Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
File: 7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json)
Hash identifier: DzNC98F8yio95feD2sNbflK4INr2YP++6VNEaHnlfk4=
Subject key identifier: 85:AA:EC:AB:65:CD:E8:00:7D:F3:44:76:17:23:B2:67:42:82:D6:CF
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 019D2703E55A992878F1AD1CFD11C22225DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
Manifest number: 1894
Signing time: Wed 25 Mar 2026 22:00:59 +0000
Manifest this update: Wed 25 Mar 2026 22:00:59 +0000
Manifest next update: Thu 26 Mar 2026 22:00:59 +0000
Files and hashes: 1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: uWwP5TMo22ZHcP4vxsW4urMgYhsvtTYhXh41Ntxy1W8=)
2: iOS5vBgglGKoAyIuTlk00yBupTw.roa (hash: fNX0sG9X1/c+S73jxlwNV//c2xpiWXgbC9SCAgMtlMM=)
3: kC0XjTRvVTMNVCz_-oosCISvjVg.roa (hash: J4jOxS7kdGhXEFl4JYTJOpbh2muE4HF0FfSXnK3e23s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e5:5a:99:28:78:f1:ad:1c:fd:11:c2:22:25:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: Mar 25 22:00:59 2026 GMT
Not After : Mar 26 22:00:59 2026 GMT
Subject: CN=85aaecab65cde8007df344761723b2674282d6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:1e:1a:d1:00:02:2f:87:7d:d6:9a:ac:03:
8b:3f:da:73:51:2d:15:ba:fb:f5:39:9d:01:d1:d2:
df:ed:98:0c:f0:d9:89:79:a5:dc:ef:d8:c8:c9:1b:
8c:e5:cb:b2:d7:04:6a:1c:01:60:a4:52:a8:27:5b:
d2:4c:d5:35:28:8d:1f:e1:95:13:fd:d6:75:24:e4:
b5:8d:9b:9f:05:fb:82:17:9a:c9:c8:93:e7:38:46:
19:7c:c2:2f:b4:77:22:1c:f7:4e:9e:33:77:a0:11:
46:e9:84:6b:c9:b2:91:e0:36:f4:e7:da:06:47:e5:
96:c2:d9:53:84:59:49:85:6d:4d:64:71:ae:32:73:
10:a5:31:01:5a:8b:71:33:7a:90:5f:7c:7d:c6:0f:
6c:5f:bd:89:5c:f0:a5:af:6d:24:c7:03:35:35:4b:
70:5e:ed:b3:4a:72:ec:bc:b9:c1:71:e0:c7:aa:f2:
dc:c4:df:28:fe:3f:94:f5:f4:44:d9:35:5d:90:c0:
b3:5c:f3:93:8d:be:99:71:0d:65:9c:ac:85:4a:c0:
a6:fe:4e:02:b3:25:a9:c1:2a:68:fa:e6:12:12:c0:
7d:e3:b9:61:e7:28:33:50:97:7a:cc:5d:cd:b2:40:
e4:00:37:21:9a:3f:18:96:6f:a8:1f:29:29:22:c4:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AA:EC:AB:65:CD:E8:00:7D:F3:44:76:17:23:B2:67:42:82:D6:CF
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:24:68:78:d2:d8:d4:56:b2:1c:00:34:94:bb:ac:34:49:d8:
6f:fd:1c:19:0c:c7:7b:9f:d8:9b:af:95:79:5f:7d:cd:5e:a3:
e6:21:c3:84:88:70:13:9b:18:39:fb:ef:51:3d:ae:e2:78:98:
9f:4a:38:d5:0d:d6:25:91:10:d2:ea:d0:b4:57:21:f1:e6:59:
4b:71:31:0b:d9:d5:9b:2b:0b:02:44:00:15:7e:e8:f8:9e:f5:
fa:a6:ff:4a:2f:8a:79:44:f4:4c:43:93:69:1d:ef:8f:bd:c0:
0f:25:19:f1:9f:53:cc:5a:2e:ef:f8:01:1a:88:64:d1:dd:f3:
86:80:98:14:3d:11:e0:15:55:93:bb:a3:61:56:f4:d8:8a:6b:
88:75:32:88:60:3f:d3:8b:07:f1:c5:d0:1f:3e:7c:90:7c:6f:
e1:0b:24:bb:73:04:12:e3:7f:07:84:f1:ae:a5:75:46:0a:12:
96:c1:e7:79:f7:ea:68:82:01:76:28:90:f5:90:28:fd:ba:b8:
8d:27:fc:34:7f:fd:62:3b:cc:dc:be:19:cd:7f:dc:0b:69:93:
80:6a:85:85:b3:af:06:4d:14:c7:56:73:dc:94:3a:50:2e:3e:
31:29:44:37:eb:5d:3a:fe:5a:70:54:28:46:f6:19:37:82:1c:
ed:f5:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:23:01 2026 by rpki-client