Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
File: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft (raw, json)
Hash identifier: pwWquMTW4GyT05AoxbsWyYO3qz5KYtIKZRQ4XGNDeJQ=
Subject key identifier: A7:B8:36:98:BC:95:8F:01:07:48:7F:2D:4F:FC:54:B6:E3:CB:92:D0
Authority key identifier: 76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
Certificate issuer: /CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Certificate serial: 019D26CD6BBDAA54A8EFED3E929FDE41FD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
Manifest number: 07CE
Signing time: Wed 25 Mar 2026 21:01:29 +0000
Manifest this update: Wed 25 Mar 2026 21:01:29 +0000
Manifest next update: Thu 26 Mar 2026 21:01:29 +0000
Files and hashes: 1: cljflfngv7VZa65xQ-duBbtPRE0.roa (hash: 9lokgvNxPt+p28kHYXp3QH4rvvO9XazJeqstX10GvAU=)
2: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl (hash: GEDcim/Amj+B26lfUNKCh39bHsvUGg6EO5a7trogGxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:6b:bd:aa:54:a8:ef:ed:3e:92:9f:de:41:fd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Validity
Not Before: Mar 25 21:01:29 2026 GMT
Not After : Mar 26 21:01:29 2026 GMT
Subject: CN=a7b83698bc958f0107487f2d4ffc54b6e3cb92d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:bd:f5:38:61:23:4d:08:7a:f7:8b:3b:73:
b5:2f:5e:dd:61:76:14:79:68:b1:c2:14:b7:9e:64:
79:62:70:b6:8a:ec:7d:98:f0:e9:f4:3f:00:b0:f5:
69:bc:a1:60:f4:90:65:73:53:b8:89:14:34:f1:e2:
f3:89:80:96:be:ef:da:60:09:2f:e7:16:06:f7:1c:
7d:aa:c7:5b:82:a4:b8:47:4f:b3:9a:af:0a:89:2c:
f1:74:1c:b1:71:40:ee:ec:98:b3:4c:11:6a:2d:4c:
1a:ea:b8:a6:11:f8:a2:c5:b6:f3:b4:05:3d:03:b5:
2f:3e:d2:27:b8:44:e0:bd:ab:f4:a8:4d:49:e8:90:
ba:21:02:85:b0:8c:68:07:ed:12:56:3f:f4:e6:0d:
9b:8d:2a:a4:95:84:18:17:89:b5:9a:c9:1a:6d:eb:
d4:2c:ab:f0:fa:47:39:ac:fc:04:b3:cc:5e:db:f7:
da:86:83:16:4d:e3:de:87:3d:61:0d:be:fa:b1:1a:
8d:14:5f:b2:35:74:28:8d:0a:e8:31:58:34:4c:9f:
ae:0a:7e:10:2a:52:bb:72:ab:f9:81:e6:af:46:33:
66:e3:ed:3e:f6:79:01:84:ef:42:0b:f3:6b:e7:99:
6b:d6:a2:7e:7d:e2:c7:4d:47:82:cf:0a:22:86:cd:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B8:36:98:BC:95:8F:01:07:48:7F:2D:4F:FC:54:B6:E3:CB:92:D0
X509v3 Authority Key Identifier:
keyid:76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9d:71:f7:d8:76:9e:26:9b:87:f7:a0:6f:df:d7:1e:98:ca:
1d:ea:74:f7:ad:2e:44:73:86:a6:15:c8:a0:77:d1:d0:c7:44:
f8:10:4e:9b:66:27:a2:69:41:dc:99:0c:c2:f3:4f:9b:e3:23:
55:9d:ad:94:b2:cc:06:b5:53:9a:42:81:35:b6:9d:11:c5:37:
db:cc:fc:6b:b7:b9:73:33:2b:61:99:27:ab:29:03:ea:38:9c:
47:09:5a:06:7f:0c:96:31:f2:fe:19:32:e8:da:d9:fb:05:9c:
75:56:d5:cb:19:14:90:d6:cb:d4:e9:bd:76:1d:90:47:c3:9e:
b1:b3:5d:cc:72:80:8d:88:d9:0d:a7:7b:3f:75:a1:48:0c:f8:
09:76:52:89:62:99:28:9a:79:89:ce:34:2c:e4:21:a9:21:09:
64:76:2e:7c:d9:50:7a:e1:51:23:34:2a:85:48:d7:89:54:9c:
67:e6:a4:39:89:0c:f3:4d:cc:d1:7a:e7:63:fd:ba:a5:a8:98:
40:be:3d:0b:63:ce:88:9d:5f:6a:25:bb:3b:2e:41:03:e6:c9:
85:33:b2:f4:92:0f:62:d2:ba:2e:10:ff:fc:39:ac:88:4d:e6:
51:24:4d:41:1d:44:13:83:82:1a:21:dd:d8:48:8a:ae:18:61:
ca:08:c3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:24 2026 by rpki-client