
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
File: e7M4LBagpWFZkNS85jTcUWgvLqo.mft (raw, json)
Hash identifier: w30vgMVk759rHgsiIJAs99aeQadwjjOXtd+q5gVj1H8=
Subject key identifier: 3A:B3:35:DE:1D:EF:D0:5A:8A:99:9B:50:26:EE:D2:47:6A:E3:5F:8B
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Certificate issuer: /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial: 019D265F8E6B3A08354111C604BFDC84A354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
Manifest number: 0B7A
Signing time: Wed 25 Mar 2026 19:01:29 +0000
Manifest this update: Wed 25 Mar 2026 19:01:29 +0000
Manifest next update: Thu 26 Mar 2026 19:01:29 +0000
Files and hashes: 1: 31QlpWk52MbnjJPL8duGjgcTV1M.roa (hash: ewibnVQxq4nFBFXckvW0i2H7kBIgzqodfcTWUNT0n/g=)
2: e7M4LBagpWFZkNS85jTcUWgvLqo.crl (hash: OCCyYvtjklPawld3xXhXWkw5zaW+3JeUhwUCAHwGKXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:8e:6b:3a:08:35:41:11:c6:04:bf:dc:84:a3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Validity
Not Before: Mar 25 19:01:29 2026 GMT
Not After : Mar 26 19:01:29 2026 GMT
Subject: CN=3ab335de1defd05a8a999b5026eed2476ae35f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:eb:14:e5:b3:84:03:ba:e2:13:a6:db:d0:
c7:72:7d:98:e6:65:81:02:87:9d:aa:96:6c:20:00:
c2:f7:e2:6e:69:3e:4e:d2:fb:23:c8:b3:83:37:c5:
7b:e1:cb:fc:29:e7:c0:49:f0:91:df:d8:8e:31:4e:
48:39:c1:72:4a:d9:ca:e1:2f:e3:01:83:3a:c0:bb:
1f:b5:aa:47:49:4f:85:41:db:a4:12:91:ab:8a:47:
44:65:57:5d:32:03:d9:d7:4a:df:2c:4c:00:93:91:
12:c5:80:70:b7:69:35:15:af:11:99:e2:58:93:a6:
dc:ea:81:c3:c2:a4:f1:52:53:6b:e8:8d:2a:75:64:
57:ee:57:59:e4:18:73:78:ea:8c:b3:60:8b:1b:1c:
5f:61:b1:82:c1:00:18:58:12:0d:b4:40:55:87:2f:
3d:06:4e:fa:bb:dc:4e:c3:9f:52:8d:69:75:a2:00:
1f:87:f2:d4:e1:9e:d2:1d:23:f9:52:b2:41:6d:a7:
80:a8:c9:76:f2:ca:f5:fe:08:1d:ff:b9:1e:79:b1:
fb:c7:35:78:1f:6a:df:80:20:35:91:4c:7b:08:c3:
3a:de:8d:14:12:36:aa:e0:b1:2c:86:e8:e7:9c:fc:
16:92:e2:c9:ac:ef:97:8c:8f:a8:86:1f:82:84:27:
24:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B3:35:DE:1D:EF:D0:5A:8A:99:9B:50:26:EE:D2:47:6A:E3:5F:8B
X509v3 Authority Key Identifier:
keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:52:f7:2d:72:5f:e1:38:7f:f3:ad:3e:2b:2e:e6:46:64:12:
d0:ac:b1:b7:53:dc:3d:76:ff:d9:24:5b:26:69:8b:57:03:d3:
04:9e:07:c3:d4:0a:04:29:c9:79:dd:a6:bd:38:31:41:70:9e:
08:bb:8f:cd:30:0b:d7:0f:fe:10:57:39:89:9e:17:11:ee:47:
5c:ae:cd:30:d1:0c:05:21:4c:1a:77:08:4f:43:8d:a3:61:03:
c3:31:ac:c4:79:f2:6f:9d:54:e8:0c:8c:8a:dd:9a:05:3e:11:
40:38:39:a6:11:89:3a:47:4a:69:b6:a0:99:53:85:35:e0:d7:
5f:9b:2e:b4:a6:4c:33:c9:91:d0:2a:a0:6f:7f:0c:ab:3d:19:
fe:8c:f5:e5:1c:70:c6:26:de:61:2e:fb:1a:7a:d8:70:8d:18:
42:ab:05:9a:e6:bc:75:68:c6:10:46:c6:4c:70:14:1c:fe:ee:
ac:7a:51:d3:da:c7:0b:b9:87:a4:59:01:62:71:83:af:89:9b:
f6:5b:83:91:91:06:92:3d:43:84:68:c1:22:02:6a:ad:2c:67:
e6:3a:73:22:6d:6e:ef:d5:23:3d:f8:8c:16:56:4c:fa:db:b6:
6e:7c:e3:14:7f:0b:72:46:48:1a:4f:10:4f:f0:b0:f5:00:a5:
43:7a:f0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:17 2026 by rpki-client