Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
File: 7DpjPvLAglGlhgNWLlaqbvqT7CU.mft (raw, json)
Hash identifier: PQvikTeKdVC1+YUdm+a6j79hmRZxIoTlxyjoHk58Pu0=
Subject key identifier: 31:C0:38:6B:85:39:FF:AD:73:33:97:6F:FF:BD:47:1D:46:02:9E:CE
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Certificate issuer: /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial: 019D265F9B246BE09655A5F48E2EA5A19375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
Manifest number: 12E4
Signing time: Wed 25 Mar 2026 19:01:32 +0000
Manifest this update: Wed 25 Mar 2026 19:01:32 +0000
Manifest next update: Thu 26 Mar 2026 19:01:32 +0000
Files and hashes: 1: 7DpjPvLAglGlhgNWLlaqbvqT7CU.crl (hash: AKJapLcSIXJayGOEgMuFA2/d2llmMlGglcNGsZSE3X0=)
2: Swf3FFLXHYfQ6NVyQRwDIxCz49k.roa (hash: WjJASBXtMbMx6UjFd1CviKnEyJIaLn92uMYlDMFmvww=)
3: bmiicfROGlo9yf7zWdyA9ISaaIk.roa (hash: 1eggDeotMzuLMDhclZE88i2+/VDlsW1ydjGiJvLTfSk=)
4: lx-y9PtQp55g9e257pFIFA6PrMk.roa (hash: 3zWuaGtosieGRl8uoqyXPsU0RM4EJfQrxujvT6qUxD8=)
5: vOmtSoi-0VnTRfrdo0vo947Kkjo.roa (hash: YDH3N/wQDGDdiYRYpU2cCSEAou9IYJQNs0umXr6ibys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:9b:24:6b:e0:96:55:a5:f4:8e:2e:a5:a1:93:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Validity
Not Before: Mar 25 19:01:32 2026 GMT
Not After : Mar 26 19:01:32 2026 GMT
Subject: CN=31c0386b8539ffad7333976fffbd471d46029ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:8f:d8:f0:24:5f:a3:fe:58:cd:8e:ad:08:
99:0f:c2:ec:2c:fd:c6:d4:6f:28:2b:20:9d:cb:df:
0d:e4:11:49:48:c4:d5:6c:61:3b:0e:fc:32:92:77:
49:61:b7:f1:b8:ae:76:89:7f:25:fe:4c:67:74:90:
1a:1c:8b:c0:86:85:a3:40:e0:f8:06:73:6d:e5:0b:
66:d8:09:63:7a:6a:cb:05:e9:4b:e9:68:dd:f2:2e:
be:b9:1f:e0:92:63:23:38:0f:24:0b:48:00:a1:7c:
70:25:1b:c9:bb:e0:d0:1a:59:cc:81:14:c8:0a:33:
a4:39:c0:07:51:36:73:eb:53:5d:f0:fd:72:cf:ae:
31:8c:49:8b:52:5f:00:93:63:c5:5e:bd:1a:c3:c3:
ea:ba:6c:dc:68:12:32:f2:f1:0c:64:ab:cb:16:7f:
f8:18:dd:0e:32:5f:43:2a:e5:f7:73:1c:65:da:df:
4d:22:ad:9d:59:3e:31:65:3a:f6:d4:b9:a3:ce:0b:
a1:7b:0b:05:5d:d3:13:08:c2:37:e2:79:86:60:19:
82:6a:2f:6b:a6:fc:f3:4a:5b:f3:96:4d:d3:bc:96:
96:80:27:44:07:d2:87:f0:11:6e:a9:eb:d7:15:80:
46:5b:d9:ec:75:e1:de:f1:18:81:d0:3e:cb:aa:f7:
e5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C0:38:6B:85:39:FF:AD:73:33:97:6F:FF:BD:47:1D:46:02:9E:CE
X509v3 Authority Key Identifier:
keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bd:4d:f0:64:43:bf:ce:36:51:07:8c:c1:23:00:30:87:21:
74:80:4c:9d:09:7f:8d:71:a3:9e:79:7c:4e:92:9c:ee:da:83:
13:e2:63:fa:b9:ff:6f:fd:d8:9f:25:bc:fc:24:e0:63:7c:01:
29:33:5c:d5:e1:8e:25:ce:07:78:28:e0:ce:8b:69:7e:ac:ff:
91:f1:69:66:3d:eb:d6:03:9d:25:4d:8d:db:03:45:7c:3a:0f:
33:50:8c:50:a9:75:f4:9e:5a:19:0a:95:46:15:81:53:5d:10:
0d:32:6e:2f:e0:64:c6:a3:5d:a8:db:c8:82:9a:5b:82:d7:c3:
3a:8e:ee:9f:61:1d:de:92:ea:e7:c8:af:e4:9c:a4:20:3c:10:
39:33:71:1f:65:c2:63:59:d9:dd:5a:c8:e4:ee:dd:73:f9:dc:
a1:cf:29:53:13:88:7e:ac:04:bf:6b:cc:0a:df:62:d2:e8:77:
ab:61:47:bc:a0:9a:30:77:ed:29:ca:1d:a6:6f:44:8e:fe:0e:
6e:85:3f:8e:b9:78:5e:5a:cc:00:35:0b:54:96:25:d4:33:d0:
11:f0:e1:f1:bc:e5:01:c1:c4:79:6c:76:86:2b:73:6b:d4:1c:
ed:13:48:5c:c4:38:59:b2:1c:8c:7a:02:a1:00:83:1a:c2:76:
97:24:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:57 2026 by rpki-client