Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
File: 7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json)
Hash identifier: LFUKP22N+VxSL3D/7iRGokG0eGR5i16H0iKPQY/DEq8=
Subject key identifier: 0C:AB:D6:F9:96:59:01:07:ED:68:2A:6E:03:C2:BB:E5:B0:15:BA:21
Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
Certificate issuer: /CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Certificate serial: 019D2AE091F62731B6CBD3C9EC82E31F7F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 16:00:53 +0000
Manifest this update: Thu 26 Mar 2026 16:00:53 +0000
Manifest next update: Fri 27 Mar 2026 16:00:53 +0000
Files and hashes: 1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: 8E9zfpkTyZFz9kwkYBjyLz46NFnWjaVyJn1KoNavR8Y=)
2: pIgvzLjixs4_sf2VopagAU-SJ2k.roa (hash: 8W+ULMj0Umqs1HGvdH4mGs4tGpsjhjBCqHgwP2+9Xgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:91:f6:27:31:b6:cb:d3:c9:ec:82:e3:1f:7f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Validity
Not Before: Mar 26 16:00:53 2026 GMT
Not After : Mar 27 16:00:53 2026 GMT
Subject: CN=0cabd6f996590107ed682a6e03c2bbe5b015ba21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:1c:d1:83:8e:b5:52:39:ad:96:da:5e:cc:
69:79:fd:c9:1d:97:7f:f2:7a:34:71:b3:f2:91:bc:
d2:73:8b:e8:c8:f5:f2:cf:67:c0:ee:7d:b0:91:ce:
b2:29:9a:d6:a3:3b:b7:4f:02:3c:13:89:7a:1e:24:
26:51:17:36:55:c3:3e:3b:f7:60:f6:cf:c3:79:53:
f0:2b:aa:52:51:f1:c9:1c:15:d6:6b:ac:d7:aa:87:
a2:ae:0a:40:b6:b8:d7:06:c6:36:51:3c:bc:b8:6c:
b0:d6:42:8a:ce:84:ef:67:91:f9:4d:6d:5b:96:de:
85:91:22:6e:b5:42:9f:36:f1:7e:b1:2f:85:4b:0b:
e3:be:71:4b:99:6b:a0:25:39:e1:93:44:31:a3:e6:
7c:7e:17:77:00:35:fd:0d:91:2b:54:03:03:99:c3:
70:65:1f:de:57:d3:fe:ec:43:54:96:cd:6d:1b:a0:
21:86:0a:5b:1f:3f:5b:24:89:53:d9:2b:ac:49:76:
78:c4:4c:67:9e:1a:77:f9:27:76:4b:7f:20:4f:c7:
e8:f9:4a:97:f2:3b:b0:4b:28:8f:d2:08:3a:b0:3c:
d0:f5:2d:ea:f1:e0:8a:db:e6:a2:fc:f2:b3:eb:6a:
d0:c5:aa:7d:41:a1:90:c1:25:cd:fe:db:50:a2:65:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AB:D6:F9:96:59:01:07:ED:68:2A:6E:03:C2:BB:E5:B0:15:BA:21
X509v3 Authority Key Identifier:
keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7f:51:67:87:1c:20:48:bc:d3:b8:c4:75:3f:93:f2:79:e7:
6c:9e:3d:ad:8e:a1:93:f8:55:80:77:47:11:8d:5d:c6:68:09:
33:4f:19:67:86:90:48:9e:3b:67:ab:97:08:d1:d6:12:04:80:
64:5a:d9:e8:2d:80:fb:2f:8d:08:c7:e4:d7:9c:db:3c:85:94:
50:ae:da:40:63:53:c8:c5:eb:85:b3:dd:fd:a0:ac:c0:99:ae:
66:c0:ba:79:b8:35:80:94:22:30:6a:1c:3d:6f:9f:1a:83:1b:
1a:77:e0:fd:41:5e:60:51:82:ea:88:9a:73:68:e4:b2:1d:46:
88:c2:1d:e4:08:f3:5d:6e:60:36:9d:1f:78:4b:a7:b2:23:c8:
f7:e0:a1:18:9f:41:e9:65:1c:ac:8a:74:e1:a8:fc:34:16:8f:
a9:69:ce:c6:a6:6a:c8:fc:7e:2b:4d:04:b5:e6:56:bf:7d:3a:
4f:aa:a3:e3:29:cc:94:c5:6d:88:be:bc:64:33:9f:93:be:b6:
0d:ed:55:43:3f:6d:49:f7:ba:b1:26:bf:2f:76:49:fc:9f:fd:
e2:db:ab:f7:b8:93:13:ee:c4:16:ce:6f:e1:ca:f2:da:68:64:
9d:86:60:09:7d:07:64:44:9a:9b:05:68:32:06:9d:d3:06:59:
60:b9:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:52 2026 by rpki-client