Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
File: n7edKYEQtvsxkwHrwivxgOcFR5Y.mft (raw, json)
Hash identifier: KQUHDxO9P3uCCRbh3vKa0kSVyOcfJ9ak5uWEdjOvxRg=
Subject key identifier: A1:92:90:F1:22:C7:3A:D3:7B:B6:23:FC:2C:73:AA:6A:FE:E5:98:AD
Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
Certificate issuer: /CN=9fb79d298110b6fb319301ebc22bf180e7054796
Certificate serial: 019D27A92F173FCFD987E777C2C652F8EC1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:32 +0000
Manifest this update: Thu 26 Mar 2026 01:01:32 +0000
Manifest next update: Fri 27 Mar 2026 01:01:32 +0000
Files and hashes: 1: L6c5Lr0p1aRMGxRILmBZgQtfR4U.roa (hash: zHP0uUQQ1j3lH9UmRrJUovyfnfMO31UL4btwp3/nVG0=)
2: n7edKYEQtvsxkwHrwivxgOcFR5Y.crl (hash: tegxtcaqdm6mM9aYR+kyqoblrW2TqYyrpUT4m5oxrd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2f:17:3f:cf:d9:87:e7:77:c2:c6:52:f8:ec:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796
Validity
Not Before: Mar 26 01:01:32 2026 GMT
Not After : Mar 27 01:01:32 2026 GMT
Subject: CN=a19290f122c73ad37bb623fc2c73aa6afee598ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:fb:89:c9:f7:c5:fb:d4:05:66:0e:00:46:
94:1f:a4:6f:19:31:04:57:46:40:3e:de:cb:b0:f2:
11:fe:1d:e6:e4:d6:4f:47:c3:83:36:2e:a2:b4:e5:
2d:14:b0:04:fa:bc:66:9d:72:8c:57:cf:59:f0:51:
1b:bd:5c:11:68:a0:c7:85:83:ef:03:9f:31:42:e8:
35:68:0e:9c:c7:fb:fe:d1:fb:2d:42:5b:cc:80:12:
88:51:e2:4f:e4:ba:d5:d0:3c:3b:ac:80:04:31:cd:
7d:88:31:36:50:9a:9c:c7:2b:64:b7:0f:a6:92:43:
12:32:64:c0:41:70:f3:9e:f7:42:b6:0f:45:44:24:
2a:32:7a:ec:34:6d:e1:78:57:02:7d:f7:32:41:76:
dd:3a:13:a8:d6:ed:af:58:f5:c1:b1:1d:fe:28:72:
7e:76:86:2d:01:26:df:2c:57:e4:8a:6b:d7:76:93:
5c:74:0d:87:f9:71:a5:76:64:af:7b:21:5e:64:3c:
04:9a:3b:08:19:55:5d:72:d4:fa:23:45:af:84:72:
13:5c:f7:a3:c0:f2:ec:25:ff:aa:2e:6a:0c:07:98:
7a:01:7b:4e:fe:86:53:fc:3e:1b:f6:7b:2a:cf:66:
92:c7:2f:43:6b:dc:35:f0:01:f9:ba:5a:c2:ba:54:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:92:90:F1:22:C7:3A:D3:7B:B6:23:FC:2C:73:AA:6A:FE:E5:98:AD
X509v3 Authority Key Identifier:
keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6c:ac:a7:a5:e3:ef:cc:4e:a9:0d:2e:a0:7f:65:e6:08:a5:
40:e4:b9:2f:b9:f9:ba:5c:9a:d2:57:f9:59:a8:e6:29:27:e3:
84:3b:91:7e:bc:a6:62:51:a9:7a:25:0e:98:92:24:51:b6:3b:
c3:5c:84:68:4a:9d:5d:7f:2d:2d:7c:f4:b3:88:e0:39:d8:71:
b7:eb:7e:7d:48:f4:ca:3b:bd:66:15:0b:30:c4:23:f5:2a:14:
78:2f:16:cf:c5:fd:71:23:8a:39:bb:41:7b:32:8d:20:2f:18:
90:ff:13:cd:4f:18:5a:7a:3b:82:46:11:32:bc:a0:65:28:69:
1c:cf:e7:2b:ac:88:79:ae:ad:71:f9:39:50:e7:6a:18:46:ac:
f2:89:56:be:52:b5:5f:f5:1a:1f:bb:ff:56:c5:b1:52:b8:d6:
bc:cf:36:60:ae:ad:7a:7f:fa:87:da:14:fd:3d:03:c5:77:62:
ec:0d:76:bb:9c:f1:78:1c:34:f0:a1:eb:e7:f9:cd:d4:08:84:
2c:8f:98:60:e1:ac:00:93:b4:93:f8:de:73:27:ba:ae:19:5d:
de:aa:a1:5e:4b:c6:b3:ad:ee:c1:c7:d0:21:1c:6d:90:45:cd:
39:03:47:60:bd:2c:18:80:82:bb:00:bb:b8:0b:58:05:b5:2b:
75:88:c0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:47 2026 by rpki-client