Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: MADe8CsvzF1iR+M1hJEgPUVONelUEpiE90W/aCeRbl4=
Subject key identifier: 90:A8:F4:6E:1D:91:A6:07:E2:F1:04:F2:E9:47:4C:5E:41:F0:84:47
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 019D265F83A67BDCC85A73BC1E9032A5E3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:26 +0000
Manifest this update: Wed 25 Mar 2026 19:01:26 +0000
Manifest next update: Thu 26 Mar 2026 19:01:26 +0000
Files and hashes: 1: 0xwfSsFkb05U4ozVSEb8hCqR4ZM.roa (hash: wDnxCrMW737wBP0bFwNqAOo1oxv3iXJSRvzrJ/qp1Dc=)
2: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: aby/SteOMFtllJodO9ecuFg5Ys04z6scR+s/HjVBW+w=)
3: zq7GSsBTb4iCu4BsJeZ1X5mLg0g.roa (hash: wAonBOQHcI2HVnsLhr53pN++Gv5Cyj0r6V/3M0lZCdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:83:a6:7b:dc:c8:5a:73:bc:1e:90:32:a5:e3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Mar 25 19:01:26 2026 GMT
Not After : Mar 26 19:01:26 2026 GMT
Subject: CN=90a8f46e1d91a607e2f104f2e9474c5e41f08447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:b3:1c:ff:bf:3b:ad:58:30:52:31:f6:f9:
ff:a4:b6:c8:93:a7:f9:3b:46:37:63:23:cf:13:b8:
79:3a:a4:90:18:d3:07:7a:b9:1e:c9:c4:38:a5:45:
cf:26:ce:f8:a0:f8:00:1b:16:4c:cf:8f:e5:4a:50:
66:bc:90:07:51:dd:28:26:09:79:36:ca:c4:5e:07:
2a:06:7a:c8:a4:ff:a9:a1:54:02:85:43:5d:39:b8:
dc:74:c5:08:f9:c9:14:6b:70:a4:90:eb:16:8e:0d:
39:32:d4:4a:7c:26:f0:d4:fd:7f:08:40:bf:d9:e3:
2e:bf:8c:d1:45:c2:40:6a:ad:99:df:2d:3b:60:92:
0d:0e:3b:5e:73:40:5f:de:37:2a:89:f6:50:4f:8f:
77:de:84:3b:ed:51:28:70:82:8b:20:81:0d:d6:f4:
30:2f:79:f4:2c:99:f2:1a:df:7a:48:6e:ba:e5:4b:
51:c9:5f:37:14:7e:41:77:fa:03:e8:c3:ee:8f:53:
03:2c:40:d1:7a:a7:f0:d8:05:5a:2a:55:3d:49:49:
61:41:21:fa:06:38:45:50:61:61:0a:6f:7e:9b:9f:
73:19:de:c7:16:dc:f0:3a:e5:04:db:d2:d6:75:49:
7a:74:67:97:e0:4c:13:96:d7:2e:43:f5:0a:bf:71:
a3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A8:F4:6E:1D:91:A6:07:E2:F1:04:F2:E9:47:4C:5E:41:F0:84:47
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6e:c6:7c:64:0c:c7:f8:a2:c4:70:fd:48:c0:1f:f7:c6:1c:
54:60:56:76:95:a9:86:61:1b:c7:90:54:3c:e1:df:a5:7f:e3:
c7:5e:ab:13:f5:f8:98:cb:07:22:fc:29:bd:b4:10:97:50:ab:
0f:da:1a:20:5c:b4:4e:40:9b:cc:27:55:da:d8:75:13:ba:dd:
45:06:35:42:55:3e:53:ec:6c:d6:ce:61:66:48:be:61:89:4f:
3f:cf:26:eb:22:f2:08:db:84:fb:01:81:2d:e2:24:35:6e:e4:
f7:15:30:e2:49:0a:f0:20:86:11:82:4d:28:96:1f:52:bd:8c:
b7:71:97:cc:e8:40:37:ea:76:a9:a8:3f:25:ec:b6:91:ce:22:
f6:ca:45:00:22:d2:f4:1e:e0:3f:86:95:73:7e:65:49:cc:3e:
09:ea:96:10:90:f3:c7:8e:2e:4f:0a:4a:95:bb:b5:50:4a:2b:
65:b2:4c:46:4a:2b:48:30:83:bd:92:af:65:e9:ab:5e:1f:fa:
d5:cc:03:8b:df:39:77:b1:c8:d7:20:f8:71:f8:1d:72:e3:37:
cf:3c:53:b8:b8:99:9f:95:23:d6:94:a9:c2:6b:d9:f7:47:24:
10:95:fa:d1:ef:da:90:ef:e4:c6:69:53:aa:65:0a:68:b3:8a:
a3:da:9a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:36 2026 by rpki-client