Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
File: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft (raw, json)
Hash identifier: 1VrBWrWPrwvg/BvZUxksvdROJeC7PbGk2UGA0XzILYY=
Subject key identifier: C3:60:6E:AC:78:74:49:78:11:99:0A:5F:E7:27:FF:91:16:10:D6:DD
Authority key identifier: 87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
Certificate issuer: /CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Certificate serial: 019D28F2BCC0E95A6A7370C4FF255B56C982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
Manifest number: 0D51
Signing time: Thu 26 Mar 2026 07:01:29 +0000
Manifest this update: Thu 26 Mar 2026 07:01:29 +0000
Manifest next update: Fri 27 Mar 2026 07:01:29 +0000
Files and hashes: 1: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl (hash: as1VL4OTlyLCMVUvp5NwDjdjCia8n73IugVYD6H0rM0=)
2: wa_X0Ztk6gGA-F3SYbw7eJ_Wsaw.roa (hash: nkKfnaGlzdXn24zbAJ05PRFLv1A+anErfAYzvfBWFcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:bc:c0:e9:5a:6a:73:70:c4:ff:25:5b:56:c9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Validity
Not Before: Mar 26 07:01:29 2026 GMT
Not After : Mar 27 07:01:29 2026 GMT
Subject: CN=c3606eac7874497811990a5fe727ff911610d6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:78:dc:80:71:1d:ac:72:bd:d8:bd:d9:40:
05:14:b9:7c:7d:2a:23:22:0e:aa:93:8a:29:8b:8f:
e1:f5:32:8a:40:91:c3:0c:fa:ae:8c:0e:1f:24:41:
b3:1e:1c:ff:48:38:3a:84:35:71:f9:f6:c0:de:cd:
15:98:ab:18:d7:09:de:a2:92:56:47:73:44:f2:76:
d1:9e:a8:1b:f2:ea:3d:90:d1:8e:86:ec:c4:c8:5a:
01:75:ff:07:92:3e:51:22:8b:3a:2d:a8:6b:c8:a7:
8e:83:23:65:ce:ad:b0:f9:00:d4:3d:4d:95:16:fc:
85:75:50:9a:72:8d:42:e3:f1:5b:20:fb:e4:c5:53:
aa:39:b0:db:dc:f0:8d:0f:0e:30:39:2e:44:ad:70:
d9:0a:9e:54:66:f2:78:38:f8:84:33:7d:64:e2:2c:
83:12:a3:4a:c4:34:ce:d8:76:f0:18:65:77:ca:69:
5d:05:d5:c8:fa:ff:97:18:78:41:8f:a6:e8:f2:2f:
76:16:58:24:39:84:2a:be:56:15:8f:61:7c:8d:ef:
a2:7f:e0:22:67:f3:be:56:8e:07:91:0b:6b:db:61:
fd:b2:5e:6b:80:e2:e0:b6:da:71:df:ee:56:14:c7:
bb:a1:2f:5b:7f:d1:d2:40:72:97:c6:c4:2b:7d:77:
cc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:60:6E:AC:78:74:49:78:11:99:0A:5F:E7:27:FF:91:16:10:D6:DD
X509v3 Authority Key Identifier:
keyid:87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d2:07:51:b3:ac:84:f6:c7:1f:5b:4a:5f:b4:b3:21:fd:a0:
00:63:f4:ba:c4:6c:e0:2e:19:01:fb:51:36:17:12:ac:81:b0:
b2:73:86:19:d2:93:1e:72:e0:64:b6:11:a3:64:00:4f:9b:e8:
e0:f4:af:36:07:f4:c4:ab:fb:a1:02:5e:35:9c:03:c9:55:93:
b5:be:cf:53:02:bf:d4:6f:70:47:91:af:a1:66:af:44:cf:a6:
30:90:4c:d5:e1:ad:cd:11:fa:a5:6d:4d:67:12:b9:95:fe:91:
70:f8:9e:5a:29:c3:2f:41:78:11:97:ef:37:62:4d:55:75:8c:
59:88:d5:45:02:c0:a0:5d:81:78:2c:8d:3f:99:53:b1:56:68:
a7:df:1b:3f:9e:d4:b9:cd:6b:b4:32:8c:44:ac:b7:e6:09:97:
b1:d3:7e:d3:91:13:9a:6f:7e:44:87:83:40:1c:41:d0:05:6f:
86:22:8c:18:d0:41:0b:2f:fe:c9:95:b4:b1:26:20:c7:ff:3f:
ed:df:8d:a8:fc:1f:e3:2e:1a:5e:f2:f9:27:26:5b:a1:1e:24:
0a:0e:bb:d7:17:0f:85:39:7d:5b:43:27:ac:d2:a9:dd:cf:0e:
81:9d:c7:1c:57:47:12:17:bc:2d:77:2d:ab:f1:b1:b8:20:6a:
1e:9e:4e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:20 2026 by rpki-client