Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier: VcHZ+RKJfMzwqVLdhKqGrudp9J5GNIL2TaAvLWD0lgM=
Subject key identifier: 7B:8D:44:FE:2A:A3:2A:41:51:99:43:3A:CE:0A:C7:8E:B7:48:AB:75
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial: 019D27DFBD573183F1B4392E291529A711DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number: 0B7D
Signing time: Thu 26 Mar 2026 02:01:07 +0000
Manifest this update: Thu 26 Mar 2026 02:01:07 +0000
Manifest next update: Fri 27 Mar 2026 02:01:07 +0000
Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: G67Ux5PB6Qu8om940o3EnSfcg0Sfp7DHJytwtnjntZA=)
2: urvvaO540p5lCG-661I_LYSazhQ.roa (hash: OYiQT7PXJGef2AODl6kFsbHiALBw8riu/71BAiKYr70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:bd:57:31:83:f1:b4:39:2e:29:15:29:a7:11:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Validity
Not Before: Mar 26 02:01:07 2026 GMT
Not After : Mar 27 02:01:07 2026 GMT
Subject: CN=7b8d44fe2aa32a415199433ace0ac78eb748ab75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:a4:c3:42:c8:95:93:42:91:ec:9a:86:d2:
44:3f:77:ff:17:73:39:05:54:2b:fb:68:f2:f3:16:
e2:85:81:42:73:81:5e:06:be:83:09:b7:e5:01:62:
7b:50:43:73:c8:fd:1e:c3:d8:95:46:4e:19:d7:a2:
da:2c:10:be:63:ca:9d:91:10:70:ae:fd:6b:b0:c2:
f5:2a:4d:bf:c7:29:6e:cf:c5:f0:4b:79:af:9c:3d:
2e:e7:1d:cd:18:e6:b6:2f:b8:09:5d:44:6a:2b:0a:
c6:63:42:a9:33:ba:fc:e1:6a:86:25:d5:c9:e8:da:
b9:57:31:d0:4f:90:21:4f:39:cc:69:b2:c1:0b:68:
8a:32:e6:55:19:0c:c5:c8:af:3e:8c:a5:96:d8:df:
83:a6:bc:25:73:21:94:df:a7:29:dc:7e:2d:ca:2e:
55:de:ad:af:14:08:bc:fb:4b:c0:ff:c7:c7:16:ac:
a1:eb:fd:60:fd:41:51:2e:9c:fe:d8:77:18:81:e8:
71:a7:71:2f:84:42:83:f3:08:7e:38:e3:87:2c:cb:
85:58:20:4d:f1:d0:5f:a9:0b:06:f0:a4:84:a5:fc:
5b:61:6a:0c:f3:db:70:93:a2:bf:34:25:ef:35:c2:
88:6f:ca:e3:b8:de:45:0d:dc:ee:2b:c5:90:47:36:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8D:44:FE:2A:A3:2A:41:51:99:43:3A:CE:0A:C7:8E:B7:48:AB:75
X509v3 Authority Key Identifier:
keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:62:98:df:2e:1d:33:41:7e:a5:82:a8:de:d5:36:52:c7:02:
0a:1d:50:65:9b:1a:20:e7:82:fe:76:41:f3:82:2d:3f:cd:51:
04:28:90:d0:07:08:52:d6:e7:eb:e1:35:64:7d:48:51:b5:c5:
75:7e:5a:85:29:ae:fa:b9:07:99:7d:c6:96:f1:e7:3a:11:a1:
7d:c0:0a:ff:4f:fb:51:1a:02:72:bc:de:df:10:67:9c:41:2d:
61:47:15:37:3c:5d:2a:b7:87:5f:3b:22:7d:f8:53:fa:b5:a8:
34:2b:f1:bb:8a:c5:dd:7e:70:ac:01:95:8d:8b:0a:a3:6f:95:
ce:d1:7b:21:2e:30:98:8d:b3:c2:e9:4e:03:5a:5a:2c:29:37:
b8:dc:1b:c2:c1:00:1f:a6:e5:ea:fd:b4:43:b2:ac:58:ee:55:
52:7c:bd:26:49:8b:32:23:8d:0f:e7:9c:05:91:4a:ea:36:fb:
15:bc:ae:a9:cb:30:98:4e:2d:7d:fa:bd:b1:cb:45:8a:25:28:
05:4f:05:11:3b:c1:d5:82:9d:6b:49:c8:58:49:07:63:6e:36:
7e:92:7a:25:73:c9:03:40:cc:1c:4e:66:54:ea:26:14:3e:c9:
9e:04:70:bb:c6:7c:dd:9d:b9:3f:ec:03:69:d1:a3:6d:13:b2:
e7:99:3d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:03:16 2026 by rpki-client