Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
File: 7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json)
Hash identifier: CmCC4lg5IilaBEt/RGEXk/40zU1xqDblI8vfDw43Li4=
Subject key identifier: 79:55:BC:E0:FA:DE:2A:B9:04:2E:F2:09:FD:EA:80:4B:F4:D1:1B:FB
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Certificate issuer: /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial: 019D2A3B5DC4A33E29AE8B3555E443531508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
Manifest number: 17B8
Signing time: Thu 26 Mar 2026 13:00:26 +0000
Manifest this update: Thu 26 Mar 2026 13:00:26 +0000
Manifest next update: Fri 27 Mar 2026 13:00:26 +0000
Files and hashes: 1: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: 7AixWyPowy0J02Paxqet7XDh+wp00g7HYwLHgtgozFo=)
2: WxQ64uv-zX-eye9sRlN7C2cRqwI.roa (hash: H3Nchr9jYSxejrjh37X3oEL6arcb0RjMrAm9O9pSwMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:5d:c4:a3:3e:29:ae:8b:35:55:e4:43:53:15:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Validity
Not Before: Mar 26 13:00:26 2026 GMT
Not After : Mar 27 13:00:26 2026 GMT
Subject: CN=7955bce0fade2ab9042ef209fdea804bf4d11bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:e1:72:c1:e4:20:f6:ba:70:6b:72:34:9d:
3b:5f:10:81:4e:16:33:99:02:f9:11:c0:e6:cd:9a:
3d:0f:35:bb:65:d6:07:af:83:71:69:78:95:77:71:
20:35:93:39:26:28:69:51:ad:1a:32:8d:ef:f7:61:
2c:52:9a:e3:ae:85:40:ec:2a:20:cf:ab:3c:23:91:
78:d7:da:54:7d:04:dd:c4:50:30:89:d8:7b:f2:52:
d1:bb:1e:6b:fb:83:7d:93:8e:08:79:26:28:89:de:
90:a6:c6:6d:04:d6:24:1f:46:09:0a:3c:45:74:10:
e8:9e:ae:e1:4d:bf:48:0b:1a:9e:b6:da:f8:68:1f:
46:d5:fa:4f:cb:3e:82:4d:5f:10:56:1e:01:23:87:
e8:a9:ce:5b:a1:80:44:8f:2c:53:41:7b:ab:0c:f9:
2d:cd:31:75:0c:6a:65:4c:4e:ce:8e:65:e7:6d:7a:
6d:dc:ee:a0:84:6e:0f:3e:57:5f:e2:26:e9:6b:3c:
66:69:bc:53:8d:54:ca:89:d2:60:16:4d:f4:e5:5b:
a0:07:a8:55:75:bf:64:f1:9a:b0:55:d4:fa:4d:3d:
48:d9:30:ce:29:ba:0e:55:21:ee:6d:b1:cb:cb:b4:
67:5e:aa:f2:7e:e9:35:78:05:72:f6:7b:e6:ae:98:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:55:BC:E0:FA:DE:2A:B9:04:2E:F2:09:FD:EA:80:4B:F4:D1:1B:FB
X509v3 Authority Key Identifier:
keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:14:27:63:45:2c:03:a9:b2:a8:84:fc:ef:d6:e7:93:45:cf:
f2:79:0d:38:ed:ce:54:c3:2d:9d:3d:25:3e:fd:80:0c:46:60:
d7:38:3e:78:86:da:df:de:d6:dd:0c:0a:4f:ac:95:f2:7b:ff:
2d:3c:69:72:3e:22:e7:75:a5:0c:4f:c4:43:5c:3d:b6:4f:0a:
45:83:ab:fa:cd:50:90:c2:0a:98:e1:a9:e5:a2:1c:f0:e2:08:
13:14:16:75:e8:a5:4b:66:a6:2e:e4:1b:bf:d6:8c:df:45:b3:
98:1d:d6:49:48:12:00:78:ed:bc:ba:d0:33:53:70:9d:23:89:
71:c0:a0:bd:a1:46:fd:d1:8a:b0:f1:56:56:49:0a:56:38:1c:
86:1a:7e:d9:7a:52:a4:9a:d4:7e:58:4a:ba:9f:a0:4f:68:6c:
8d:f8:03:14:de:31:86:e7:5a:9e:d6:32:8f:20:8b:66:c8:c0:
4a:24:0c:5a:c7:3d:b9:24:7d:8c:b8:94:f6:36:6f:56:ce:fa:
24:c6:fe:e9:21:36:c1:ca:f2:69:eb:d8:95:83:14:c3:c1:18:
bf:ee:68:1f:03:0e:21:66:6f:53:45:1f:81:ed:5d:b9:68:e0:
79:f1:8c:50:72:c7:38:ea:80:f2:ac:14:b3:97:06:ac:ef:f8:
b1:cf:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:13 2026 by rpki-client