Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File: 7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier: rBmdTnYwUZYqPaBY3vRjtwcSuJKAmzsq8UJfmHhvBx4=
Subject key identifier: 67:D4:4C:B8:9B:A3:C1:FC:2E:82:FE:58:CA:39:61:B6:11:43:F3:07
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 019D28F1FB11BC3A19404DB0A7F34FE6A1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:00:40 +0000
Manifest this update: Thu 26 Mar 2026 07:00:40 +0000
Manifest next update: Fri 27 Mar 2026 07:00:40 +0000
Files and hashes: 1: 0_75cziqkrd_avFDUZ9rg7qilxA.roa (hash: pSQt5ocfFcDKXdLoPRHR826k+pr8i3n1PKJhobyxS7Y=)
2: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: nGiXE2we3uukpxh1PRhMJ+gvzYqnvRnhmeVHZ31kJso=)
3: HkkRPwqU3p5aRopaf6XmKJHJOS0.roa (hash: rwteSwkgkB56v9QAYH409kxEVNO2s78pdzGxZ9J+cBI=)
4: OLd3XQLlCLw9LdNyxml8_t8xuEg.roa (hash: CeqIhEYWVzjJk4bpmS5ELgvmNglk0SZVe+OxNRFsLsg=)
5: YFvRu6poI8Ij__cAkw9ZXzn1ELA.roa (hash: TFdZLvuT5jh6qUmHTvzmxP9xeFFqlGN1y9JFOGD2i4E=)
6: YeiOtzdwnFZaRqUumW9LmExU9wM.roa (hash: MQxdsF/k+I/4Kf6o+ulDftRoc2iIVZbE/JYfdEq0Q2c=)
7: fXNtDKuxKl9PcIOvEE_JPpC6Emk.roa (hash: d9XcOkmKMoLj3DydzQnJz/zsoCrdK+ingQkEPwtmOSU=)
8: vKDDTdeKpC38SOoCmTQDNYKcN_A.roa (hash: 1c+RNvMiXqFMlXYtXBUL17aJsh89UBFVQ2ryMtknJE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f1:fb:11:bc:3a:19:40:4d:b0:a7:f3:4f:e6:a1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Mar 26 07:00:40 2026 GMT
Not After : Mar 27 07:00:40 2026 GMT
Subject: CN=67d44cb89ba3c1fc2e82fe58ca3961b61143f307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:65:0f:6d:a5:4f:c3:01:73:70:d5:b5:00:
18:32:1d:f3:24:9c:27:0f:a8:68:f5:ca:d1:83:1c:
7b:24:1d:4a:33:a3:67:a9:7d:17:de:0e:ed:1f:81:
8b:2a:46:bd:08:1e:90:47:0c:75:43:6a:75:f1:cf:
97:95:89:26:2f:d3:76:0e:7e:a9:b8:91:c1:79:13:
54:ef:ea:a1:9e:43:10:d3:5d:3f:c3:7b:7c:7b:63:
10:26:e9:17:40:6c:d1:6c:8a:25:46:e4:43:87:d1:
8d:dc:77:47:5b:e8:14:7b:98:81:1b:51:a1:6f:18:
d5:58:2a:7d:f6:6d:fe:99:f6:f9:8c:f4:ca:3c:a9:
02:0d:47:f3:09:04:cf:ef:46:79:bd:5f:ad:9c:9b:
7b:19:42:b9:3e:0a:8c:4e:3f:0d:1c:25:66:2c:50:
5e:cd:56:0d:ec:f2:98:e5:3a:d5:6b:47:7d:a6:ce:
d7:be:8a:9d:61:a8:29:d7:8d:a6:f5:d3:08:e9:eb:
96:83:f5:2c:58:2b:5e:22:0e:6a:c3:ad:f6:9e:c5:
d9:fd:65:e7:b0:95:03:da:ab:d0:02:f5:4a:c0:73:
b5:bc:6e:6b:f4:b2:58:07:f7:52:e4:2b:be:a5:ef:
65:ff:62:00:0e:3c:19:8b:7f:37:a7:93:1b:41:3c:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D4:4C:B8:9B:A3:C1:FC:2E:82:FE:58:CA:39:61:B6:11:43:F3:07
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3c:39:ed:c7:88:9a:24:ae:a9:43:ae:cc:4f:8b:51:9a:c0:
92:d1:3e:af:26:5b:21:ba:75:24:58:a6:17:af:22:e0:02:7b:
6b:fb:3f:ac:1f:72:bf:88:e3:08:d3:8c:19:56:07:36:7d:46:
5f:86:a3:3f:a3:67:67:c7:80:aa:0e:63:08:3c:19:91:14:ce:
da:e0:d2:84:b3:f2:23:d3:d9:96:75:6c:9f:95:46:40:80:6d:
5c:06:35:33:79:f9:40:71:3f:36:86:03:68:98:17:f6:55:1e:
1d:b0:f9:15:23:b4:87:c6:20:3c:c8:cf:d5:d3:bd:9f:30:87:
2b:ee:aa:82:4b:74:d2:88:f1:44:3e:29:0a:c3:dc:0b:b4:87:
2a:72:22:45:23:ae:ba:4b:01:d3:94:aa:c6:f4:0d:0c:f7:7c:
88:a0:fa:e5:6d:11:80:55:5f:1e:32:3d:89:e4:36:77:bb:12:
9a:86:22:fc:28:e4:11:51:36:09:84:b0:56:f4:27:0f:f2:45:
be:56:01:d4:63:bc:ba:55:8d:5d:a0:78:06:90:98:ca:1f:86:
1e:91:78:db:48:28:be:4a:8b:7c:ad:2d:64:3d:42:46:94:68:
45:08:51:32:ba:69:35:e1:44:d0:a1:5c:1c:cd:9e:30:72:a5:
28:d5:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:59 2026 by rpki-client