
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File: 7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier: 2oCYV5nVaysETEYNmz8AeAWnNBFhJ4EGoNFOKAwJ9Ig=
Subject key identifier: 82:37:F3:5C:9E:9B:CC:11:9F:5B:47:F5:28:45:B1:AE:7A:35:BA:7E
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial: 019D26CD3A32734D27DE3647DF096E81B52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number: 0F07
Signing time: Wed 25 Mar 2026 21:01:17 +0000
Manifest this update: Wed 25 Mar 2026 21:01:17 +0000
Manifest next update: Thu 26 Mar 2026 21:01:17 +0000
Files and hashes: 1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: YC/kfAd+z3As6RtVwkvZwfpyRKaw42JyMNowfShN0rI=)
2: Z0WVwWptGEGRyg-sh820wNyCLqg.roa (hash: +yXI8Hiac4a98uMpERPin9vZe08d6SLlySsDllVTAlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:3a:32:73:4d:27:de:36:47:df:09:6e:81:b5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Validity
Not Before: Mar 25 21:01:17 2026 GMT
Not After : Mar 26 21:01:17 2026 GMT
Subject: CN=8237f35c9e9bcc119f5b47f52845b1ae7a35ba7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ee:61:31:8e:2f:d4:c2:6c:1a:f7:d4:7d:9f:
61:a2:82:ef:4f:cd:d3:1c:44:08:fb:50:42:16:3d:
fc:6e:e5:aa:f4:c6:72:09:5d:54:d3:0e:26:95:97:
38:9a:fb:ea:28:1c:4f:ad:db:47:71:7b:be:3e:1b:
cd:49:63:43:a2:42:c7:a0:af:93:91:5a:5b:72:6e:
dd:a6:8a:2c:6c:c2:82:9e:a5:5a:a8:8b:83:fe:34:
ff:56:ce:56:79:68:1d:fa:f6:24:00:27:2a:f0:ce:
cc:ad:ca:a3:66:be:b9:38:bc:7f:43:b2:1f:93:7b:
f7:e3:8e:2e:44:ef:b8:dd:26:cb:f9:d3:77:5b:fe:
28:33:e9:ce:de:8a:83:bc:99:24:ef:5f:81:e5:a4:
7c:00:17:62:08:c0:ab:ce:e4:41:5a:5e:55:ce:bd:
12:30:6c:32:9b:c3:6d:3c:48:a0:16:27:c7:d5:10:
5c:5f:2b:cd:74:f4:d8:84:aa:9c:eb:fa:0d:fb:7f:
cc:c5:41:04:22:ff:76:8d:b1:2b:f5:a2:43:4d:55:
f5:53:0e:47:ca:5e:25:b6:7d:26:2f:42:bf:e6:7a:
64:ee:87:c3:a0:f3:9b:fb:05:a0:ce:91:be:0b:6d:
49:eb:46:72:b1:39:2f:b6:b4:26:68:7f:29:ad:fc:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:37:F3:5C:9E:9B:CC:11:9F:5B:47:F5:28:45:B1:AE:7A:35:BA:7E
X509v3 Authority Key Identifier:
keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:be:6b:49:98:1f:87:5e:8f:bc:26:dc:0a:8e:27:1f:62:b1:
d9:29:be:4c:75:f1:56:b1:95:fb:0d:70:7c:88:0b:d0:c0:c3:
e9:d0:ff:c0:6e:b6:89:64:b8:6a:f2:80:cf:00:d9:31:30:cc:
44:a7:7a:a3:08:ce:dd:78:d1:29:bd:a4:3c:cd:67:bc:b5:1c:
6b:9d:02:b0:76:ca:ac:cb:41:b1:4b:62:fd:72:ad:05:26:bb:
52:79:d3:15:65:ae:4d:ca:93:55:33:fc:bd:c0:36:cf:a1:89:
ef:24:b6:a1:15:45:8a:09:a2:44:f5:1f:2b:6d:ad:e3:3b:33:
69:0b:8f:66:7d:8b:8e:5c:d5:05:7b:22:a8:84:16:51:c8:93:
27:3a:76:6d:a4:e9:85:43:ce:a6:9b:59:e2:82:bb:3d:9c:a1:
0f:7c:73:ae:b4:34:2e:74:8c:e7:7a:e7:6a:05:c4:9f:24:e5:
23:9e:50:45:27:93:eb:2f:3a:75:cd:06:df:98:b2:26:fd:bf:
ab:b5:af:86:a0:19:b4:99:aa:b1:b3:4e:5a:81:ad:82:87:b3:
6d:58:45:d2:7a:fb:42:a9:3c:a7:f3:c8:c5:0e:63:6b:ed:bc:
66:81:4d:a7:12:f5:5f:cb:64:a2:84:1e:47:a8:66:0e:cb:96:
16:c4:1f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:05 2026 by rpki-client