Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
File: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft (raw, json)
Hash identifier: XXjmx95L8fSa4hWUot0jGyQpNr3/W8GmfKc1tssFwIM=
Subject key identifier: AD:92:E5:79:24:92:1F:20:7C:5E:82:00:F3:31:7B:3F:87:74:FA:39
Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
Certificate issuer: /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Certificate serial: 019D273AF88BD02335D3AF3BB54D60816069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:01:09 +0000
Manifest this update: Wed 25 Mar 2026 23:01:09 +0000
Manifest next update: Thu 26 Mar 2026 23:01:09 +0000
Files and hashes: 1: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl (hash: Ewub/vxlYzPKjE8CoAfk5b9d05ajF9QmnuhsFsOkQuM=)
2: aTDLH8OzshREg-8mq0j-dLNvoVA.roa (hash: bWxd+gcoFiIXVBKwuiK0uKoGEVScpNqYAsExPghzTho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f8:8b:d0:23:35:d3:af:3b:b5:4d:60:81:60:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Validity
Not Before: Mar 25 23:01:09 2026 GMT
Not After : Mar 26 23:01:09 2026 GMT
Subject: CN=ad92e57924921f207c5e8200f3317b3f8774fa39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:14:da:55:cc:e8:38:46:0e:0c:ff:bb:1f:
b1:a7:48:ca:78:c3:4d:07:56:be:dc:4f:51:43:29:
09:6e:c9:79:8d:13:e3:81:03:ab:27:ad:ad:4c:e7:
32:36:f1:2a:f1:ad:b1:a5:7a:75:72:fe:e7:61:1a:
df:c9:d2:ba:2d:a2:6f:0a:c6:2c:4f:41:9b:04:1d:
49:78:d2:23:df:e6:0b:51:47:f7:4d:db:02:b3:f9:
eb:92:cc:55:e7:e7:b9:d7:60:56:b1:1a:76:b9:1d:
08:ed:7b:0e:d6:8c:e9:45:5f:9e:b1:f9:f9:54:40:
b9:b9:7a:80:ff:fa:79:cb:6f:5a:0e:be:6d:6e:4f:
7c:a6:1e:49:c6:d4:d7:b8:2b:a6:2a:9c:2e:3d:89:
67:6c:b9:41:5d:04:80:b0:04:1c:20:fc:d0:74:31:
0a:ce:c3:a7:ed:d4:61:7c:c2:d8:28:b2:7d:d4:b0:
25:16:ef:5c:a7:6a:db:68:10:5e:3f:f5:f0:aa:a0:
28:32:62:cf:18:c3:be:bd:bc:2b:2e:35:54:96:4b:
ee:da:60:bf:10:f6:02:14:07:bd:60:af:b6:53:84:
1d:05:38:af:21:12:71:04:f4:da:a2:c7:fb:5c:a2:
54:00:44:6c:c3:7a:fc:de:f7:2a:ff:61:f7:fd:61:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:92:E5:79:24:92:1F:20:7C:5E:82:00:F3:31:7B:3F:87:74:FA:39
X509v3 Authority Key Identifier:
keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:29:82:b5:d4:76:7f:3f:f0:64:37:73:9d:64:1f:f9:8f:2f:
6c:46:eb:2c:85:cb:d9:cb:2e:72:9b:77:12:a6:a4:34:36:f6:
fe:56:ca:71:26:ec:19:69:90:e4:8a:79:af:28:a6:1d:bf:46:
9c:0d:1a:11:04:06:1f:14:17:0a:c9:d0:9a:db:b9:78:ec:32:
59:d1:51:c6:fb:13:56:44:6d:fd:03:57:4e:66:fc:61:90:5e:
05:f3:51:a2:b7:b1:43:37:7c:3d:11:96:95:df:53:2e:d1:17:
81:a1:2e:3f:a3:25:db:65:0c:1b:12:16:aa:c8:fa:11:48:94:
d4:a6:17:a9:ef:df:1d:11:44:e4:78:a5:77:4d:a5:87:a4:23:
10:94:a4:bc:49:3c:27:d9:c5:cb:6f:60:f3:6b:00:d4:b4:1e:
50:4f:a9:f1:ee:ac:7d:e0:38:98:e8:3b:09:3e:a8:bb:00:b6:
9e:28:ce:94:df:8d:d2:2c:4a:c3:45:05:b1:18:09:cd:cd:42:
e5:7e:53:7a:47:5a:ee:be:fa:9b:70:d7:e9:c9:2c:9a:51:b2:
46:20:83:3d:dd:1f:35:07:c9:ca:59:0e:ee:23:19:81:66:a1:
d5:5f:4a:bd:b8:7c:a5:8b:b4:75:a2:d2:13:69:7d:5f:c3:66:
dd:bf:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:56 2026 by rpki-client