Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
File: 7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json)
Hash identifier: EVKOIGxZi92NvRKC0U5aEXmuvNovjHF6NLvZ5rtP1Ik=
Subject key identifier: 30:8B:24:B8:69:A7:55:CF:AD:62:02:B2:23:8D:5D:79:30:37:8C:4A
Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Certificate issuer: /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Certificate serial: 019D284D641DC56EEF4AD95C1CC40F73477B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
Manifest number: 10ED
Signing time: Thu 26 Mar 2026 04:00:53 +0000
Manifest this update: Thu 26 Mar 2026 04:00:53 +0000
Manifest next update: Fri 27 Mar 2026 04:00:53 +0000
Files and hashes: 1: 6-BuOHHPnpUOqlNuA0hQWIC3UUY.roa (hash: Ab97lavd/imuV8no1ybPZidS69ZM1uRf157tLeK/rjM=)
2: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: GO+hDj10jRzRAggGtQb7LObFo00x4y7Ukpn4oOPNZSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:64:1d:c5:6e:ef:4a:d9:5c:1c:c4:0f:73:47:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Validity
Not Before: Mar 26 04:00:53 2026 GMT
Not After : Mar 27 04:00:53 2026 GMT
Subject: CN=308b24b869a755cfad6202b2238d5d7930378c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c4:0a:8f:a5:00:f8:4f:fa:ca:40:9e:96:62:
bd:42:e3:90:13:6c:a2:78:54:03:ec:4a:6c:26:db:
75:73:5b:5c:ef:46:92:37:93:4a:55:6e:23:3e:88:
b6:ea:0c:8a:b5:5b:12:28:ba:5e:61:03:e8:b1:09:
83:b9:e0:bf:b2:93:bb:8e:52:69:76:4e:4f:a0:5c:
8d:ad:36:ce:69:aa:50:4a:50:d7:7f:37:9c:ab:dc:
b1:82:dc:d2:0c:19:21:93:70:86:ff:5e:16:26:d7:
69:ce:09:be:3f:b0:b0:9b:10:5b:6f:22:e0:34:0d:
ac:98:a7:cb:ce:b5:e8:c3:c9:5a:0e:b9:06:e8:46:
55:3b:e1:cd:38:a5:fe:be:0b:48:65:6a:49:08:5b:
4f:ea:95:a4:d5:42:dd:bf:ba:bc:16:a3:e6:de:d4:
69:43:01:f8:f7:ba:25:25:ea:67:6d:26:c2:a3:d3:
4b:d1:1e:6c:8c:d1:12:5c:2e:83:0d:e4:1a:b7:cf:
3d:ee:bf:71:9d:fc:ce:a0:a2:cf:33:a9:ce:8f:a4:
cc:56:5c:d1:7e:e2:17:0f:1d:eb:2f:d5:91:d7:2d:
98:72:e9:f9:f9:eb:03:c5:b1:3d:80:88:17:1f:a9:
ba:95:2d:e3:80:22:59:08:b8:8d:07:2c:9f:ef:72:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8B:24:B8:69:A7:55:CF:AD:62:02:B2:23:8D:5D:79:30:37:8C:4A
X509v3 Authority Key Identifier:
keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:64:ae:c6:d7:50:61:31:3f:08:e0:9a:20:68:77:be:ca:48:
bc:ea:0b:42:27:d0:a0:ed:1b:af:06:f9:d7:1b:40:e8:ae:92:
ff:04:7c:b6:d1:80:90:3c:d1:3d:e7:77:11:19:5f:8a:ea:16:
82:93:7c:57:b1:58:dc:7c:7c:15:d8:9f:c6:c1:2e:c3:29:b8:
ac:ff:a1:5b:00:be:07:57:52:48:55:c2:ee:90:f7:3a:7e:30:
08:ee:8d:45:c0:38:a8:5f:44:eb:8a:4a:64:e0:a3:c2:41:78:
36:70:35:4b:5e:c2:3c:23:16:17:41:29:b3:59:66:b6:f5:28:
c5:4b:16:d9:dc:61:38:a8:fd:db:4d:54:1e:b6:2a:af:d8:b9:
d6:25:17:b6:41:4c:a7:9d:51:dc:ea:5f:a0:b6:9d:79:06:b5:
fc:f8:f0:02:74:51:24:cb:12:df:ca:a0:d7:30:64:c4:a2:61:
e9:47:24:e4:6f:4d:dc:66:b5:6c:d4:0c:ad:92:67:2a:e3:bc:
68:f2:7a:8d:e5:a9:23:9d:29:ee:32:78:ae:7a:57:c7:40:4b:
20:09:aa:5c:90:05:b8:bb:9e:00:6f:b4:d3:8e:01:9f:c5:a6:
21:b1:1e:51:6f:e3:1d:f3:41:09:84:e5:9f:75:b1:61:15:ef:
7a:eb:39:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:25:24 2026 by rpki-client