Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: uR7/LTCly7WlYA+QGX7PeHWFmze00GfwkKbG0qCOBfM=
Subject key identifier: 6A:BB:3C:DF:3A:5F:FB:39:7D:05:FF:06:2F:C0:F4:5E:B8:4D:E7:78
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 019D29291AAB0D4A7E26B300C8DC312A629E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 1313
Signing time: Thu 26 Mar 2026 08:00:52 +0000
Manifest this update: Thu 26 Mar 2026 08:00:52 +0000
Manifest next update: Fri 27 Mar 2026 08:00:52 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: rGmw+n3ueFuigjsPCDPL4s1dWi7j5TBqzZqSTI+ZZ58=)
2: _Uw3PwW3zuhX_9qdNVHM9xLSh_Y.roa (hash: pJtmufqjt3E+bTnB46Z/8QQdZ6WxLHIqysmmyqJfzzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:1a:ab:0d:4a:7e:26:b3:00:c8:dc:31:2a:62:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Mar 26 08:00:52 2026 GMT
Not After : Mar 27 08:00:52 2026 GMT
Subject: CN=6abb3cdf3a5ffb397d05ff062fc0f45eb84de778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:72:c2:e3:db:34:13:a5:b6:bf:c4:d9:a8:
9c:76:31:2f:34:1a:72:61:83:8a:63:45:b1:9a:f3:
d7:69:35:57:37:53:da:94:55:26:dc:06:9a:a3:d8:
e8:44:fb:a3:a9:75:b9:fc:e5:f8:49:1e:95:ad:ad:
5f:ad:9e:c6:6c:33:7a:47:3e:db:93:60:b3:04:70:
19:73:7a:2d:d9:cc:60:71:04:6e:4d:d5:34:a8:6b:
c4:f4:7c:f6:f6:6e:36:cf:4c:c2:02:8f:d0:f9:2e:
a2:95:ec:67:bd:fd:ab:2b:1f:cc:1c:80:f2:13:f9:
19:19:0b:2f:41:b9:58:18:c7:17:af:c7:ee:96:46:
88:a2:92:e5:94:ed:c8:7a:78:55:e1:ae:4b:8e:36:
72:5c:0b:40:12:df:f2:2f:f1:5d:83:62:1a:a9:1e:
f6:2b:84:01:f2:c9:7e:21:1f:16:e3:a5:70:42:d3:
00:14:6b:d1:8f:2d:8f:5d:47:de:3d:44:85:5b:dc:
96:46:99:b1:8a:1c:b4:7f:b8:15:af:83:87:6b:3d:
d1:8f:d7:71:bc:42:d8:30:3a:7b:42:ef:b9:6e:08:
44:b8:dd:17:1d:24:ab:b5:da:99:be:e2:0e:c8:3e:
12:5a:c0:c3:79:2f:68:d3:52:1e:09:11:46:18:f5:
d2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BB:3C:DF:3A:5F:FB:39:7D:05:FF:06:2F:C0:F4:5E:B8:4D:E7:78
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:24:7e:3b:01:e6:c3:4d:c5:1d:71:d7:a6:f6:be:8e:16:3c:
31:93:99:54:fd:2a:cf:2b:ab:e4:96:4a:85:5c:48:d1:67:db:
fd:69:e8:e3:80:58:ec:68:bd:8d:a0:c7:e3:9e:bd:d7:60:7e:
a5:82:ec:34:61:62:42:07:b1:1b:bb:30:b7:6e:37:27:b2:0d:
40:33:d4:cb:22:e8:38:0b:6f:a2:01:2b:a0:e3:e7:78:9b:9b:
fe:d6:8f:c4:7e:a9:b7:44:b1:c3:0a:98:79:32:25:22:59:12:
77:ea:66:fe:aa:9a:5d:6b:b3:1c:02:f8:76:58:5d:44:12:10:
42:b7:34:80:b5:1b:28:1a:74:e6:14:bf:42:26:4d:7e:46:99:
57:94:7a:81:a7:d4:93:6c:29:92:a7:af:b5:91:5b:bf:e9:52:
27:83:12:7a:22:c7:63:54:ee:d8:6e:86:87:bb:5f:ff:e2:e9:
34:f0:79:b8:3a:a7:e0:a9:32:75:81:4b:fa:d5:b3:44:ac:b4:
c3:9d:fd:02:ae:b0:5a:c8:9c:ff:41:c5:d7:d8:fa:00:1b:86:
9c:28:aa:1b:c1:ca:43:3f:7e:5d:9e:96:0e:c2:92:54:5f:48:
28:aa:f5:71:f6:c2:4c:84:62:6b:38:fc:4e:0b:eb:ff:7c:d9:
b9:0f:9c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:14:57 2026 by rpki-client