Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File: t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier: vFEE/4ibI61nyV+91UzGdKntfxl1n6QE9xc/TK8KcH4=
Subject key identifier: 19:9A:01:9A:F0:B6:AF:20:DA:9A:9E:C7:63:8F:DC:B5:2E:36:30:9D
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial: 019D27DFCD58B41A946F74DAD9EBA36E95B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number: 05E5
Signing time: Thu 26 Mar 2026 02:01:11 +0000
Manifest this update: Thu 26 Mar 2026 02:01:11 +0000
Manifest next update: Fri 27 Mar 2026 02:01:11 +0000
Files and hashes: 1: RhYPlB5kqIX-dmV0ZFbkO4F9FQA.roa (hash: B4giMGx1nCtQi2hJ6Q8i5DGTsStHwrUH2rtSDwaQt6Q=)
2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: s6+teRwwBGgrbcpp71KZu7mshHE21DKD8hOUH1FR3MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:cd:58:b4:1a:94:6f:74:da:d9:eb:a3:6e:95:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Validity
Not Before: Mar 26 02:01:11 2026 GMT
Not After : Mar 27 02:01:11 2026 GMT
Subject: CN=199a019af0b6af20da9a9ec7638fdcb52e36309d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:15:2c:70:03:a4:51:e2:9f:2f:8f:4c:06:
bf:cb:9e:64:aa:76:01:3a:f7:d6:6e:9e:20:aa:9b:
03:09:69:4d:77:90:61:72:5b:94:a4:b2:f0:40:64:
d0:64:be:21:e2:db:00:51:8f:26:a5:50:44:db:4a:
e0:13:89:95:72:cd:f8:b6:b1:59:22:0f:3a:a9:ac:
e3:ae:45:dd:42:64:32:01:e2:d6:42:fb:34:c3:b0:
b2:e6:6b:e8:a1:b6:26:24:3e:64:fe:0b:8f:f6:0b:
25:20:b3:59:d2:4b:d8:ce:32:6b:7b:3c:bc:4a:9d:
52:4d:65:ed:5b:b9:d8:fb:c8:b6:f4:ef:fa:a8:8b:
5a:ed:d5:29:15:09:7d:48:08:54:34:7b:1c:ef:08:
28:88:8f:72:ce:05:08:93:fa:91:85:a8:7c:53:3f:
dc:4d:57:87:20:ef:56:d2:1c:21:f8:fa:c7:ad:15:
29:40:d6:5a:a6:6c:f0:88:e8:04:1e:d3:22:67:dd:
82:71:12:83:1e:1d:c8:34:6f:e7:c1:f3:ac:83:7f:
80:3f:91:31:fc:b5:f3:2a:1b:12:0a:99:d9:67:7b:
88:fe:d2:c5:5f:4d:25:10:3a:c5:d7:44:25:b3:14:
6a:fd:a1:d6:03:9a:7f:4f:27:44:10:28:08:94:3b:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9A:01:9A:F0:B6:AF:20:DA:9A:9E:C7:63:8F:DC:B5:2E:36:30:9D
X509v3 Authority Key Identifier:
keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1d:f1:4c:c1:ac:61:da:eb:e5:d1:9a:b6:cd:ee:82:01:38:
b1:33:b0:a0:8c:51:43:5a:87:26:ef:65:7a:eb:c1:1d:44:e0:
f0:22:ce:7f:d4:89:b9:b1:5c:05:7b:e9:7f:33:d8:3d:fa:01:
65:89:00:cd:80:4d:91:a5:49:93:c8:6f:5d:92:3d:bf:46:98:
70:74:7a:98:8a:d4:45:e1:ce:60:2b:b0:73:42:f9:05:3d:87:
d0:9d:83:cd:f5:5b:60:9b:50:7c:ee:81:fd:77:68:5a:70:80:
ef:5c:2f:78:bc:8a:45:08:1c:5f:28:56:20:83:bc:b7:2e:15:
07:99:a7:a9:de:ad:64:3d:cd:1e:ec:92:23:3e:77:92:1c:48:
aa:38:d2:0c:9a:a7:1f:d6:92:be:89:2f:09:13:5e:ec:1c:0c:
fa:c5:e0:2b:8c:7e:8e:56:d5:68:f5:b9:f3:50:14:49:98:06:
38:7c:21:60:ec:1e:43:3c:6d:8e:7f:9d:f5:65:80:7c:9b:03:
98:bb:a7:61:58:42:79:61:73:5c:dc:d4:dc:f0:51:c4:c8:10:
67:9b:ea:ff:86:f7:76:47:01:a0:a7:6a:70:fa:44:9e:9d:b0:
32:f8:00:68:85:2c:97:32:04:8f:7f:86:76:2c:06:06:0c:94:
5b:89:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:15 2026 by rpki-client