Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
File: 7YUEg8zhM3scbC_d6pxdu0p-GRo.mft (raw, json)
Hash identifier: PtyImQgH2P9regV2P0L5mazWxLLEJ6qWK/OU8IRet5c=
Subject key identifier: C6:05:52:E5:F2:0A:9C:E2:3A:06:96:8D:DD:47:5E:29:F4:BD:31:BF
Authority key identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
Certificate issuer: /CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Certificate serial: 019D2884A56142754472C1234A3D2B0B0934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 05:01:14 +0000
Manifest this update: Thu 26 Mar 2026 05:01:14 +0000
Manifest next update: Fri 27 Mar 2026 05:01:14 +0000
Files and hashes: 1: 7YUEg8zhM3scbC_d6pxdu0p-GRo.crl (hash: wxrvNJ7vhu2y3Hk9pFi+2xFY0gaFTIVDGYtTwoa3DZA=)
2: aolEbo2qB2S6A6P1jzACXp478EQ.roa (hash: oA7ghnRZDo0Fz0lfj+1EUdXsdtQn6tS/8aJp7ap6T0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a5:61:42:75:44:72:c1:23:4a:3d:2b:0b:09:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Validity
Not Before: Mar 26 05:01:14 2026 GMT
Not After : Mar 27 05:01:14 2026 GMT
Subject: CN=c60552e5f20a9ce23a06968ddd475e29f4bd31bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:63:bb:bc:f9:ff:11:14:26:ce:57:5c:07:
a5:7c:ea:51:43:44:73:8f:6c:0f:1b:15:48:26:97:
f9:22:4c:47:3e:07:6e:09:e9:7d:81:ef:5d:34:fe:
87:77:b6:ef:db:86:ea:b6:c1:dd:b2:a7:2c:3f:9b:
88:2a:82:ff:61:62:d6:06:7c:ee:3b:8a:f5:da:27:
58:fc:5d:98:16:ba:ee:26:2d:ba:f8:e6:20:79:68:
1c:14:e3:a5:7c:14:87:49:18:12:39:9b:20:0d:10:
a2:bc:5c:33:e6:64:83:c8:56:ca:7c:48:a6:c1:1d:
7f:35:99:82:85:c8:f2:4f:a0:ba:63:4c:2c:62:47:
f1:13:8b:e1:b8:3d:8a:68:32:d7:77:e2:f0:4f:e0:
90:34:44:6a:e1:c2:0f:1e:2b:4e:65:a7:74:60:e6:
57:ae:24:e6:83:97:29:1d:a8:c1:a5:32:a8:64:65:
a3:1e:42:02:1b:a1:80:4b:c3:8c:29:ce:b8:50:26:
05:75:c6:5d:cf:d2:08:20:e8:38:84:2f:90:b3:ec:
62:ab:91:c6:21:0d:4a:ca:a1:fc:e9:fe:f5:75:47:
9e:e0:2f:76:b5:c8:a3:ad:a4:9c:50:87:ef:cf:47:
8d:8f:85:6a:4d:70:2b:71:1e:e3:9a:b3:fa:92:ff:
22:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:05:52:E5:F2:0A:9C:E2:3A:06:96:8D:DD:47:5E:29:F4:BD:31:BF
X509v3 Authority Key Identifier:
keyid:ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7a:99:d0:84:ff:37:13:35:9b:e7:15:bd:0c:bc:2f:09:03:
22:88:0d:ad:8f:eb:29:2e:dd:bb:f7:6f:11:b0:a6:bc:bb:1f:
59:4f:30:23:c9:91:29:70:1c:cf:1f:ca:91:de:f7:ac:90:3e:
07:3b:32:60:54:e9:c4:fb:4d:cc:2f:90:26:a4:b2:8a:c3:60:
f1:4a:05:2c:df:40:8d:39:07:e2:35:75:cc:f4:c6:95:3c:94:
2a:01:81:e0:d0:68:b5:a6:28:07:00:9c:77:fe:54:b1:55:03:
28:ba:e9:a7:a6:8b:5e:f0:5d:10:35:e0:05:45:e8:63:e3:aa:
13:6d:09:a6:4e:25:ce:b8:5f:4c:46:2b:34:0a:9e:b3:5f:00:
55:e6:7f:fa:98:62:ac:61:1c:91:81:45:6d:e6:51:5d:85:64:
3b:b0:df:3e:4f:e4:eb:64:2f:c9:bd:86:ff:c9:ec:6e:21:7d:
4f:b5:3d:99:14:a5:68:d5:13:3c:5a:d6:92:84:77:1c:d1:2a:
7f:7b:4e:9b:ed:62:5c:a6:b2:2f:7f:c9:55:b7:1f:b9:84:5e:
a2:95:d7:a7:e0:55:46:82:18:9f:da:6a:68:2e:b4:51:39:15:
3c:27:78:16:2e:ed:69:c1:23:9d:94:77:ca:c9:c5:6a:81:fd:
73:38:41:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:41 2026 by rpki-client