Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: /SBnEqJTstzwkOea+GFpmqGFQIqXkCMOuaRAEh1QfO0=
Subject key identifier: F6:96:A6:69:96:1E:87:56:17:61:E8:16:E7:6B:D2:26:54:7F:00:FE
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 019D29CE3CB826959E54C5CA140DE92C2CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 11:01:14 +0000
Manifest this update: Thu 26 Mar 2026 11:01:14 +0000
Manifest next update: Fri 27 Mar 2026 11:01:14 +0000
Files and hashes: 1: 0HZFumgyvQaDDTRTrqWFDMHfuo8.roa (hash: 99s+y069IP+8cLI0Fct7Tuh7Nr9yOVSbyI/w/nS1ohM=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: DWwgWWJTENThsf7+UFwArcSOpBuC5wjtsDb89jEDEeY=)
3: JfyoN48fk_c9ic3qKJlpVrYlm4U.roa (hash: YO7Xai4MFWdK4ki2bUDwA4JpC3JpucBc+HE0rjiH0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:3c:b8:26:95:9e:54:c5:ca:14:0d:e9:2c:2c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Mar 26 11:01:14 2026 GMT
Not After : Mar 27 11:01:14 2026 GMT
Subject: CN=f696a669961e87561761e816e76bd226547f00fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:0e:a3:78:17:75:f7:2a:cf:07:62:a6:93:
d1:27:76:ca:98:b6:9a:4a:22:02:da:cf:00:31:10:
99:3f:5b:d0:8c:c6:52:36:01:76:ff:86:a4:14:9f:
7e:78:92:98:5c:54:b0:65:48:c2:34:da:9f:28:33:
c8:7e:6c:7c:4a:65:f5:df:aa:e8:46:50:2a:f1:07:
e8:29:77:0d:2b:6a:29:4f:01:d4:b3:0d:dc:65:e3:
1d:4c:0b:96:ee:6d:55:84:cf:84:8e:bf:d3:a3:ed:
12:87:a2:8d:26:fe:fd:8d:42:01:96:e9:26:38:9e:
55:b0:80:f5:0e:45:ad:f2:55:a4:94:39:3f:86:12:
85:08:da:f0:84:74:06:f9:55:75:9d:52:fb:05:c4:
06:1e:00:a6:e0:8d:30:03:ac:f2:5d:16:ba:66:f2:
e5:60:43:f9:e1:d0:8c:8c:0f:22:22:eb:b4:35:51:
1e:a0:74:7d:fe:e2:fc:7f:f0:43:47:74:ab:b0:67:
02:3a:0f:f5:1f:ee:c8:e2:17:3b:ac:23:fe:d8:b6:
0e:f1:c3:6d:18:29:d2:77:e4:37:3b:e6:71:a1:83:
cc:9b:a8:01:da:c4:cd:81:ad:c9:03:a9:e1:41:cd:
aa:b2:2a:8f:cc:56:34:c2:2b:72:57:b3:83:74:97:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:96:A6:69:96:1E:87:56:17:61:E8:16:E7:6B:D2:26:54:7F:00:FE
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:dc:c7:9c:d8:84:d7:0a:98:7f:f7:a4:64:6c:fe:2d:21:84:
f6:9a:12:38:bc:fe:c8:6a:a9:f6:06:a8:f5:4e:9c:24:13:0c:
3b:f6:81:45:d0:54:8b:6b:bf:12:22:8e:c4:fe:97:d4:7f:1b:
f4:fe:0f:b7:f7:40:77:07:d9:ca:41:34:15:87:47:1b:6e:f8:
af:62:40:09:9a:9b:b5:f5:ba:83:7e:19:11:17:da:51:f3:3e:
45:d0:39:a1:c8:e5:19:5f:eb:c0:e0:59:4c:c6:f6:5b:51:a7:
76:d2:b0:42:87:b4:e9:02:f5:c5:29:3c:31:44:c3:b7:7c:57:
ad:09:bf:29:f5:e7:04:7b:a4:f3:1c:20:17:a0:2d:f2:82:06:
8c:5f:9f:b8:c2:55:2e:74:79:20:2d:3e:7c:7f:a7:6f:53:46:
1e:eb:db:44:09:55:86:9b:52:fa:f4:5b:7f:92:c3:b8:a9:fa:
3d:09:cb:5b:c7:87:f2:bc:26:4b:b1:31:0c:09:dd:2b:c1:2e:
f8:e1:88:65:65:f8:1e:da:d6:a5:a3:e3:2d:1b:1d:24:14:af:
35:59:68:fa:15:0f:2e:92:77:71:b0:77:8d:a5:87:54:c8:b3:
91:18:3a:a9:69:1b:f5:4e:61:e8:03:75:b9:76:4e:4f:fe:9f:
a0:ea:12:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:43 2026 by rpki-client