Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
File: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft (raw, json)
Hash identifier: b5tTq2yyzJye+valJceMiGTw3DS6JRgcwByiIxlbd3Y=
Subject key identifier: DD:44:9D:90:2A:0E:E3:19:AC:2B:66:AF:21:FE:DC:37:57:18:54:57
Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
Certificate issuer: /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Certificate serial: 019D2A3B4D9D4DDE28B994B00AB8C3EF9B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
Manifest number: 07D7
Signing time: Thu 26 Mar 2026 13:00:22 +0000
Manifest this update: Thu 26 Mar 2026 13:00:22 +0000
Manifest next update: Fri 27 Mar 2026 13:00:22 +0000
Files and hashes: 1: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl (hash: GZmvEPMDkfX0+i/VYh7th+eFGG8zk85RgIzuaNhW2v4=)
2: XOqhNOZxOAhHFkz4hARIcbp-d5A.roa (hash: 4hL/1mxlpdw2Hk9JU1ljcj2USapEcK3wvUAzct7W9FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:4d:9d:4d:de:28:b9:94:b0:0a:b8:c3:ef:9b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Validity
Not Before: Mar 26 13:00:22 2026 GMT
Not After : Mar 27 13:00:22 2026 GMT
Subject: CN=dd449d902a0ee319ac2b66af21fedc3757185457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:50:9e:d6:1c:4d:0d:9f:83:ec:81:c3:f1:
8d:2b:73:18:63:cc:37:59:2a:b5:6b:53:0a:02:83:
37:b7:e1:56:eb:a0:f3:75:32:4a:c4:e1:28:ca:7c:
9f:03:90:b3:fc:d4:8e:0a:c9:21:82:fe:6f:64:9f:
1a:24:0b:88:0c:c6:e3:00:9c:af:1c:ce:85:1a:e9:
8a:e2:74:82:82:b3:bc:b1:6f:8b:dd:82:2e:60:64:
fe:d7:2c:3e:dc:98:ae:c1:55:1a:b7:c2:24:46:cf:
38:b0:cb:91:30:94:4d:c4:dd:aa:b8:f5:46:73:4b:
3e:99:ce:75:82:1a:08:e2:e8:0e:cb:a9:3f:70:8e:
8e:6e:5d:3f:89:0b:6a:f0:4b:19:36:52:43:9f:44:
a6:a7:31:9e:8f:91:05:cd:d5:8d:2e:2e:76:17:86:
8d:71:73:2c:d1:a2:18:a2:25:8a:36:40:1d:90:ed:
75:83:5e:d5:0f:31:7a:00:31:42:48:1a:bb:74:80:
1a:a8:39:fa:f7:24:6d:b9:38:52:45:ee:72:00:f9:
18:2e:74:cc:30:3e:57:f6:37:79:63:1c:03:c0:e0:
d7:25:00:1c:d0:9b:95:07:18:b1:af:35:6f:ed:99:
f9:6f:f6:2a:4e:cc:65:ae:19:93:79:b7:a4:4e:c3:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:44:9D:90:2A:0E:E3:19:AC:2B:66:AF:21:FE:DC:37:57:18:54:57
X509v3 Authority Key Identifier:
keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f3:73:f6:76:ee:49:61:a9:0f:06:ad:98:1c:22:e6:d1:bb:
a2:53:ff:f0:e6:4f:5a:fa:97:68:73:a4:f0:a8:32:ba:ec:a4:
09:25:e0:69:7c:c9:f5:02:08:47:e4:14:d8:4e:c2:ea:b7:b7:
0f:c1:00:6e:e2:21:9f:64:62:96:f8:ac:c8:79:90:82:13:f1:
f2:4a:55:e1:ae:94:39:17:e1:66:fe:f1:01:a2:51:9f:e2:c9:
46:c7:bb:53:80:96:68:8e:18:3d:5d:74:aa:b1:45:92:b0:dc:
44:b0:58:f8:75:a0:0c:34:c3:e0:f3:d9:06:ef:b7:2d:80:bb:
91:02:f3:5b:83:61:69:58:11:5d:e6:ff:b5:ee:59:66:68:2d:
03:2f:1c:14:59:67:7e:e8:99:48:fa:30:c0:a9:ce:eb:51:7e:
11:25:17:41:ec:ed:2d:6e:54:c6:7f:f8:f0:07:fe:ca:87:a4:
c0:7a:5c:4e:9f:df:37:db:d9:d6:24:67:00:66:5b:b8:94:16:
e4:e6:52:1a:e7:5f:b1:9e:bf:cb:2c:5e:e4:7d:bb:ea:f5:63:
1b:b6:26:94:f4:9d:c2:b7:b0:ce:67:de:55:37:3e:fc:70:e5:
f6:86:4f:88:99:82:2f:58:c9:39:88:50:ed:18:d6:3f:51:3f:
53:66:40:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:28:20 2026 by rpki-client