Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
File: 7WoxJ-11rNJGANs1qPIw4vMkug4.mft (raw, json)
Hash identifier: l/kDj06LHqZxHbFeBfPLKFyt0TxcUWCfw9sozuR5K1s=
Subject key identifier: B8:22:E5:59:47:D2:B5:2F:29:8B:1E:DE:14:DD:B3:B2:93:BC:C1:19
Authority key identifier: ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E
Certificate issuer: /CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
Certificate serial: 019D247121F9FF06D63477D3E423EA86D087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
Manifest number: 8D
Signing time: Wed 25 Mar 2026 10:01:27 +0000
Manifest this update: Wed 25 Mar 2026 10:01:27 +0000
Manifest next update: Thu 26 Mar 2026 10:01:27 +0000
Files and hashes: 1: 7WoxJ-11rNJGANs1qPIw4vMkug4.crl (hash: FzmgVMFUxmLGx3GjAOniZCmC3zQQlysH0ZeV4C8PCLk=)
2: RQqhLPcGGSGX-Yx2wib2KDftxXQ.asa (hash: aHQ4ca8e5T8BDTfMZOey9jkGfKWYE/aGZxfTiuf/1Ro=)
3: pCAXnejbOOJp7m5yFPm8VPwf0Uw.roa (hash: N796Zom1skp7/3+RCtSYa/r7JVVy/XIYs8YxWI+wUD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:71:21:f9:ff:06:d6:34:77:d3:e4:23:ea:86:d0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
Validity
Not Before: Mar 25 10:01:27 2026 GMT
Not After : Mar 26 10:01:27 2026 GMT
Subject: CN=b822e55947d2b52f298b1ede14ddb3b293bcc119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:8f:b5:6f:b7:91:0f:52:34:59:99:49:35:
d7:5f:1b:34:a3:9b:9e:ff:8e:ce:7c:23:9e:34:83:
05:1d:20:12:72:49:de:64:80:b6:aa:69:d4:07:73:
30:d0:3f:3c:63:bb:b2:f7:4b:3e:d4:5f:2c:fe:ec:
2c:01:0f:ae:25:79:8a:08:00:94:7c:5d:a5:ed:fa:
1b:11:cc:cf:c7:1b:db:3c:8b:ba:c0:cf:5f:c2:3a:
d2:f8:66:05:58:d4:51:7e:eb:c3:06:8a:79:18:e1:
6e:34:31:46:0d:8a:e5:f3:ad:1b:73:c0:c3:a6:41:
cc:26:54:8c:4f:1d:52:38:1d:2b:4c:78:06:ce:5b:
96:aa:66:b7:db:60:04:3e:86:e4:34:2d:f5:18:b8:
f7:c2:25:54:eb:60:58:9a:dd:96:d7:12:bb:7c:0f:
55:41:8e:e7:bb:92:85:52:71:75:66:7f:1e:59:29:
7d:4e:bb:26:4f:8c:8d:7a:b0:b7:42:fc:09:b3:f0:
69:11:6a:dc:2c:35:5e:9a:29:e7:73:a0:fa:b9:e5:
42:2d:2c:71:20:6f:6a:7b:96:31:1d:3f:f4:16:21:
c5:81:8e:9d:86:0c:84:23:c6:bc:69:9d:b1:8c:90:
7d:3a:25:aa:fe:f0:7c:7e:69:43:46:d1:24:33:e1:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:22:E5:59:47:D2:B5:2F:29:8B:1E:DE:14:DD:B3:B2:93:BC:C1:19
X509v3 Authority Key Identifier:
keyid:ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:16:7b:39:e4:9c:ae:bb:1a:ed:cc:dd:76:7e:bf:8d:db:05:
11:dd:fa:b2:cf:96:e2:32:eb:a1:1b:f5:25:4e:4b:dd:a6:ee:
29:28:63:ab:8c:c1:86:6e:7c:fc:5b:45:8d:11:07:d6:84:4d:
27:80:a8:8d:5b:da:69:80:27:7b:57:91:3b:5c:e7:86:67:9b:
b0:4c:5d:79:7c:d6:f5:81:4d:1b:f0:fe:96:b8:5b:fb:8d:b8:
bf:83:59:f2:ae:be:6a:c9:8f:61:a9:8f:eb:73:f7:8c:52:1a:
d2:51:a5:82:c9:06:df:e1:c8:94:9a:af:5b:ee:23:46:88:1b:
3c:86:85:5f:b5:da:18:55:04:aa:92:fd:3e:2e:f1:1f:fd:23:
71:18:fb:b2:51:da:12:fe:a1:03:ef:cf:11:74:35:ea:b3:cb:
48:e8:4d:e3:54:95:e6:7d:68:68:cc:08:fa:8e:cf:1c:c4:53:
e8:89:77:d8:71:1c:e4:9b:a2:9b:e7:ac:55:ba:f4:46:4d:94:
18:f8:0a:33:7e:4f:15:63:42:01:d9:86:28:f4:73:ac:d0:23:
39:3b:56:06:53:88:b0:db:d1:1e:75:15:70:e3:fc:c3:cd:2f:
1b:b1:92:f5:94:c5:28:c4:af:80:ab:05:34:e1:46:d8:d2:25:
f4:d4:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:14 2026 by rpki-client