Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: V/H1gcLVeBMjdchFnsKYLje0j5UUyVdy6kyT7tg0R7Q=
Subject key identifier: 04:30:69:AC:43:79:0A:B2:3A:67:6E:31:74:15:64:EF:FC:D9:7E:9E
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 019D29611CD438021DDAA20740A33FD2BA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 1608
Signing time: Thu 26 Mar 2026 09:02:03 +0000
Manifest this update: Thu 26 Mar 2026 09:02:03 +0000
Manifest next update: Fri 27 Mar 2026 09:02:03 +0000
Files and hashes: 1: 3wC4iAYIU6RjN3EGUKVhlIp3rko.roa (hash: r6BtCtLIRGTbjhqdmmeh1e+4MWSh7VLtqxWzoKISutU=)
2: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: +w9BJZmfdvKnnaXl8X7MR24/eB9wVXXxilBGZtsWoeM=)
3: H6GA7joAUfNPurokrgS1LJjNtfY.roa (hash: FKRThdMjAtwcwfUfR10ZtwzWVg2CFJr5Omg8dgAq7bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:1c:d4:38:02:1d:da:a2:07:40:a3:3f:d2:ba:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Mar 26 09:02:03 2026 GMT
Not After : Mar 27 09:02:03 2026 GMT
Subject: CN=043069ac43790ab23a676e31741564effcd97e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:f1:e1:c5:3e:21:56:c6:03:1d:67:6c:24:
fc:57:62:3c:3f:65:c5:61:83:6b:f5:98:35:f3:de:
cf:dd:1a:fa:0c:cd:04:6f:25:a2:b5:1b:8e:2e:f2:
4f:5a:0a:65:ab:a8:72:42:ef:5c:df:d1:6d:5a:40:
92:2a:62:96:28:1c:28:ed:ed:9a:de:28:74:7e:48:
03:a3:d7:09:ae:7b:1f:9a:ad:1a:59:60:24:73:82:
69:b7:74:71:39:89:04:6e:d3:9b:97:fe:19:b2:0f:
9c:39:01:27:06:4a:62:73:ce:ca:68:21:f1:ce:5f:
5d:bb:c5:e1:17:57:03:11:a6:f8:7c:90:6f:f8:08:
26:d6:5b:26:40:af:a0:50:43:2a:f4:49:18:3e:e0:
d6:e5:3c:ce:f6:10:90:21:fc:db:38:69:bc:b3:3c:
f9:c2:75:b3:fc:4d:c0:f9:37:4d:0f:83:4e:7b:e9:
67:f7:6f:b9:0a:79:d5:4c:87:c8:a5:b6:41:9d:fc:
ec:06:0b:f4:1e:f9:3e:fc:59:e7:c7:4b:45:f6:cb:
46:fa:f6:b1:1d:90:2c:d2:b2:ad:07:2e:8a:71:d1:
d5:58:40:9f:8e:41:6a:1f:f9:d0:16:5c:c7:a8:f8:
a9:63:03:d9:dc:df:31:75:dc:a2:30:9b:38:10:56:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:30:69:AC:43:79:0A:B2:3A:67:6E:31:74:15:64:EF:FC:D9:7E:9E
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:10:92:5f:34:b7:f1:86:2e:f8:4d:42:25:17:b2:dc:f5:8f:
f1:42:51:94:f0:6b:e2:50:37:b7:f2:81:1d:60:3d:9d:18:bb:
ee:cf:b1:13:2b:3d:8b:5e:9f:e8:83:eb:bf:c6:cd:60:e6:b8:
86:70:e8:15:71:e7:ab:22:bc:79:38:ad:ad:bf:5a:63:6d:6f:
c5:a5:b1:5e:a4:e8:bd:cf:3d:dd:2c:2f:5d:83:82:a6:02:5f:
a1:1b:ca:32:ea:d1:82:f9:aa:10:c5:f9:50:f1:1e:32:4b:c9:
dc:9a:25:2f:e7:d2:45:96:4f:e9:9c:80:62:ff:96:27:b6:cd:
1e:11:d7:8c:25:7f:1e:76:85:82:48:2d:71:21:1f:de:28:f4:
99:81:24:81:01:b3:b5:fe:8b:04:a8:d3:49:65:ca:0f:a5:22:
3c:c4:0b:17:0f:7e:71:a0:21:a8:fd:fc:76:2a:ff:12:c8:5f:
13:fe:a6:ed:27:f1:aa:ca:66:0f:42:46:56:3c:a7:62:19:61:
8f:11:71:e2:4d:d2:e9:83:31:79:4a:13:29:b8:54:7f:67:1f:
04:c8:de:dc:15:af:29:76:30:e5:a8:e2:0b:3a:a8:4a:fd:4b:
6d:9d:7f:ef:2a:22:9e:5b:2b:28:28:93:13:e3:d4:54:9f:95:
8e:4e:fd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:15:52 2026 by rpki-client