
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
File: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft (raw, json)
Hash identifier: bhtwq6LKrnmM3Lbka+b9XlhykRzpMhAV65h20SwJ6xE=
Subject key identifier: 74:ED:03:16:14:66:B6:E8:AB:28:DA:24:77:F7:F5:E2:6D:1A:C6:D7
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 019D27A8E43161D513641F68086F9DCC1DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
Manifest number: 07D8
Signing time: Thu 26 Mar 2026 01:01:13 +0000
Manifest this update: Thu 26 Mar 2026 01:01:13 +0000
Manifest next update: Fri 27 Mar 2026 01:01:13 +0000
Files and hashes: 1: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl (hash: trWHP06pWaG7lI9iSf+IHqtOkVom/mLTttbCuUSKOcE=)
2: GEAJLO1s8mVtn-r3Ht2TeuVtCRU.roa (hash: VPMCHcd1Kc5vuonwZZAObs79evOSI4sYgTK3tPjqiPE=)
3: _4KNDUF7g83lv5SJMUefTksauhs.roa (hash: 8MqS36z0z/4kn3leqGP6/RJdC8IFP3/yzmKFmZtggO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e4:31:61:d5:13:64:1f:68:08:6f:9d:cc:1d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Mar 26 01:01:13 2026 GMT
Not After : Mar 27 01:01:13 2026 GMT
Subject: CN=74ed03161466b6e8ab28da2477f7f5e26d1ac6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:34:32:af:15:44:49:02:fd:4f:d2:b7:86:
7a:dc:83:1c:9a:2d:10:1f:6b:4a:f0:d2:61:77:ad:
3e:0f:90:9b:67:16:18:a2:02:51:fa:a9:e2:d1:8a:
a5:7e:4e:2f:80:92:bb:02:03:63:0c:ec:74:bc:b8:
16:48:c8:a2:d5:90:72:42:f8:ce:65:19:2d:d4:3b:
8f:23:44:a6:a8:30:52:33:7c:11:7e:79:8f:62:e2:
4f:6f:ed:4a:61:51:fd:f3:4a:1f:40:9e:73:0f:8f:
0f:ed:c6:d5:72:62:32:04:0e:29:04:ac:87:af:35:
62:83:da:26:c3:b2:85:da:d1:d7:c5:e8:d9:46:51:
b2:93:8d:7d:79:c9:a6:dd:1d:d1:9c:01:70:9c:f4:
48:9b:d9:5c:64:3e:23:8c:2a:9b:7d:3d:4d:8b:07:
9b:65:25:77:be:52:69:f2:f4:7a:e0:44:d1:03:e0:
e3:ce:9a:0b:0c:e8:3a:40:f6:8c:4c:56:63:1c:12:
bb:0e:d6:c1:b0:39:41:cb:93:77:5a:7b:4b:fb:6e:
dd:19:e2:1d:d1:0b:d5:c4:a4:a4:c4:47:19:7b:f3:
94:39:e5:31:54:47:03:f6:c0:52:da:0b:3b:a8:2b:
6e:38:0c:e0:68:cc:83:d8:51:70:0d:fe:47:7d:c2:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:ED:03:16:14:66:B6:E8:AB:28:DA:24:77:F7:F5:E2:6D:1A:C6:D7
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d6:87:5f:1d:37:fc:23:f0:9c:00:d5:b1:eb:2d:ce:64:af:
af:dd:69:7f:98:47:9c:b4:cc:d9:ba:58:6d:2a:5a:a2:4b:72:
a1:40:e9:52:de:e1:cf:48:79:0f:e4:c1:54:91:f0:6e:81:a8:
0d:6a:04:0f:56:13:ae:f1:27:35:a0:22:4a:87:4b:c2:02:74:
a0:51:22:8c:d3:f9:73:b7:eb:e0:1c:1b:76:8a:ea:49:05:00:
4f:6f:8d:2a:86:8a:4f:64:5e:59:a5:d2:7a:ba:2c:50:37:36:
63:05:2b:ab:8a:cc:57:25:03:9a:4a:6b:a8:15:a3:0f:71:96:
39:d5:dc:20:34:08:3f:63:68:4c:72:51:f7:27:64:80:51:00:
4d:a3:56:3f:aa:14:b4:9d:b4:56:38:1e:95:1d:59:b8:e7:f1:
78:d1:1e:95:73:21:f6:5a:95:18:18:48:47:2e:34:44:72:b5:
0b:92:e4:f9:b9:88:c1:f4:56:df:00:38:93:27:79:94:c4:c6:
7b:5b:16:9b:1f:5d:65:38:6d:c7:1a:77:98:fa:15:c6:ff:fb:
a5:7b:bd:d1:e1:c4:09:42:34:06:f0:b6:b6:34:de:c2:c6:d9:
77:f5:a7:60:5e:c9:45:df:94:bf:da:6a:fd:b5:ef:86:0b:07:
7d:d3:f7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:41 2026 by rpki-client