:
14:ac:84:d3:8b:b4:d3:16:cf:57:64:85:11:61:ca:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F7:B3:80:7F:05:96:26:59:47:49:F0:42:92:E2:56:B8:72:65:CD
X509v3 Authority Key Identifier:
keyid:EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:87:0b:48:85:d0:12:e7:cc:12:97:26:bc:bd:1a:21:34:2e:
a9:3d:64:b6:0c:7d:e9:0a:93:96:65:e2:df:18:7f:8a:2a:1c:
53:11:14:2b:f2:b9:25:f6:ac:aa:fa:a0:97:76:ed:0b:1b:65:
81:fa:66:19:31:95:d4:b3:86:4e:dc:d2:45:2a:3e:04:41:44:
c3:91:43:56:c0:f9:ab:f3:91:51:4f:da:b4:d1:3b:fc:c7:d2:
ed:18:f7:11:bd:3c:e7:08:73:05:a6:7a:45:3f:2f:4f:34:d0:
5d:cb:34:78:55:bc:1c:2f:a8:61:7b:c6:70:6d:21:c3:bd:b6:
23:b0:16:9f:27:05:ec:74:b9:39:76:f0:10:6a:6e:e9:71:44:
01:94:3b:51:36:26:7a:ac:dd:fd:02:02:18:25:8e:20:cc:97:
23:6d:e7:f2:4e:52:a9:1e:08:1f:b5:54:1d:58:96:96:e1:bd:
0b:6b:39:61:4b:db:73:a4:b1:7b:24:ec:0e:69:01:61:6d:1f:
63:7c:99:ff:10:a0:52:8e:d6:ec:63:af:7c:c5:97:5e:dd:b4:
bf:81:5f:51:80:15:00:37:50:32:15:fa:6e:7a:02:9a:fc:5e:
cd:a0:ed:20:cb:4e:4e:98:b9:19:e6:97:ad:37:73:e0:d3:a1:
b8:3e:29:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:33:54 2026 by rpki-client