Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: 46FSd9e4nW8wDKDWybY0PFU3FrbYbG+IST0jF/vWwwo=
Subject key identifier: 14:43:22:30:79:83:08:AA:D8:7C:D6:06:14:BD:C7:51:1F:BE:FA:44
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 019D29CDDB0A28C866D1C4E8AF2BBC0D9B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:00:49 +0000
Manifest this update: Thu 26 Mar 2026 11:00:49 +0000
Manifest next update: Fri 27 Mar 2026 11:00:49 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: xao0M3TDbkGcXAcKzeGVCztD3Wq6Gk+a4oh/G3NenFs=)
2: jI0W3FXepCGwUQYooUrSqFApgnI.roa (hash: ywNZ9Hr6Ek5jRSdgINiD2gJAFEBiWAjLS61c7FwJ6mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:db:0a:28:c8:66:d1:c4:e8:af:2b:bc:0d:9b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Mar 26 11:00:49 2026 GMT
Not After : Mar 27 11:00:49 2026 GMT
Subject: CN=14432230798308aad87cd60614bdc7511fbefa44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:31:53:d3:02:ff:76:fa:50:3a:0b:83:46:
82:9a:34:34:93:ba:84:e2:6a:86:61:8a:56:7e:0f:
e6:9d:04:f0:71:b1:e4:9b:b9:e9:43:37:24:bc:3d:
5e:fc:75:51:6a:c9:76:46:24:83:c2:18:d9:c3:5f:
a5:3c:87:0b:ee:10:01:83:88:be:df:ac:5a:e1:fe:
a8:76:42:34:79:ff:0b:ef:e0:5d:e1:d2:12:70:17:
24:29:b5:6c:df:f6:23:5b:0f:01:40:a4:c6:6d:71:
9e:0d:92:93:59:e4:6e:71:4c:68:45:ff:58:2b:a7:
03:09:77:39:d6:41:24:bd:b8:7d:75:41:f4:89:81:
50:e0:6b:78:ed:b3:3d:27:4b:7d:de:eb:26:2e:c7:
83:b7:ba:c3:4d:2f:03:61:f9:17:13:bd:8e:60:a3:
a3:31:cf:0d:72:10:69:81:b7:d9:05:54:f5:53:44:
c6:5c:d8:ff:67:dd:71:33:3b:4f:d0:eb:da:bd:12:
b6:3b:d2:23:49:93:55:d2:07:74:a0:68:4c:d7:3e:
93:6a:da:12:79:6e:87:04:8f:09:7c:f9:a0:5d:49:
5b:1d:25:98:fa:20:51:cc:12:fe:5d:5c:20:8f:7a:
91:f5:b3:7d:13:19:30:6e:39:d3:f0:13:2a:46:0f:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:43:22:30:79:83:08:AA:D8:7C:D6:06:14:BD:C7:51:1F:BE:FA:44
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:eb:0d:90:45:1b:d0:8c:bb:09:6f:cb:d2:63:89:5a:a0:71:
ea:1d:e0:09:8b:a9:65:f0:aa:e9:6a:3d:75:c3:4a:9d:57:dd:
c3:67:41:7d:b2:c1:a1:8e:ed:6b:52:12:6b:3d:bc:60:72:03:
dc:37:6f:70:c2:ab:42:4f:b7:1f:bd:73:bd:2c:ac:ed:7e:31:
fa:2a:3f:3b:d7:7d:2f:3c:59:9f:f7:d1:75:6d:08:6b:e4:d2:
b8:8a:22:6d:53:e1:0c:62:cc:98:da:1d:ab:89:d0:ce:b1:fc:
01:85:73:bf:e4:46:f9:af:66:b0:a2:81:12:35:70:fd:62:2e:
68:f6:92:7a:99:f6:c2:bd:bb:a4:1a:08:40:b3:f6:8f:35:c1:
eb:5c:a0:93:ac:71:f9:cf:a0:f1:df:63:91:8f:9f:4d:f8:db:
a5:77:99:8e:ec:f2:c2:d6:29:91:25:fa:5a:81:2a:54:ba:c9:
a2:a6:e8:97:5f:b9:95:26:6c:48:a1:10:dd:af:29:91:9d:32:
2f:e8:70:c2:68:8b:43:21:5b:f3:83:1b:8a:b5:05:17:48:d6:
2c:49:d2:23:1e:01:0a:e0:ae:8b:00:34:72:9e:63:2a:a6:e3:
3f:9a:86:2c:5e:cb:d4:4d:d0:50:d6:57:a3:aa:84:7f:f4:cc:
3d:ec:3b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:51:59 2026 by rpki-client