Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier: wu/MevpkOj7OkRfpOgBwfTXerHHhJEOmi8QlZQDeGfU=
Subject key identifier: E2:4F:75:BD:E4:AB:C7:4D:BD:EA:9B:5B:D3:8D:E9:51:BE:9C:71:3C
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial: 019D2772E5A99F0BD70B09E50491A51D2D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number: 0FF5
Signing time: Thu 26 Mar 2026 00:02:14 +0000
Manifest this update: Thu 26 Mar 2026 00:02:14 +0000
Manifest next update: Fri 27 Mar 2026 00:02:14 +0000
Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: rNczc7D8bt8Su9UM7wkAlfN6xjdmTWCRIGyR2iGSqTE=)
2: MF5bEoN5sg-nawNjAIcgKbPLo2w.roa (hash: Eoby9ocfXIo2ysG9Id22HAzaklocSsTXx7pabi0Mev4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e5:a9:9f:0b:d7:0b:09:e5:04:91:a5:1d:2d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Validity
Not Before: Mar 26 00:02:14 2026 GMT
Not After : Mar 27 00:02:14 2026 GMT
Subject: CN=e24f75bde4abc74dbdea9b5bd38de951be9c713c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:f7:6f:ff:3d:44:97:ae:76:ec:50:26:83:
ed:bb:68:6e:22:e8:34:43:fb:3d:16:07:91:5f:4e:
32:d2:b3:81:db:5c:6b:71:0d:64:13:a9:84:c3:49:
35:d0:a5:a3:db:a1:81:73:bc:e8:7d:2d:12:22:da:
f9:d0:c2:c3:56:ef:ea:62:00:03:a8:0e:ff:f7:ae:
f1:30:f9:94:76:ca:3d:ad:f2:ee:37:bb:1e:99:68:
07:85:4c:23:50:4f:e8:20:95:6d:15:a8:5d:47:51:
88:35:ad:b2:9f:ec:68:5b:87:05:42:c3:ff:eb:43:
96:58:5c:62:22:43:9a:87:e5:21:33:53:be:20:ac:
8c:ac:f6:71:5b:7c:82:fc:2b:38:53:f9:7e:97:6e:
9f:39:c8:e6:ed:e6:55:f6:50:fe:5c:91:87:98:cc:
bb:5a:e6:7a:89:20:02:32:83:4b:7f:bb:8f:89:ef:
0a:90:17:f3:f7:5b:4a:8d:4e:d7:a8:75:2b:86:56:
bf:b9:bf:13:c6:e4:0f:2a:2e:bd:bc:f2:45:de:a2:
be:e7:6c:af:ec:94:e0:10:06:7e:98:50:63:c6:69:
d1:89:15:9e:46:48:48:d2:d7:64:64:cd:2a:06:4c:
99:fd:9c:e0:fe:98:1b:80:c7:4e:03:54:de:6d:99:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4F:75:BD:E4:AB:C7:4D:BD:EA:9B:5B:D3:8D:E9:51:BE:9C:71:3C
X509v3 Authority Key Identifier:
keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:67:21:09:1b:99:3e:fc:91:94:9a:f5:47:9d:64:f6:8a:31:
e6:c2:d4:9c:0f:53:d3:24:26:8b:2e:b7:69:7d:d6:51:2b:ae:
b5:de:3e:9e:7c:3a:fa:8d:f8:74:ec:a3:35:11:4c:1e:51:53:
93:cc:ef:7d:be:77:98:a4:bc:f8:3d:93:d8:c4:c9:05:8d:6e:
78:b8:02:27:3a:66:b4:75:71:d6:5a:ea:46:b3:35:9f:f9:61:
8a:b3:47:e5:49:f4:51:ee:2c:0d:c1:25:b9:de:48:cf:4e:13:
c9:38:d0:9b:f8:9f:b8:ce:3c:ea:f3:fc:97:20:d1:8b:76:5a:
eb:19:79:48:3f:c2:14:08:af:39:1e:82:01:45:26:2b:aa:d5:
a5:70:6d:ac:0f:ce:58:d4:16:79:50:e4:08:04:cb:28:06:c7:
42:38:0a:85:5b:54:d2:3a:58:bb:3c:ea:1a:85:dc:d2:89:98:
0f:9f:bf:92:f4:a1:e6:d6:35:7b:25:4b:53:9c:e3:ef:09:18:
17:9a:b8:83:d9:32:9c:15:f3:24:a9:c4:80:2e:e2:17:ce:93:
3f:f5:d0:73:b3:20:0e:ce:65:61:29:b8:d8:3f:b5:75:91:12:
ec:d9:44:3e:25:18:9c:d9:21:77:32:77:3d:ba:7c:e3:a1:ee:
ee:2d:a7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:26:51 2026 by rpki-client