Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
File: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json)
Hash identifier: nSmtIP4NbUypG2+fqJwpxp2QdTNKMLZDyOPX9+otMps=
Subject key identifier: BF:D2:E6:7F:52:FA:6A:95:EA:5E:0B:A1:E6:2F:09:C3:01:95:9E:26
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Certificate issuer: /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial: 019D2816C5E8616E409EF2D757A945365B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:01:14 +0000
Manifest this update: Thu 26 Mar 2026 03:01:14 +0000
Manifest next update: Fri 27 Mar 2026 03:01:14 +0000
Files and hashes: 1: 1zEvIox69c2lph8To4y01za8sxk.roa (hash: NK/LeMgA4R1YoY3PIzw3AAc8sU/wtNG17ZKOs8j1HAs=)
2: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: WxHnU92XCfeGTYhq3jAbR8FLqi2tKVFdYLItcNyApDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c5:e8:61:6e:40:9e:f2:d7:57:a9:45:36:5b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Validity
Not Before: Mar 26 03:01:14 2026 GMT
Not After : Mar 27 03:01:14 2026 GMT
Subject: CN=bfd2e67f52fa6a95ea5e0ba1e62f09c301959e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d5:58:57:97:85:e4:3d:b9:27:17:45:50:b8:
2b:d0:a7:78:b4:00:11:40:2d:56:6f:63:5f:db:08:
0e:7b:f4:d4:80:21:a0:0d:b6:73:5a:e1:31:8d:e0:
c9:68:9d:a2:68:a2:40:28:56:8b:6d:e1:ce:26:c8:
69:f8:3b:4d:bd:97:ff:93:65:27:d5:08:46:f0:0b:
15:64:44:7b:2b:a2:e4:43:ba:37:de:d6:ec:b2:62:
ac:4f:2d:41:c0:b2:e9:a9:12:eb:00:9c:dd:25:f8:
b2:a6:26:ab:58:3a:7a:80:d9:09:ce:3c:75:d0:a0:
7c:7a:a6:61:af:e5:6d:25:d0:fc:c7:a2:e8:2f:7f:
76:83:c8:fa:6d:99:51:63:2e:91:5b:1a:4e:1a:05:
8b:07:3f:d1:38:7e:1a:48:d5:b7:59:62:83:53:f0:
17:87:db:e1:ca:b9:01:47:8b:02:0b:24:52:fa:5d:
cc:17:96:9b:95:97:e3:5d:52:48:59:a6:55:81:b8:
a2:53:2c:e8:da:fd:9e:6a:0e:5a:43:d4:1f:00:18:
46:7b:f3:34:13:cb:98:97:50:02:ba:c4:9b:f2:fa:
8e:ac:c6:fe:fa:86:3e:f8:0e:b7:20:ac:28:ec:22:
22:21:2d:a2:53:fb:3e:84:3a:e2:b1:f3:a1:64:72:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D2:E6:7F:52:FA:6A:95:EA:5E:0B:A1:E6:2F:09:C3:01:95:9E:26
X509v3 Authority Key Identifier:
keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:10:ba:d9:8d:80:f9:37:b2:16:93:b4:a4:cf:f1:ee:2e:92:
ff:c9:8a:52:9c:6e:cf:bf:31:c6:43:95:cb:bf:ba:dc:fc:d4:
61:0f:ca:c7:93:f7:2e:6d:a2:89:44:02:4c:63:45:aa:5c:13:
be:93:32:aa:97:12:a5:96:e2:14:10:33:d1:ae:5b:1f:71:f3:
8b:79:78:4f:54:52:80:18:42:fe:65:26:77:e5:48:89:6c:dc:
15:e6:98:ac:4c:63:b6:d2:95:f1:fe:0b:de:4f:d8:b8:3b:9e:
c3:3c:44:0d:2e:3a:8b:af:20:a1:12:eb:b3:96:b5:a5:8e:2c:
75:4a:75:24:3b:b3:6c:8f:c4:64:7e:43:89:33:cc:14:b6:5d:
64:58:e4:ad:61:cf:9f:c1:ef:d7:c5:29:4a:4b:a1:65:4a:2a:
34:a4:a3:4c:73:7f:b5:ef:14:10:78:c3:8d:f9:89:98:f0:a6:
da:ed:e0:43:12:51:b0:0d:e3:6c:e9:38:dd:79:8e:ba:44:95:
8d:19:d5:49:1c:c2:48:fb:b0:2c:26:76:41:c2:93:3b:3d:33:
b1:cd:82:46:c3:64:65:aa:90:96:8b:d7:e1:90:ec:b8:c4:08:
e2:fc:33:0b:78:15:2c:9e:4c:da:43:07:c6:9b:9f:6e:b9:9d:
dc:de:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:48 2026 by rpki-client