Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: VcrqfSqEcJAUuVgLVzRxozvGq90GtfkAQOUNcYPAKsQ=
Subject key identifier: 6E:2E:23:58:EC:24:76:D4:08:CD:F7:65:EB:44:F5:F3:5A:CA:21:2F
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 019D27A909DC8BE0A78D51A24F99D21B4D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 01:01:22 +0000
Manifest this update: Thu 26 Mar 2026 01:01:22 +0000
Manifest next update: Fri 27 Mar 2026 01:01:22 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: F0iy2wjRizhSFcZTf5mDCP9sM8eS8CffQG5xKaVwikQ=)
2: Y1SgnZdGMmo9fGpuJl7wUQaxlkc.roa (hash: c5a6z6fFSi3Ksmn1qg/vCHzequVOvVzrYowSPYYXoZY=)
3: zgjOZSAzojMMAhNOHNiG97-1lKs.roa (hash: 9AqyfTSVIr04hBsXGR4iW4XjBoNFR8P2652xVPdhD0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:09:dc:8b:e0:a7:8d:51:a2:4f:99:d2:1b:4d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Mar 26 01:01:22 2026 GMT
Not After : Mar 27 01:01:22 2026 GMT
Subject: CN=6e2e2358ec2476d408cdf765eb44f5f35aca212f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f3:cd:8b:50:e5:d9:b1:74:3b:b8:ca:38:1b:
22:9f:6c:32:dd:4f:2a:e8:a5:10:90:19:90:7b:67:
7d:96:3d:66:a0:76:20:81:a4:26:4e:53:7d:db:37:
4b:f0:a3:f6:e9:b0:44:7d:65:7a:47:53:6b:c5:8c:
04:43:93:24:53:b2:53:25:b5:08:99:51:9d:81:6b:
8b:6a:bb:15:b4:62:db:02:d9:74:72:32:da:f1:2d:
27:22:2a:5f:2e:d0:73:37:d3:cb:d8:ec:3d:d9:03:
1d:d6:df:a2:7b:a7:ce:71:68:66:9b:8b:bd:e4:d0:
f3:ae:af:75:3b:a7:fa:29:a1:0b:6e:e6:50:54:7a:
8e:c1:34:4c:19:f1:af:42:53:ce:9e:11:7e:94:b3:
29:51:9f:99:03:60:d6:a1:6c:f4:ab:fd:3a:2e:ec:
49:d8:13:c4:16:ef:f6:a1:7f:b9:f3:a9:50:07:5f:
e2:a8:08:eb:2a:5b:a6:3c:35:ac:47:24:66:cd:8b:
f3:01:94:70:27:8e:69:16:e3:e1:13:ae:ff:74:67:
3a:9f:bb:a9:a9:1b:d1:e2:cf:9c:45:f4:88:e2:61:
a6:38:9f:3b:20:04:70:6c:e5:e5:81:d4:e1:4f:ec:
e2:88:44:75:66:5d:ae:ec:44:43:db:e8:7c:fb:65:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2E:23:58:EC:24:76:D4:08:CD:F7:65:EB:44:F5:F3:5A:CA:21:2F
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0e:5f:ca:fb:3a:65:48:e6:16:f4:c9:ed:ee:38:33:99:e2:
9f:77:27:00:68:8d:f8:61:3e:04:07:c7:63:54:48:02:77:38:
25:88:b1:77:15:78:56:96:6a:61:c9:d2:ec:86:23:ba:6f:a9:
3e:81:1a:bd:49:df:ad:1b:c3:e5:a9:9d:82:0e:40:bb:72:ed:
db:7a:59:f9:bf:84:19:50:cf:3b:9a:03:b7:c1:29:9d:13:7b:
42:0e:e4:75:0a:1a:d9:03:b5:53:88:30:f3:8f:d4:e4:19:0a:
af:b5:0b:32:c3:75:ea:fd:31:fe:d1:65:49:27:f6:e2:72:50:
92:f0:4f:86:bb:df:db:61:19:2a:17:9f:13:0a:ec:64:b6:f0:
fa:71:51:35:11:7a:81:0e:e6:aa:ac:86:c6:81:11:f1:82:f2:
15:3a:6c:b5:34:fa:0f:8e:d5:d5:4e:80:ea:1a:d3:3f:df:ae:
dc:f3:02:49:f4:33:b6:6f:a4:02:72:87:2c:fc:8e:2b:0c:ef:
5f:bb:f6:c1:8e:5a:ec:13:81:02:27:8d:23:82:43:dc:20:34:
c6:d5:01:7f:27:b3:cb:ca:01:4d:6f:66:49:ff:2f:98:d0:10:
02:09:92:6d:95:38:33:ba:2a:6d:d8:90:c3:08:53:06:39:48:
74:65:79:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:36 2026 by rpki-client