Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier: oN9r3XYhe17VRMMxbnmxAV99uJVdBV0bivA8BkINK2U=
Subject key identifier: DC:24:FD:09:A2:4C:FD:35:3C:B5:EC:3B:D5:D2:01:A9:68:9C:40:DD
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 019D27DFCA8D37CA2F0D60114FBA0537696E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number: 189C
Signing time: Thu 26 Mar 2026 02:01:10 +0000
Manifest this update: Thu 26 Mar 2026 02:01:10 +0000
Manifest next update: Fri 27 Mar 2026 02:01:10 +0000
Files and hashes: 1: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: XkUxz/5cxCxeraOZJBThLvM20Lstkg9J8v0XhCA0d4k=)
2: JsIYFyLR74GQysEIqnGykpSJQUI.roa (hash: iaHnb3OAMXTWsBgbEKrwhuTvCOgUBCodv1kDk+4mavA=)
3: NKy6Tyf5RyRglBk0yV_ExDPmxuo.roa (hash: ebb1VqS7aGDzvUXqYNWhDAqOkeGUT55XR6ggJqYbSMU=)
4: OUVdt4o2LS_i-Gunl0nnzrdW_jI.roa (hash: LG7q3NWzE4G2vBN3PTFInwdMW/gtEeHrNbl3IVaBPnE=)
5: YH5NKMifzBmhf3nIG20jcgRcBU0.roa (hash: V5cTAFBzO7CMX8CCIxzqRfhGsna670gP9hgi/NVqRBc=)
6: mCt7UGq2s1qnA69MYZljhYxWiD4.roa (hash: qi5pYWU2cgvvhT1J3aGpMqhq1J2xvA8Deh0/Hh6j/Rg=)
7: sRMtAiiTomuNQjvyhVAd07KYQM0.roa (hash: 1ZDSFc07GgvbF2RmQMqVaUItzv9tv/zTWoNdPvDIoXs=)
8: sjgUHUj_TSMku2aB-f61amSIyCM.roa (hash: /+JjugGAK765zafXtIVOVPtipqmOZ3WaKKGK25tgoO4=)
9: zhcr9I3s3OVNgzaih7vQHJr6C0Y.roa (hash: nLQ289DooRLgqJOtJaVgt01KECd6y0NdXrqka7CO4Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ca:8d:37:ca:2f:0d:60:11:4f:ba:05:37:69:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Mar 26 02:01:10 2026 GMT
Not After : Mar 27 02:01:10 2026 GMT
Subject: CN=dc24fd09a24cfd353cb5ec3bd5d201a9689c40dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:35:33:21:aa:b2:c4:44:64:f7:ad:90:14:
a6:e5:78:7e:a2:59:a9:21:41:b8:8d:39:0b:6e:0b:
6e:c6:17:49:29:97:f1:f8:1b:c9:dd:04:40:cd:ba:
39:f7:23:75:46:ed:63:76:34:8d:dc:82:f1:36:2b:
63:bf:fa:58:0d:ae:58:e8:2e:c9:c2:78:84:0e:68:
2c:3a:6c:37:de:3e:87:8d:26:8a:ec:e3:9e:3c:f6:
31:59:90:e2:15:53:71:3b:c7:4b:95:21:11:20:c8:
50:af:6b:e0:a7:74:0a:7c:67:8e:ff:2e:a4:6c:24:
7e:01:ae:f6:0d:11:c8:2d:5b:c7:a2:8b:e3:9e:69:
28:1b:e8:0f:f0:60:43:a3:b4:b5:e6:60:a5:61:1a:
e0:5d:10:4c:fb:22:04:ea:65:31:cb:3b:5a:3b:b4:
f4:60:34:04:75:9b:52:86:4f:a3:85:79:04:51:64:
76:07:57:dc:32:ae:15:ed:47:7d:fa:02:ff:8d:3a:
a0:03:cf:53:d7:11:df:ff:4b:f6:96:21:94:ad:e5:
74:1e:b4:82:e1:2e:3c:76:21:4b:62:ea:b4:b4:0c:
88:67:42:dd:a0:7f:b1:08:b5:c4:87:52:d4:ad:f3:
45:d9:33:78:f2:1d:42:8f:4c:db:92:e7:f1:4a:4c:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:24:FD:09:A2:4C:FD:35:3C:B5:EC:3B:D5:D2:01:A9:68:9C:40:DD
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:11:13:de:61:16:0e:e5:3f:1e:79:58:70:29:cc:aa:c1:7b:
14:a5:30:8e:a4:28:49:b8:f6:48:d5:ab:6e:33:40:01:00:29:
e6:18:6c:4a:85:00:eb:9c:db:65:85:c8:bb:cd:12:b8:53:7d:
fa:ee:7a:f8:d0:30:d4:1d:dd:22:3a:19:3a:f4:b2:a4:79:7b:
b0:3d:4a:8b:ac:0c:6c:da:42:3f:24:77:fc:5f:0d:10:df:e5:
a6:e7:db:5a:6c:89:52:4e:ef:21:a3:9d:d2:fa:f9:e2:f1:17:
66:bb:2b:5e:1b:8b:1b:ab:ad:5b:52:cf:0c:bd:08:6c:d8:00:
ba:ec:36:7a:f5:a8:0b:c0:64:63:e7:23:c7:12:a8:2f:7b:97:
9c:0e:0e:57:43:71:da:e2:d5:7f:65:86:4e:fb:a6:eb:4c:af:
9e:0f:3c:a2:51:29:88:74:8d:b4:55:6d:ba:b5:af:49:09:5c:
02:7d:54:19:79:90:97:22:fc:69:b4:40:c1:34:71:b9:a5:ce:
a9:4d:f9:8f:63:7e:e8:d1:9a:5e:e9:97:98:d5:ab:ce:a8:54:
d7:2a:c6:ab:7a:3a:bc:2b:1e:08:bc:23:42:60:db:fb:a3:b9:
ed:64:b5:4c:76:04:96:01:59:7d:b9:f5:80:47:44:11:0e:01:
96:37:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:34 2026 by rpki-client