Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File: p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier: 6wEOgU0yR+6EkQc85e+6UfjA8cpD77eGwnvo/lnLWPI=
Subject key identifier: BE:90:7E:D3:55:4A:FB:27:69:DE:A0:29:A0:4A:07:49:0D:3E:88:56
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 019D29CDE655B3216B5A12CAF0A6EBCBFA16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number: 1014
Signing time: Thu 26 Mar 2026 11:00:52 +0000
Manifest this update: Thu 26 Mar 2026 11:00:52 +0000
Manifest next update: Fri 27 Mar 2026 11:00:52 +0000
Files and hashes: 1: Qth5F4Jxy_7Urd_QUYNqQ6dh3BE.roa (hash: 7J/t016OYUhUIcd/w4kqId0UMUV/HMGOup9T1dY8o6k=)
2: VMk_-ZVMzNsk1GgbJTfI9LE0DME.roa (hash: UfrV1/CMx2zPrF2PH/5Pf7VA8YMgyux3npUJflT4mLo=)
3: WMaXfRf-RFKZGI9jfe80US59tDA.roa (hash: oSG4X6QE7Zo0M5rFiT40os6MT1Li/W/ODtM/SHLn50w=)
4: WYINcTR5G8eWIm2nJo9-FZB9A-c.roa (hash: xbC6ZKVedTs8dgZW52hJX5QjfYmjqhQcuGp6AKEKmZI=)
5: XAZ6WKQwSbWuMdg-slN8CRUbp5I.roa (hash: B/BbMvrnmz3NQFSpm/6UYMAwSqXPT+vl+n1zXtv+BHo=)
6: a9JkWci0F3TTd0p2sBEzmiEjdq0.roa (hash: 5j0Wq9PZGQQ7JbTj7Kgmx1x+26TKEMnhbQ7aJjaYgsg=)
7: hCn3bIQg5VsX6NCOxM1ZQie7ZJ0.roa (hash: D+/5MAyrqx5oCLSLt+ymEIb8F3rOABO1+8Ywi8kb7lY=)
8: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: seWGB22Bb15q+/CctjqVM7Hsm7I8yF3mSM/U1X6vFcs=)
9: quvibglo6Ez0p7GLGOPHRy9oRo0.roa (hash: PHUCyCkb1CzH3KiJNE2akCPX54R84dlZX7do54X1Jww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:e6:55:b3:21:6b:5a:12:ca:f0:a6:eb:cb:fa:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Mar 26 11:00:52 2026 GMT
Not After : Mar 27 11:00:52 2026 GMT
Subject: CN=be907ed3554afb2769dea029a04a07490d3e8856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f1:7c:d9:06:31:59:20:e6:d5:a8:62:3f:6a:
41:3c:3d:8e:91:2a:a3:87:16:b1:1c:45:9f:e7:22:
c1:53:3e:09:1b:3d:13:e5:e4:d8:45:39:fa:9b:f3:
c9:22:bb:39:3f:c6:01:63:24:2b:41:91:9c:c2:cf:
61:fa:2b:27:fa:27:88:ef:fb:e6:db:0f:6b:da:bc:
8e:9e:0c:09:c3:65:ed:22:d6:34:b4:c1:b1:31:b4:
1d:78:cb:0e:a9:9d:76:60:07:58:f1:1c:6f:bc:3c:
c1:77:e0:94:ca:7f:17:6e:f5:47:85:76:64:c8:cf:
52:c6:f2:23:5c:03:b0:3b:dd:3f:26:8c:e0:ce:28:
6e:47:df:a0:55:d6:01:d6:ab:5c:a1:ba:9f:48:89:
40:18:be:da:61:6b:3d:52:9a:a9:6f:97:f9:cf:4c:
90:d3:44:76:72:21:a3:3d:5e:82:24:48:38:9c:8e:
fc:35:09:f3:9d:27:52:33:60:68:5b:43:6c:c1:fc:
5f:59:57:c7:70:31:f1:94:2f:08:a9:d4:74:12:38:
67:50:61:bd:0d:e9:6f:53:98:be:28:2c:c7:8d:b0:
c7:dd:df:ff:b3:5d:0b:1f:7e:28:06:3d:b1:8d:3d:
62:9f:5f:98:b9:fa:62:f6:34:46:61:c9:24:e2:9d:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:90:7E:D3:55:4A:FB:27:69:DE:A0:29:A0:4A:07:49:0D:3E:88:56
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c8:41:a5:a7:4a:35:cf:58:c2:de:fe:41:bc:14:7e:b8:cb:
6d:f1:e7:ec:33:4b:a1:34:77:31:3c:3e:4f:41:0b:f9:12:d5:
63:f5:f9:54:20:cb:82:ff:11:7b:69:26:2f:9e:8b:cc:fb:b2:
10:e5:4c:58:dd:37:d3:66:e1:97:21:db:1c:38:40:a3:e1:89:
ca:b6:ad:6d:5e:0b:04:10:15:5a:d8:92:b0:1b:30:84:e3:53:
9f:cf:8a:88:6e:ec:89:92:5e:37:c2:32:93:57:b7:93:3e:88:
60:7e:d1:0f:7c:f4:b2:08:2d:12:f9:44:47:83:99:2f:53:22:
c9:ce:b2:3f:c9:4c:cf:3b:2e:1a:3d:43:c6:d3:d5:4c:62:80:
f0:32:89:94:fe:aa:e1:09:6e:f2:63:8a:ff:32:78:0c:66:32:
57:2a:9b:fc:4a:23:bd:7c:4e:c3:54:e2:4b:95:0a:04:af:9c:
26:d3:80:21:95:b0:44:5c:6c:63:2c:fc:ff:7d:f0:9e:34:9f:
9d:f2:fc:92:24:02:6c:39:6d:ac:7b:8f:01:70:ff:14:7b:ea:
38:fa:e8:cd:4d:d8:38:3f:72:56:99:27:f6:f4:e9:ff:d3:c5:
bb:d3:6d:6f:d5:d8:fd:98:af:26:49:65:5c:05:7f:10:e5:8a:
71:ea:15:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:28 2026 by rpki-client