Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File: 7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier: hDU6oTVWfW1yFtCX0qJKZ76SZsF3gUH2sVOLdRvVKlo=
Subject key identifier: 24:7F:42:BB:6A:E5:C0:3B:4C:4B:B7:BD:E0:97:EC:DF:AE:A7:34:45
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 019D273A9C74059CCA8299FDCBACB762C15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:00:45 +0000
Manifest this update: Wed 25 Mar 2026 23:00:45 +0000
Manifest next update: Thu 26 Mar 2026 23:00:45 +0000
Files and hashes: 1: 6ukkUq47_d2FjDn2mGzCVotpwug.roa (hash: BSpIOmqaO5YAgsvsZQqH6+DD7MhtSJv4k++NTBFYMhA=)
2: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: YEUl2fTSwrvLhoPwf1yem4mbgtjq8V3Lar/3BOIQy3E=)
3: lOdlGRTCbIpEqR9qatoRPkmZsSo.roa (hash: puduhtYoMCBO2MogdQIQ/qqMbhZcm/6N0DD1bqrK4NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9c:74:05:9c:ca:82:99:fd:cb:ac:b7:62:c1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Mar 25 23:00:45 2026 GMT
Not After : Mar 26 23:00:45 2026 GMT
Subject: CN=247f42bb6ae5c03b4c4bb7bde097ecdfaea73445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:3c:d1:8d:48:f3:e2:d4:65:13:b8:93:57:
8d:ae:46:9c:3f:65:c4:e3:c0:5c:02:bd:26:d9:9b:
46:5e:a5:62:a5:10:c1:64:fa:92:70:66:cb:bf:c0:
c3:7d:fd:74:13:56:1a:f9:c2:5f:0b:03:de:ca:db:
fa:cd:89:ec:b2:b5:98:6a:78:53:85:24:a6:2d:63:
ec:d6:68:60:f4:1f:08:1a:d3:72:13:e0:57:70:ef:
4c:3e:9f:d6:d0:0c:34:31:14:a3:ca:09:fd:43:d5:
e5:54:02:72:b3:99:ac:b3:9f:9c:52:c6:75:af:49:
02:75:d1:51:4e:b0:fa:b1:d8:0d:53:1c:99:30:a2:
c8:ef:21:70:aa:64:f9:d9:51:96:de:c1:3e:0b:10:
2b:c6:81:47:7c:df:3e:6e:8b:15:6a:48:91:d2:8c:
26:4b:65:c7:5a:f0:d9:7f:59:5c:df:24:52:d8:13:
ea:a7:4d:fe:67:11:9a:6c:67:5a:6d:d9:bf:32:9f:
86:f4:39:12:c0:ce:54:e1:a6:96:79:7b:4c:71:04:
cb:8b:d8:df:82:f4:42:16:86:64:e0:26:08:7e:51:
d3:ca:53:11:dc:09:45:23:7c:ca:27:0c:94:74:eb:
a5:56:cd:d1:3d:0e:e5:e6:4f:bf:9e:49:48:13:29:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7F:42:BB:6A:E5:C0:3B:4C:4B:B7:BD:E0:97:EC:DF:AE:A7:34:45
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:20:84:3f:56:77:88:56:ad:e7:3b:8a:56:30:f2:90:2c:9d:
5d:d4:c5:e8:dd:e5:29:ac:f7:1d:e8:8c:f2:fc:ac:c4:e3:bb:
4e:23:e1:34:6b:87:6d:cd:7d:ad:ef:0e:e8:ff:f0:c0:89:6b:
05:c7:4c:5b:cf:51:21:ad:2c:12:c6:1b:98:39:d2:e3:88:d5:
40:8c:da:4c:d7:c6:31:eb:e8:06:d3:62:71:4e:f6:91:bd:32:
22:77:83:c2:31:a3:1a:12:67:78:98:65:bb:24:cc:df:0f:7e:
1f:5a:7c:d8:ca:b9:1a:86:38:42:23:a3:ed:da:be:32:24:b7:
4c:e1:9c:5f:a8:b6:c7:f2:fb:68:23:e0:d5:83:bc:42:9f:47:
11:14:fd:bf:25:4a:93:da:3d:8b:40:16:02:b3:a8:4a:d7:ea:
8c:54:15:ad:48:ef:ce:63:49:c8:55:95:07:2d:b3:80:fd:9d:
09:2d:bf:e4:b7:68:78:66:80:b6:a4:10:04:9c:1e:50:37:8a:
2d:96:86:7f:2d:3a:68:3f:90:22:cb:c9:a7:5b:a0:f5:ee:1a:
dc:9d:6a:cd:58:99:d2:07:1d:48:7b:e1:ed:4d:cf:9c:42:79:
21:5d:37:2e:10:b1:6e:5d:dd:71:c4:51:ba:57:5d:f3:8b:88:
df:dc:b0:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOpx0BZzKgpn9y6y3YsFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWIwODk5ZTM4YTk2YjU0ZmM0Y2JjZDEwZWY1MzljNTRl
ZDRkMzgwHhcNMjYwMzI1MjMwMDQ1WhcNMjYwMzI2MjMwMDQ1WjAzMTEwLwYDVQQD
EygyNDdmNDJiYjZhZTVjMDNiNGM0YmI3YmRlMDk3ZWNkZmFlYTczNDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqA80Y1I8+LUZRO4k1eNrkacP2XE
48BcAr0m2ZtGXqVipRDBZPqScGbLv8DDff10E1Ya+cJfCwPeytv6zYnssrWYanhT
hSSmLWPs1mhg9B8IGtNyE+BXcO9MPp/W0Aw0MRSjygn9Q9XlVAJys5mss5+cUsZ1
r0kCddFRTrD6sdgNUxyZMKLI7yFwqmT52VGW3sE+CxArxoFHfN8+bosVakiR0owm
S2XHWvDZf1lc3yRS2BPqp03+ZxGabGdabdm/Mp+G9DkSwM5U4aaWeXtMcQTLi9jf
gvRCFoZk4CYIflHTylMR3AlFI3zKJwyUdOulVs3RPQ7l5k+/nklIEylwyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR/Qrtq5cA7TEu3veCX7N+upzRFMB8GA1UdIwQY
MBaAFO4bCJnjipa1T8TLzRDvU5xU7U04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjVhNDMtODE3Yi00NDliLWJjZmMt
YWRmNmRhYjg4Yzg0LzEvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mYjVhNDMtODE3Yi00NDliLWJjZmMtYWRmNmRhYjg4Yzg0
LzEvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiCEP1Z3
iFat5zuKVjDykCydXdTF6N3lKaz3HeiM8vysxOO7TiPhNGuHbc19re8O6P/wwIlr
BcdMW89RIa0sEsYbmDnS44jVQIzaTNfGMevoBtNicU72kb0yIneDwjGjGhJneJhl
uyTM3w9+H1p82Mq5GoY4QiOj7dq+MiS3TOGcX6i2x/L7aCPg1YO8Qp9HERT9vyVK
k9o9i0AWArOoStfqjFQVrUjvzmNJyFWVBy2zgP2dCS2/5LdoeGaAtqQQBJweUDeK
LZaGfy06aD+QIsvJp1ug9e4a3J1qzViZ0gcdSHvh7U3PnEJ5IV03LhCxbl3dccRR
uldd84uI39ywPg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:38 2026 by rpki-client