Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File: d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier: LKFEKVbEdQ5iRn9PjJ87xH+HRcSmLbJJVCptXUHsgIc=
Subject key identifier: 36:56:83:93:1A:BD:6B:61:30:C3:DA:E9:24:CF:49:C6:FE:2E:12:AD
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer: /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial: 019D284E233AD406A47F986E582B60FD2368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number: 05FD
Signing time: Thu 26 Mar 2026 04:01:42 +0000
Manifest this update: Thu 26 Mar 2026 04:01:42 +0000
Manifest next update: Fri 27 Mar 2026 04:01:42 +0000
Files and hashes: 1: 1uDiO66z4_GJhppKD5iOYZne4xo.roa (hash: njjChOiFqIrX1FbvslTiBWjd0QGU3XMKBcIu3VrqVf0=)
2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: FLB0PF+aEtqi2KIRRXXV9zrXBFTmyy8HjyOC5uj9fAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:23:3a:d4:06:a4:7f:98:6e:58:2b:60:fd:23:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Validity
Not Before: Mar 26 04:01:42 2026 GMT
Not After : Mar 27 04:01:42 2026 GMT
Subject: CN=365683931abd6b6130c3dae924cf49c6fe2e12ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:bd:f7:b6:64:31:84:79:ea:70:7d:41:df:
07:18:51:69:c4:ab:d2:a5:c2:cb:90:71:0a:9a:86:
d1:34:c8:2c:00:ff:6b:16:61:6e:29:77:cb:94:6f:
e9:44:90:de:a1:ba:a6:2c:88:d7:da:5b:d7:6d:3e:
22:db:68:2a:11:13:cc:c3:08:72:9b:cd:af:7d:88:
64:1c:3e:9a:66:0a:f6:d3:7a:ea:1a:da:5a:82:c7:
fb:e7:ea:b3:99:31:20:4f:b2:2d:98:75:df:6d:c9:
77:74:87:c4:85:74:3e:a6:f3:e7:c7:eb:28:36:69:
dd:0c:7c:c5:bd:fa:cc:15:68:74:14:96:79:7b:b5:
d5:2e:df:87:0c:8a:7a:a8:f1:2a:8a:e7:5d:3b:4d:
34:84:6f:34:45:6b:b2:b4:16:4f:19:0a:ec:eb:ac:
17:a7:7f:cc:69:75:31:0e:7e:ba:9e:f4:07:00:e7:
1b:b2:95:7b:88:fa:7c:24:16:43:18:19:1b:8c:cd:
b3:b7:8f:02:18:21:d9:83:a6:d9:8d:27:32:89:9c:
94:e2:69:7c:4b:90:6f:f4:e8:15:18:b9:cd:a6:10:
26:36:d8:bd:fc:3d:95:82:43:3e:da:49:eb:2f:c2:
77:01:1d:a7:85:8b:32:04:79:dd:d4:06:01:75:03:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:56:83:93:1A:BD:6B:61:30:C3:DA:E9:24:CF:49:C6:FE:2E:12:AD
X509v3 Authority Key Identifier:
keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:20:73:29:ae:d0:b1:f1:39:2e:41:9d:0c:3d:f5:9f:ce:ca:
6c:77:28:f0:d3:f3:51:c0:c9:05:1c:85:1f:3e:e1:d2:56:9a:
63:b0:4b:88:a6:09:3b:a6:9a:ed:24:56:79:3c:d4:ad:a9:b4:
59:64:9f:42:2a:89:e9:9a:4f:aa:09:6b:f6:05:ea:c1:20:c3:
81:d9:cc:16:06:2c:ed:f2:4f:44:3e:6c:24:20:f1:f2:6b:14:
2c:64:f9:6f:e4:3e:bf:4e:17:31:76:c8:43:eb:2c:7e:1d:29:
0f:74:af:a9:da:7f:a4:5f:27:2f:a2:fd:74:de:3d:3d:e5:06:
bd:86:03:a9:5f:f7:ac:66:64:06:14:71:da:f4:bf:d4:67:f9:
4c:38:f8:5b:5e:d8:12:6e:a7:86:08:46:27:d9:53:70:40:41:
90:21:e7:c0:1c:2f:41:09:fc:28:f4:fd:25:ea:4f:31:72:35:
c9:ee:3b:1d:65:b5:07:a2:f9:86:18:59:a5:aa:a7:cc:ec:41:
fc:ac:2b:d1:df:a8:d3:ff:a5:ce:1c:0a:74:9b:64:f6:4e:7f:
90:0e:54:35:9b:83:00:ed:8d:64:41:cb:e7:42:29:4e:ef:c8:
5e:b9:25:5b:9d:ec:b7:ec:29:7c:58:b3:6d:2a:bd:b1:5b:fc:
a0:65:45:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:22 2026 by rpki-client