Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File: 7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier: rZeC4YR+1CE3ZXRVHDy/n6/eMhUgUDW3lueX340oT0g=
Subject key identifier: 17:0F:C3:80:2D:C3:DE:16:FD:97:A6:E8:8A:A9:E4:BA:0D:A1:36:5A
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer: /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial: 019D26964B1B5A05882E17DCD84EE2F2A47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number: 181A
Signing time: Wed 25 Mar 2026 20:01:16 +0000
Manifest this update: Wed 25 Mar 2026 20:01:16 +0000
Manifest next update: Thu 26 Mar 2026 20:01:16 +0000
Files and hashes: 1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: pnnc7zl2Cc9jtVBFzhm3y3+Tg0znY6O1jjGELI3RKRk=)
2: guibBNdYNmYjs3BhZ4d37Us7C4k.roa (hash: ERVCfgK3qCQAc++yH8oVuuxPI5EAT0LJxo2iXgCuAbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:4b:1b:5a:05:88:2e:17:dc:d8:4e:e2:f2:a4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Validity
Not Before: Mar 25 20:01:16 2026 GMT
Not After : Mar 26 20:01:16 2026 GMT
Subject: CN=170fc3802dc3de16fd97a6e88aa9e4ba0da1365a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:d3:a9:2c:2a:8d:61:89:e2:b8:6a:5a:37:
8e:02:46:be:73:c6:69:dc:0d:60:05:15:3e:75:89:
c4:79:22:37:44:db:da:d3:57:93:59:39:eb:03:1b:
98:58:75:e1:98:1a:b6:7b:24:55:c1:a7:44:8b:f4:
90:19:d1:b4:dd:db:d8:c0:80:0a:3b:8c:82:5f:d6:
97:7e:55:4e:6c:de:3a:de:6f:8c:29:ae:6f:e6:8c:
8c:99:30:2b:86:27:4c:bc:25:99:b6:6f:a4:58:67:
90:c3:04:34:1e:38:a0:3c:31:3e:4a:a3:02:c2:5a:
e3:13:2c:d0:92:1f:f8:0b:b1:00:8d:ac:16:a4:4b:
25:b6:cf:bb:70:f1:ef:b9:e8:74:25:75:36:e4:3b:
da:51:37:8e:b8:aa:0c:4d:44:24:62:62:33:73:2c:
51:42:83:32:72:0f:32:a1:b0:22:2a:14:04:5b:48:
9b:46:2f:93:9a:70:49:f5:13:ec:a0:1b:7a:55:cc:
05:3e:8c:da:01:af:3c:0e:82:06:74:e5:5b:a8:a1:
be:9e:ec:08:7e:01:28:d2:0b:8b:d0:f1:50:e2:35:
54:7a:fe:07:f0:69:6a:06:1e:7e:da:4b:d3:ab:65:
7a:62:d9:d4:8d:2d:e1:f1:66:2a:47:56:aa:ef:09:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0F:C3:80:2D:C3:DE:16:FD:97:A6:E8:8A:A9:E4:BA:0D:A1:36:5A
X509v3 Authority Key Identifier:
keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3f:f5:08:68:82:da:c7:bc:09:9f:d9:b6:f6:a8:c4:4a:7a:
c6:ed:94:97:d1:77:80:4e:84:e7:e5:83:78:6f:1a:05:a3:c2:
82:f8:06:5d:0f:b1:97:90:dd:a5:a4:1e:cd:40:19:e3:26:6b:
d2:ce:28:ee:2b:da:b5:6d:11:8d:58:08:92:21:f9:da:fa:1f:
21:e5:97:81:08:5c:3e:a8:ef:83:a3:4c:a2:bd:4d:c8:24:8d:
7b:81:f3:4d:5e:02:57:a4:55:b4:4e:71:1c:dd:cf:eb:d8:fe:
bc:66:c4:96:79:8e:9a:fb:77:d3:51:d3:b1:f8:76:3e:66:d5:
f3:fd:df:df:81:a3:ce:13:2d:a5:5f:b1:b8:6b:e4:e4:19:88:
08:19:2a:21:6c:15:9d:93:27:00:27:e5:79:05:9e:cc:74:08:
9b:01:2d:47:bc:7a:44:0d:e7:4d:ce:2c:b8:cb:bb:09:66:e0:
61:ce:ec:07:07:32:19:a1:29:ae:f3:26:5c:c9:72:82:6c:a3:
64:80:c6:5f:75:aa:54:56:6b:b1:4c:e5:a8:e8:09:ce:82:40:
9a:5d:c2:47:bd:13:a3:bd:09:3e:4b:d0:05:12:c3:63:4c:ee:
fd:bd:a4:d6:f9:47:0e:89:c2:c1:ef:0a:dd:8e:24:c1:e5:19:
78:64:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:20:07 2026 by rpki-client