Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
File: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft (raw, json)
Hash identifier: LJfdGNw0SklqySHH3gMqbVavg9Bm2bitd8U6/zpwTi8=
Subject key identifier: D3:3E:4F:C4:80:FE:88:A4:38:69:83:F4:6A:2D:8C:33:CD:1F:C8:01
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial: 019D26CD7DBF11C4DE2E56236DEE8BC82DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
Manifest number: 0408
Signing time: Wed 25 Mar 2026 21:01:34 +0000
Manifest this update: Wed 25 Mar 2026 21:01:34 +0000
Manifest next update: Thu 26 Mar 2026 21:01:34 +0000
Files and hashes: 1: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl (hash: 7JNDsovNfmLA6OA3yyyfD4puxvhvrAb91o89G0H15dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7d:bf:11:c4:de:2e:56:23:6d:ee:8b:c8:2d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
Validity
Not Before: Mar 25 21:01:34 2026 GMT
Not After : Mar 26 21:01:34 2026 GMT
Subject: CN=d33e4fc480fe88a4386983f46a2d8c33cd1fc801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:f6:93:9b:bd:81:88:79:25:3b:aa:0d:db:
a8:04:a4:ed:97:95:a2:e1:da:b5:4c:d0:b6:8d:48:
1a:66:96:5c:33:1b:bb:86:87:fb:08:32:a1:ed:99:
cc:65:ae:9b:2f:a9:b8:16:24:52:7f:ad:97:4a:15:
9c:70:2c:bc:5b:99:36:02:4c:fd:5d:76:46:4e:56:
62:d0:f3:5d:22:b2:5c:57:75:e3:04:d5:3d:b1:a2:
3a:57:4d:3c:cc:b0:d8:9c:79:76:df:96:ef:ad:9e:
6a:15:4f:d2:30:c0:48:db:bc:81:6d:53:28:86:93:
4d:ef:29:7e:09:ea:ab:2d:1b:c1:24:67:e4:49:13:
48:31:0a:b7:65:4b:01:ec:27:0b:de:ba:49:07:83:
d6:5e:1c:79:a0:a4:ce:c7:15:fa:36:91:e5:fb:9e:
81:d3:5c:40:fd:33:e9:52:f1:57:71:26:9e:16:6a:
90:38:3d:cd:cd:93:cd:ec:4e:02:03:f5:57:91:b0:
b5:71:ac:0e:25:e2:80:4f:ce:ed:44:8b:55:6c:e6:
a8:c1:d6:bd:7a:6c:cc:d4:6e:b9:94:97:42:ab:b5:
22:e8:db:3e:26:1d:d7:c9:b1:34:a0:5c:b4:4a:6c:
aa:b3:b3:83:19:3e:4c:6e:53:42:ac:cd:06:a9:6a:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3E:4F:C4:80:FE:88:A4:38:69:83:F4:6A:2D:8C:33:CD:1F:C8:01
X509v3 Authority Key Identifier:
keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4d:22:11:06:76:f7:dc:7d:48:ce:e3:68:4a:6a:83:2c:b0:
cb:96:60:94:f5:78:ce:ad:cc:b5:d1:0f:f5:70:71:04:b6:7e:
fb:54:35:d8:29:ed:13:79:5c:5b:63:05:be:27:ce:17:5d:85:
fa:b7:49:53:53:a4:f3:2a:47:9f:08:be:ff:6d:4e:0f:8b:b5:
76:29:f0:b1:76:40:9a:d5:c0:4e:18:82:e1:2e:10:87:18:49:
1c:4e:09:fd:f2:1d:60:20:00:92:1e:1c:ad:22:f2:94:61:15:
40:60:b9:52:ea:4d:22:04:bd:05:b8:ac:f0:2e:e9:93:68:f6:
46:20:fd:66:86:c3:a3:fe:b9:b6:4d:ba:8f:91:64:94:e8:43:
d6:8e:6e:cc:d8:c9:75:2c:80:03:c9:98:8c:77:a4:8f:c8:17:
df:c5:d8:c1:b7:04:2e:14:96:05:18:10:17:0c:0b:8e:14:3c:
a0:db:0d:f1:a1:ec:c9:43:e4:3e:13:f3:d5:34:e5:23:2c:ef:
92:3b:51:64:22:5a:55:fa:b1:38:5a:0e:82:86:4d:cc:f3:40:
08:0c:1b:3b:3c:e3:94:f2:37:3f:96:df:76:3f:c4:a8:48:03:
86:1d:97:3f:23:de:7b:e9:c1:c0:e2:0f:85:1c:9a:4e:c1:2b:
38:c2:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:38 2026 by rpki-client