Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: sy5+V7OfSW+EVJn0ENm04NSzzhJp3RNLDDOxDHdzmYY=
Subject key identifier: D7:6E:CA:C1:F6:A3:A0:7C:F6:54:03:AA:2E:3E:3A:41:08:14:8B:32
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 019D28BBFC6E2FE4AC209DB8A1F46E87E6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: 0464
Signing time: Thu 26 Mar 2026 06:01:41 +0000
Manifest this update: Thu 26 Mar 2026 06:01:41 +0000
Manifest next update: Fri 27 Mar 2026 06:01:41 +0000
Files and hashes: 1: 200hGiiiZsPIFyhRS3fgiw7TDL0.roa (hash: RXdmnfglVdphnX74nph9B1kezoQQBk9ZlsO2RYNXwvo=)
2: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: YRMRuOw0xhvikFIugeiWyYDHqXec1/i9A2ZBLvTtwpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:fc:6e:2f:e4:ac:20:9d:b8:a1:f4:6e:87:e6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: Mar 26 06:01:41 2026 GMT
Not After : Mar 27 06:01:41 2026 GMT
Subject: CN=d76ecac1f6a3a07cf65403aa2e3e3a4108148b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:92:d7:2e:17:fd:86:1e:d5:04:c8:bd:59:
ce:f0:3f:d4:a5:c1:d6:c5:2f:51:04:57:ab:6d:de:
54:ff:7f:26:e4:95:d3:b9:86:b3:09:9c:f3:fb:43:
3a:69:22:07:64:06:f9:13:72:b1:74:20:53:6b:e6:
ad:f5:05:86:7b:96:d6:a3:e1:1d:29:ac:01:81:e6:
60:71:ca:3f:b4:66:8b:bb:a0:f1:a0:cd:4c:04:27:
cb:04:57:7a:03:30:0c:00:65:71:77:e9:bd:1f:fe:
25:cf:58:40:3a:18:80:07:f4:cf:d4:eb:2d:ee:91:
17:45:fd:29:28:f1:1a:00:51:b0:6d:5e:e5:85:01:
22:d3:c0:c1:24:1a:b8:63:2a:b0:7c:5a:16:ad:96:
d5:00:ab:8b:36:1c:26:3e:aa:7a:39:82:c2:13:43:
a9:a5:5f:fe:f4:f0:e6:e9:f4:ed:6c:dc:7d:30:c2:
82:f9:bd:db:94:67:aa:e7:8f:e0:b4:74:e7:03:51:
25:ae:c8:fb:6c:18:50:46:0c:d6:a1:6f:38:c7:f3:
6c:c1:b7:4e:64:3a:cc:79:a4:91:9f:44:35:aa:4c:
08:5d:9a:48:41:b6:48:bd:c7:41:7e:ca:97:54:97:
ef:13:ce:66:e1:df:0b:ad:ed:b9:46:ea:f4:cd:e2:
2c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6E:CA:C1:F6:A3:A0:7C:F6:54:03:AA:2E:3E:3A:41:08:14:8B:32
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bb:26:67:3e:c6:a3:c3:fb:30:4f:65:ab:85:c0:64:e0:d7:
1f:4f:e2:92:1c:35:57:a4:9f:e4:5a:96:24:43:15:8c:71:4b:
02:58:f5:1a:51:9b:6b:65:03:62:19:45:88:e0:db:2f:42:1b:
50:d9:ac:fd:a8:79:99:7d:d0:8a:20:f5:13:0c:dd:01:f3:10:
63:3d:e2:a4:21:7d:c1:10:c9:c9:ec:ab:08:c8:cc:8f:3b:1a:
c3:7d:1a:71:76:1a:00:a7:b0:02:36:59:a5:3c:7d:01:dd:b7:
57:8e:53:7d:f0:ee:66:11:e2:91:50:1b:d0:5f:93:28:48:51:
1e:f2:02:64:28:26:ce:fa:d0:97:55:d9:16:90:3f:ba:6b:9b:
da:15:43:a2:f8:b4:0f:14:00:22:81:87:92:36:9d:b5:ba:7d:
03:8b:81:bb:b6:fb:ed:c8:0a:62:ba:fe:6c:57:2d:7d:a6:3d:
52:37:3a:8b:8b:8e:85:3f:3a:60:dc:79:24:37:2e:b5:b7:b5:
76:fc:45:09:dc:5f:5c:4a:52:7d:ec:9f:03:36:91:79:dc:29:
0f:95:a5:2b:42:67:95:7f:6d:d6:44:18:c2:99:42:56:89:2a:
d5:ad:48:2e:9f:c2:02:bc:1e:99:bd:71:82:7d:0c:cd:84:64:
e6:99:7a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:58 2026 by rpki-client