Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
File: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft (raw, json)
Hash identifier: vs1tVBfpxVvRU0Hn9RzrIGDoBX4CE7c0tDPJVrAnnXU=
Subject key identifier: 5C:7D:D5:F3:AE:DA:CC:7F:C4:A5:DC:EE:FA:ED:AC:F2:91:45:6E:38
Authority key identifier: ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
Certificate issuer: /CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Certificate serial: 019D288474D69C680B0121E3F8DBAE61E0A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 05:01:02 +0000
Manifest this update: Thu 26 Mar 2026 05:01:02 +0000
Manifest next update: Fri 27 Mar 2026 05:01:02 +0000
Files and hashes: 1: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl (hash: DaeiiHX0jPyTgXiikx9vWTIpwLsXrey/fGP5rEFY2yk=)
2: YqBJj4QOZe_mJKDs248c4_DsF6s.roa (hash: ZDFKOurRRaHh8voy0j7Npo5QmnZr2B2qAZU5jtYcJks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:74:d6:9c:68:0b:01:21:e3:f8:db:ae:61:e0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Validity
Not Before: Mar 26 05:01:02 2026 GMT
Not After : Mar 27 05:01:02 2026 GMT
Subject: CN=5c7dd5f3aedacc7fc4a5dceefaedacf291456e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:92:38:ef:2b:ae:16:94:03:b6:c1:37:5f:
b2:e3:a9:4f:56:f4:6e:73:41:9a:59:e4:16:3b:7c:
3e:96:d8:94:a7:a1:97:56:c8:41:3b:1e:61:4e:53:
09:84:3d:8a:64:04:04:f7:fc:3f:20:3a:c7:bd:69:
67:93:61:60:d3:ca:7b:04:25:7e:8d:7f:7a:fb:fb:
94:35:e8:ec:33:d8:a1:6e:9d:29:63:78:15:56:90:
65:c4:b5:f4:8b:a6:11:73:4d:f0:c8:0c:6e:a0:60:
f5:1b:1a:69:d0:bf:8c:23:cf:e9:97:f0:de:8c:eb:
01:ea:cb:a8:c0:d6:0c:40:7c:44:08:a8:16:96:ae:
ee:a7:f2:22:80:a8:62:9e:34:c5:91:58:9d:a8:a3:
e7:82:c0:ee:c9:aa:dc:fe:bf:85:42:55:0d:70:17:
60:07:29:cb:76:2a:fb:52:44:f0:a3:17:4d:2a:64:
4c:30:75:44:46:d6:ed:dd:67:14:ae:61:4b:93:6e:
37:a9:9d:22:4a:94:fd:4b:3c:61:38:15:6f:eb:a6:
9b:e3:71:0c:b7:bd:0b:f4:78:8c:5c:94:cb:0f:a1:
11:ae:26:95:2d:29:b2:bc:ae:b4:af:63:48:52:95:
3a:7d:cc:47:18:d1:88:fc:fc:9f:20:df:f0:86:f1:
92:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7D:D5:F3:AE:DA:CC:7F:C4:A5:DC:EE:FA:ED:AC:F2:91:45:6E:38
X509v3 Authority Key Identifier:
keyid:ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8e:38:e4:16:b6:95:33:19:d3:8b:f7:88:b5:76:ee:fe:f6:
8f:8f:45:bf:a9:44:6b:dc:b4:39:8c:cb:5a:fe:bd:05:4b:86:
4a:f6:75:25:bf:c1:61:de:00:b4:65:ea:44:a5:f5:b6:62:85:
d2:b6:77:a2:47:8e:c7:52:22:e2:e5:5a:65:90:a9:b5:d2:6c:
28:45:bc:62:71:06:c3:92:38:91:05:f6:0d:50:57:7a:01:03:
4f:b2:55:3d:3d:e7:ff:64:bc:fd:ec:40:1b:c1:94:ee:06:84:
6e:7a:7b:5a:2b:5e:00:dc:51:e9:aa:d9:d7:9e:09:a8:d2:87:
a9:0d:77:87:4f:d0:02:c7:41:71:44:94:0d:ec:4a:8d:8c:c8:
49:bd:9f:2b:ec:13:70:ff:79:f4:94:14:8c:f0:24:37:61:03:
3f:87:c7:92:f2:f8:9d:57:ab:e3:a0:7e:ba:53:92:4a:e5:b7:
3f:60:9c:f9:3f:2a:fd:58:ec:87:6b:d9:13:f0:89:d0:57:6d:
c1:c0:bf:92:52:9f:7f:13:59:05:53:0b:c9:be:9f:8c:3f:6c:
7b:0b:86:d2:e2:fe:21:08:ed:85:fc:15:eb:78:ce:cb:ad:01:
2e:f6:b5:d8:15:8c:4c:72:0c:3d:bf:66:4d:96:fc:de:cc:f1:
b9:03:c9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:26 2026 by rpki-client