Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
File: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft (raw, json)
Hash identifier: Mb7viNsHLkNB89Cnad9hjax0C96tIJ/CGzID6hf0i10=
Subject key identifier: E4:EA:AF:C4:C8:7C:02:0D:ED:A5:B9:1A:53:5E:D6:77:35:0A:2F:65
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Certificate issuer: /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial: 019D2772C2815D88DA17C94E5570EAF5EC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:02:05 +0000
Manifest this update: Thu 26 Mar 2026 00:02:05 +0000
Manifest next update: Fri 27 Mar 2026 00:02:05 +0000
Files and hashes: 1: 1-kHdsLNbk3wn4YZGGv7nR6qgmuo.roa (hash: GP85i29ZuAZsmZlUrVOG+U5Hl6NUzQEiBUiRqfR82Fs=)
2: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl (hash: 0FI2zRm5NIHoeH7lAB/5xRCwsrcoHiuhA8S6AeTiNWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c2:81:5d:88:da:17:c9:4e:55:70:ea:f5:ec:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
Validity
Not Before: Mar 26 00:02:05 2026 GMT
Not After : Mar 27 00:02:05 2026 GMT
Subject: CN=e4eaafc4c87c020deda5b91a535ed677350a2f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:55:6a:e2:47:be:fb:06:4c:2e:ad:7a:f0:
dd:c8:78:8a:72:98:7b:c2:6c:15:50:ad:ac:d0:b4:
bc:b0:e0:3c:40:34:0b:e3:43:8b:a9:c0:16:b8:2c:
8f:22:05:54:ce:72:2d:31:1b:d7:70:b7:69:95:4e:
86:bf:87:b2:4c:35:4f:93:73:cc:08:46:59:58:a4:
86:5e:a5:68:05:ec:73:4e:1c:71:35:8f:02:40:9d:
5c:47:19:0a:2c:68:08:a0:66:49:bd:93:37:1b:0d:
e8:30:32:a7:49:cb:eb:2e:09:21:84:b2:a9:54:d7:
46:d6:97:1d:dd:84:7b:00:3d:d8:ad:00:f6:20:30:
d0:d1:13:f1:7f:ec:2c:ae:95:c2:2c:80:e2:d7:ee:
d5:f4:67:3f:1e:bb:e2:04:68:3f:aa:cd:19:16:8e:
55:bf:8b:4a:75:5e:94:cd:bd:4e:49:10:43:b4:8d:
41:cf:16:19:59:f2:0b:ab:62:fe:12:c5:44:1d:7a:
63:67:09:17:05:10:2e:0d:85:0f:27:59:8a:b4:a1:
e8:41:7e:f1:bb:08:9b:ed:10:ba:ef:29:5d:4b:23:
06:6b:f9:30:f1:9f:2d:66:ca:5c:ad:5b:1e:7d:d7:
30:26:95:36:bd:c4:e2:b0:07:aa:5f:88:fc:a8:88:
5c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EA:AF:C4:C8:7C:02:0D:ED:A5:B9:1A:53:5E:D6:77:35:0A:2F:65
X509v3 Authority Key Identifier:
keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:06:3b:e7:99:c9:e6:4c:2e:82:ba:60:a4:e5:63:b1:73:c8:
a5:f4:d2:46:f8:5d:7c:0e:b3:ec:0f:ac:dc:2c:6d:6c:9a:92:
35:e2:6b:48:42:fc:ff:8d:73:06:60:df:67:99:41:45:6b:f4:
f8:4b:72:f9:6c:63:77:07:10:c7:75:ef:b7:ed:cb:23:ce:72:
7e:87:c9:f0:d2:4a:42:e1:a8:6c:3a:80:e2:be:d2:05:74:69:
e0:c7:a2:4f:00:0f:21:15:ed:f9:8d:0c:88:5d:c7:5b:7a:a6:
ab:6a:1c:bc:a0:36:64:ff:a9:a4:4f:a3:d5:dd:fd:f8:43:b5:
57:89:04:fe:3d:02:0d:25:8e:82:fa:30:27:e8:e4:52:4b:ea:
08:c5:d8:10:13:1f:d1:27:ec:b0:d1:1e:64:52:ba:97:49:b2:
7c:69:45:ed:d3:81:a7:cc:5b:33:ce:c4:78:84:36:3c:3e:25:
cb:a9:a0:4e:e4:8c:5a:7c:1b:77:37:0c:58:29:f9:9a:e3:aa:
10:a7:11:d3:d0:9d:fd:ed:75:49:84:3e:4c:68:9e:83:47:71:
f7:e3:c6:f0:7d:2c:41:79:4d:14:3b:89:08:77:0b:78:09:48:
b1:bf:fc:3d:55:66:08:90:86:c9:57:88:ee:1e:83:d1:4b:5c:
0f:46:69:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:49 2026 by rpki-client