
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: /7rYl13PQbnYFwpp+iVA0q+593VoahZ+F2TR3q01uFk=
Subject key identifier: 7B:4D:0F:A3:24:A0:06:F8:FC:43:32:9E:B6:40:1B:14:4E:56:44:47
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 019D273B1D9E516C51ACE7E7D290B2932425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 0519
Signing time: Wed 25 Mar 2026 23:01:18 +0000
Manifest this update: Wed 25 Mar 2026 23:01:18 +0000
Manifest next update: Thu 26 Mar 2026 23:01:18 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: YL7cYnOHWFZkI+yQz5utD4mbvbPJgYbTvB+V5QL8Rrg=)
2: 9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa (hash: 0rqJmTL+IHF4zuPR+5EuCzywtP32Y0FzvoOjmasnRjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:1d:9e:51:6c:51:ac:e7:e7:d2:90:b2:93:24:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Mar 25 23:01:18 2026 GMT
Not After : Mar 26 23:01:18 2026 GMT
Subject: CN=7b4d0fa324a006f8fc43329eb6401b144e564447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:ac:d6:6a:2d:3e:50:e4:4c:92:de:e3:2a:
2a:99:18:b7:dc:7b:a8:1e:29:f1:0a:91:a2:cd:06:
1a:54:3a:2c:92:d4:56:a7:0b:cb:6d:86:9c:c5:9b:
00:8d:53:21:6f:f0:8e:f7:33:38:9e:7f:73:12:7b:
78:0a:85:29:c3:52:d3:3f:0d:0c:0a:97:f3:99:27:
91:c5:3f:f2:f9:42:be:37:8e:eb:7d:6f:98:20:b8:
bb:21:85:35:e7:9f:34:dd:d6:89:ac:26:33:a4:49:
05:14:94:d3:7e:be:47:14:30:2e:9e:e5:6c:23:e2:
dc:31:3f:11:aa:78:6d:65:6a:2a:a9:d0:79:36:c8:
25:15:db:da:5a:02:6a:67:2c:1e:5e:14:7d:77:a2:
cb:a8:46:e0:a9:07:b5:20:36:2d:76:85:ac:79:ec:
2f:06:d0:f5:cb:d7:a6:44:b0:d8:67:3c:a9:33:49:
d8:ad:4e:81:38:a2:f2:5e:be:3a:dc:70:7d:14:47:
36:11:9d:cc:34:86:94:b8:e6:80:d4:0d:1c:2a:46:
18:7f:cd:26:24:72:1b:5e:42:c0:9c:9f:57:a4:89:
3a:f3:3b:ab:34:aa:47:ef:e5:bc:43:2c:8d:4c:47:
65:89:95:96:57:10:a8:4c:f1:d7:fd:ce:b3:ba:c0:
2c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4D:0F:A3:24:A0:06:F8:FC:43:32:9E:B6:40:1B:14:4E:56:44:47
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b4:b8:e9:ad:65:ef:80:74:fe:71:4e:af:c1:0f:79:52:6e:
8e:7f:2e:fa:e7:33:b9:56:ca:5c:26:57:a9:f4:5b:df:b4:5d:
47:25:47:c5:70:9b:75:5f:50:10:1c:aa:5f:5a:61:63:35:16:
a4:13:cc:18:a6:c2:20:d0:a9:7f:69:e1:c7:c1:42:0c:de:cb:
2e:11:f5:4d:29:cd:2c:83:77:88:d3:27:8e:18:98:ac:10:1b:
8e:df:51:ef:5e:20:c6:b7:0c:20:a2:97:25:a3:e9:17:2d:1a:
6f:47:62:bd:66:8e:62:a2:61:a3:a8:da:f9:ce:27:c8:60:fb:
92:c5:82:f2:6a:41:7a:88:a0:0b:1d:2e:87:23:2c:7e:9d:6e:
ed:eb:b7:4b:14:20:da:d7:8e:ff:ef:07:84:90:21:6f:92:4d:
67:53:49:a8:64:a2:5d:f2:2e:5c:15:29:c6:73:95:43:bc:ee:
89:b3:a2:df:03:e2:de:83:cf:bd:6e:c2:12:14:72:03:92:56:
a8:ea:b3:18:fe:bf:8a:96:7c:7a:7d:9f:91:2b:a6:18:b8:01:
94:3a:ac:13:c5:a7:75:7d:4c:a6:a5:2e:90:fe:89:8c:1a:71:
32:46:40:f9:53:d4:11:5a:4d:f2:64:48:5d:cd:b7:65:59:8e:
ed:18:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:38 2026 by rpki-client