Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: 0TDd6Q5I6WoOplDrwcNvviOPEsLGzH4QMqj7AmgM43E=
Subject key identifier: CE:66:42:67:5B:82:DC:1D:A1:63:64:F2:5B:19:14:A1:5E:92:28:05
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 019D26281FD0DD457AD30352045F61DD0A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 18:00:56 +0000
Manifest this update: Wed 25 Mar 2026 18:00:56 +0000
Manifest next update: Thu 26 Mar 2026 18:00:56 +0000
Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: zB4stgqXGgOXpHcjveBYld2mDKSD9imNW4+tvpPg2Bk=)
2: _fXKYqOoOeAsBe3wfvstIhc1KgU.roa (hash: 6aMvK6MOhdOCbYvLk+UnSkhnsNfdyPHzti08/1dj5Nc=)
3: sW8W0-8WOsG0evmu2fYzqrWdI9U.roa (hash: aDuewNAM6XmzF96K8nKeS1R/6Pbon3faWwSXg53klfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:1f:d0:dd:45:7a:d3:03:52:04:5f:61:dd:0a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Mar 25 18:00:56 2026 GMT
Not After : Mar 26 18:00:56 2026 GMT
Subject: CN=ce6642675b82dc1da16364f25b1914a15e922805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:cb:04:07:4f:12:3f:ec:3e:4f:41:b1:e0:
e0:6d:93:db:fc:7a:1e:34:e0:46:68:ea:f6:06:6a:
0d:97:26:a2:8b:f1:80:0e:36:93:bd:58:c1:25:c8:
fd:1c:09:a6:9b:9a:2a:b4:5e:fe:b6:69:60:ab:7a:
c8:52:3e:84:71:9f:bd:3a:a0:34:99:31:31:f2:06:
23:45:87:79:da:37:67:2c:a0:12:a0:6b:fe:52:72:
15:63:1e:7c:e1:f1:1a:d0:74:2c:b8:de:f0:48:24:
ff:63:4a:e3:1d:aa:62:a0:b0:f6:53:f7:57:d6:fb:
ff:6f:63:70:c1:ad:ab:7b:16:46:f4:fb:e6:f9:64:
35:7c:d4:af:73:a0:b8:12:89:dd:dc:4b:90:6f:92:
e8:1e:b9:71:46:37:9a:ff:49:2a:39:2b:98:57:0d:
28:a1:72:0a:38:bd:e6:ff:e9:41:df:0d:bf:f1:fe:
2e:30:73:48:a9:c8:53:b7:fe:62:19:f1:98:ac:41:
30:b4:aa:9e:ef:f5:30:b5:32:05:db:6c:d8:17:0d:
a3:75:13:18:d4:62:ac:cc:b6:53:ac:ad:20:69:37:
80:51:23:e8:c5:42:1e:0e:de:8f:b6:ed:3e:04:8c:
9f:d6:3f:23:3b:35:87:cf:47:57:80:f5:a7:79:45:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:66:42:67:5B:82:DC:1D:A1:63:64:F2:5B:19:14:A1:5E:92:28:05
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:10:13:cb:75:97:17:95:b9:b1:df:1a:ec:38:ed:20:6c:01:
a1:1b:04:d1:4e:60:bc:b3:94:a4:36:63:62:de:ea:ad:9c:8e:
61:74:fc:38:df:b0:5a:33:94:85:e4:fa:24:f3:c2:61:8d:a3:
25:12:1c:cf:bc:59:26:fb:5c:c1:f4:a7:27:01:2a:62:2d:6b:
a2:b0:6e:97:4e:b7:07:90:7a:01:02:38:f3:fc:ca:2b:c6:2d:
3a:27:9a:cd:ae:ad:5f:cc:d7:16:30:57:b0:38:17:3d:4d:fe:
19:7f:c0:a3:f8:d5:e4:5f:0f:0b:ab:93:73:e3:fc:70:b1:ef:
eb:4f:69:4d:94:3c:64:12:33:bc:b4:6a:90:78:40:1a:38:a2:
3e:2c:0d:fd:5c:c5:24:f5:c2:7a:81:62:93:cd:75:5a:1b:6e:
78:8a:55:40:c6:21:1e:0c:40:5d:df:47:6c:2a:92:8d:b3:f3:
3e:0b:77:3f:71:1f:69:30:7c:b4:70:68:83:9a:c9:8d:67:00:
d1:e8:c2:85:ed:04:ec:45:c9:62:1c:ed:eb:bc:d3:5b:5f:42:
9e:1d:12:2d:53:88:62:cc:c0:9b:83:91:fc:6e:e6:98:c5:63:
2d:40:68:fd:08:80:9d:d3:c5:db:46:90:d2:22:3b:b8:3b:90:
cc:11:52:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:11 2026 by rpki-client