Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
File: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json)
Hash identifier: krPiiowF16HLmfRxLhyDqZgKxw4Btf85cTbRY+ESYJI=
Subject key identifier: 33:39:34:92:48:2D:2C:51:10:C8:64:5D:C7:02:D0:28:55:39:B4:E1
Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Certificate serial: 019D265F775751E5B4499141D798AE572EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
Manifest number: 05FB
Signing time: Wed 25 Mar 2026 19:01:23 +0000
Manifest this update: Wed 25 Mar 2026 19:01:23 +0000
Manifest next update: Thu 26 Mar 2026 19:01:23 +0000
Files and hashes: 1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: OKdlb22lmeKSLuCpCggUyQy+I9igX1cB7UCX2iKMT/k=)
2: l1mFVAOuxHZKBwMbg64rZnUC-1A.roa (hash: b+iEU9Au8tIP5RGBvo59a7Rag467Ip6uQFWhSxkco+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:77:57:51:e5:b4:49:91:41:d7:98:ae:57:2e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Validity
Not Before: Mar 25 19:01:23 2026 GMT
Not After : Mar 26 19:01:23 2026 GMT
Subject: CN=33393492482d2c5110c8645dc702d0285539b4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:66:1d:db:ba:14:77:e7:7d:1a:c6:9e:68:f7:
4b:52:8c:f8:2c:f7:6b:93:4c:b4:c1:8f:48:dc:9e:
55:7b:2c:de:0f:fc:05:4a:c6:33:8d:4c:f2:be:93:
04:87:42:42:8f:c5:a6:74:70:e0:5d:e9:af:bc:33:
64:65:ab:66:ae:9c:62:78:68:02:1c:24:98:31:91:
e7:7b:c0:07:6e:2f:a0:25:b6:69:65:f2:fc:4b:87:
ca:ea:21:53:6c:84:61:28:33:d1:fb:a7:aa:5b:10:
be:19:69:7e:2f:6e:c6:f1:da:34:51:84:3d:9d:e7:
54:9c:b5:78:a4:77:62:1e:42:50:d5:3c:bb:d4:67:
4f:fb:10:39:e4:9e:25:0a:39:b0:2d:8f:6d:cf:cf:
01:b2:10:d7:b3:a7:90:52:cf:93:1f:51:c9:dc:24:
7a:58:44:b9:12:4e:87:d6:f5:06:15:28:b3:5b:f1:
75:1e:72:1b:68:82:f9:e2:4d:ca:83:ce:03:e5:02:
34:68:f9:37:a2:3c:0d:e4:9d:1e:43:1d:0b:42:5c:
ef:8e:1e:f6:3b:9a:81:7c:cb:86:f2:cf:ab:c5:15:
59:73:d7:67:e8:02:be:fa:54:a9:94:45:78:9b:bc:
92:88:e6:e9:b7:51:d1:7c:0c:12:96:5f:e8:5d:b8:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:39:34:92:48:2D:2C:51:10:C8:64:5D:C7:02:D0:28:55:39:B4:E1
X509v3 Authority Key Identifier:
keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c6:6d:87:6d:31:99:dc:27:03:33:44:6e:85:9a:8c:11:71:
eb:5b:7b:5f:06:c6:f5:00:7d:59:5a:e5:a1:1c:89:b9:42:aa:
5d:96:d2:76:8d:de:29:c3:ba:bc:19:0b:2b:1d:0f:ad:8f:90:
6a:6b:82:21:ae:57:c5:2a:94:d4:ab:b3:bf:84:f7:e6:df:f7:
05:2a:e8:cf:58:c0:69:4f:ed:2a:1f:93:33:12:1b:fa:cd:32:
3c:a7:4b:a9:2b:ee:d8:06:85:12:7b:6f:0c:c6:04:11:d7:20:
1f:35:cb:6d:48:a0:83:03:8a:4e:4e:b9:7c:3e:0d:ef:2a:8e:
30:a9:d4:c7:78:08:d9:56:bb:c0:1d:0c:bd:08:48:88:e4:ba:
37:08:c1:99:4d:86:21:61:22:f9:37:14:9c:5e:3f:ff:65:dd:
87:62:b7:10:1c:c9:3c:90:26:53:71:91:85:d8:e1:5f:9d:a6:
97:05:9e:42:f8:85:53:88:3c:37:e3:65:f8:e9:12:d0:f4:f0:
6a:23:48:f9:87:6d:3b:b8:47:09:75:a0:86:94:57:f1:b2:63:
b1:d0:b3:e4:41:e5:a9:13:4c:f4:09:a1:ec:0a:b2:a2:39:be:
bb:a8:66:de:b4:e3:82:31:5b:a9:0a:95:b4:89:2b:c6:bd:4c:
45:e0:03:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:15 2026 by rpki-client