Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft
File: x7cn_mQvVCkYabzx8pF-D1O-vSI.mft (raw, json)
Hash identifier: Vrs16rPH/IyyBjbsVrq5wk6HpaNFUCBI0yo0q6/iQKo=
Subject key identifier: 06:2D:AE:17:53:37:22:ED:CC:76:6A:A7:BB:51:C8:FD:4D:A7:7A:D5
Authority key identifier: C7:B7:27:FE:64:2F:54:29:18:69:BC:F1:F2:91:7E:0F:53:BE:BD:22
Certificate issuer: /CN=c7b727fe642f54291869bcf1f2917e0f53bebd22
Certificate serial: 019D2816F7F7E8C8C24FFE68894BB82887BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft
Manifest number: 02A0
Signing time: Thu 26 Mar 2026 03:01:26 +0000
Manifest this update: Thu 26 Mar 2026 03:01:26 +0000
Manifest next update: Fri 27 Mar 2026 03:01:26 +0000
Files and hashes: 1: Alqm6hdLImAofyOgSBLXoU01L9c.roa (hash: CbAWqtGKbTFX20r/jX9Q3U9RdXcetq1ze06n11nz/3w=)
2: x7cn_mQvVCkYabzx8pF-D1O-vSI.crl (hash: LkSrLszBvH2N74DAyVR2Bk2FRLVeA3zY6FhVOQnQ+WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f7:f7:e8:c8:c2:4f:fe:68:89:4b:b8:28:87:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b727fe642f54291869bcf1f2917e0f53bebd22
Validity
Not Before: Mar 26 03:01:26 2026 GMT
Not After : Mar 27 03:01:26 2026 GMT
Subject: CN=062dae17533722edcc766aa7bb51c8fd4da77ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:0d:9f:8c:a3:b9:d0:2f:f5:a9:c0:fa:26:
90:c9:5e:8a:98:22:61:4d:0c:b8:ec:7f:26:39:f5:
99:e7:a6:3a:93:87:42:5d:e3:c7:c1:a2:9f:59:fb:
cb:02:62:19:0d:d7:db:ba:b6:32:12:0f:40:81:c0:
39:61:2e:0f:67:8f:cd:eb:a9:6b:aa:7a:55:2e:22:
f7:52:e3:c0:dd:1d:93:33:b1:81:f1:7a:07:53:2b:
25:79:a7:2a:52:c1:06:03:01:dc:de:be:ce:30:65:
5e:ad:19:e5:c3:7a:8d:d9:31:51:79:c4:df:5a:c3:
f6:17:16:2f:da:1e:69:e5:f1:28:e2:cf:13:b8:3b:
d4:37:e2:e7:8b:3b:1e:af:b1:38:f1:a5:c2:c5:c1:
16:2b:c8:db:a7:71:d3:8d:68:f6:d5:cf:1a:93:e5:
9c:9b:b7:83:70:fd:27:4f:91:4d:c8:84:ee:84:2a:
ba:d4:a5:95:05:3e:79:0b:bf:79:ae:58:c2:39:06:
67:f5:55:9f:d2:11:ad:ea:7d:5d:80:29:1f:66:94:
0b:e3:ae:93:c1:a5:27:7e:d1:53:d1:00:7f:f9:f3:
b7:29:92:71:08:a5:f2:4b:e5:f3:a0:5e:66:27:5e:
8f:dd:52:72:50:46:44:45:70:db:18:78:83:23:f4:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2D:AE:17:53:37:22:ED:CC:76:6A:A7:BB:51:C8:FD:4D:A7:7A:D5
X509v3 Authority Key Identifier:
keyid:C7:B7:27:FE:64:2F:54:29:18:69:BC:F1:F2:91:7E:0F:53:BE:BD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1e:ad:34:a0:68:f3:55:27:79:6e:b6:06:f0:07:cc:de:ae:
2e:91:f7:c5:09:79:b4:87:b6:96:9a:56:c0:eb:6a:87:74:3c:
e5:78:d0:7b:0d:97:a7:b0:8a:01:95:08:b3:84:35:93:99:63:
9d:78:8b:5f:6d:ed:b8:aa:f8:b2:ec:5e:03:12:23:e4:d1:e5:
99:d8:68:47:19:b7:a7:86:cd:be:f8:fa:be:ba:61:c7:26:be:
10:18:ef:e8:44:8d:97:09:19:77:2a:00:0f:18:92:3f:9d:d6:
16:57:81:d0:63:b2:15:a8:8b:5e:8c:a2:c7:ac:34:98:4d:ff:
fc:04:46:58:04:fa:75:ea:91:f1:3c:7c:92:52:aa:93:81:92:
53:c8:da:c9:ea:eb:81:77:61:54:23:fb:db:e1:89:30:dd:03:
5a:f7:c1:74:85:fc:36:0a:ea:d2:c5:ef:41:f6:29:47:86:b7:
da:9f:a3:8f:3f:55:e3:28:1c:22:0b:53:20:bd:c6:6c:0d:e6:
e7:63:d0:df:a8:2e:bf:0c:32:70:57:cb:44:0b:c2:8e:c8:19:
08:17:97:72:60:fb:37:a3:d4:53:03:45:6e:98:0b:21:3c:f2:
b4:63:4d:ae:a2:83:56:02:ea:bc:97:34:3b:1b:cc:af:5e:f9:
d0:c7:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:46 2026 by rpki-client