Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
File: 7kmddBz3poj_wsl2gT23xR68R0k.mft (raw, json)
Hash identifier: 6dT0ag5gImJKsjkXrDODiY8B1DGFe91bimTIbDQjPew=
Subject key identifier: A8:38:7D:2C:52:98:BF:68:37:0E:8C:2D:0B:33:DE:8A:FB:96:59:6B
Authority key identifier: EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49
Certificate issuer: /CN=ee499d741cf7a688ffc2c976813db7c51ebc4749
Certificate serial: 019D2A726A1DCD033FBD91E5D5CC009E789D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
Manifest number: 034F
Signing time: Thu 26 Mar 2026 14:00:34 +0000
Manifest this update: Thu 26 Mar 2026 14:00:34 +0000
Manifest next update: Fri 27 Mar 2026 14:00:34 +0000
Files and hashes: 1: 7kmddBz3poj_wsl2gT23xR68R0k.crl (hash: WE987MqXBT9uvZPzS1ek8ATAS4q8nze3yUrI8nwDLK4=)
2: wKnEgD4LUjzl3Xg9ixLbselaklE.roa (hash: bAjcEWUJ0poUNC9tIVnKtSJHHlCTwxmRLAJtIzNX1ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:6a:1d:cd:03:3f:bd:91:e5:d5:cc:00:9e:78:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee499d741cf7a688ffc2c976813db7c51ebc4749
Validity
Not Before: Mar 26 14:00:34 2026 GMT
Not After : Mar 27 14:00:34 2026 GMT
Subject: CN=a8387d2c5298bf68370e8c2d0b33de8afb96596b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:06:34:9d:55:ce:02:84:9f:33:da:9c:f3:
d0:a9:8b:6d:99:f9:9f:67:73:73:e8:1f:e7:ac:00:
43:67:a7:d1:eb:44:3b:29:0c:5d:d6:6d:07:10:a9:
28:5e:d6:55:2c:e2:ac:8e:9e:cf:e5:bd:33:12:f3:
fd:01:09:3a:16:f7:9f:de:84:37:2a:48:06:b1:a6:
ff:77:5b:24:bf:71:e2:36:37:eb:66:c9:b8:ef:06:
fc:df:d7:38:75:ed:ac:80:4a:35:1a:d4:f6:ba:03:
77:85:13:99:6e:31:18:b7:01:3b:c8:5f:dd:ed:e0:
89:35:e2:9f:d6:f1:68:d4:6c:24:cf:1e:02:02:97:
28:3d:71:9f:a6:16:c8:02:ba:4a:e7:8b:5b:66:f5:
ba:c0:10:4e:70:ac:ea:08:6b:68:03:f1:a2:34:22:
43:84:7a:ea:44:2d:b9:1f:e6:2a:88:5a:f5:a9:79:
71:ee:aa:50:ef:70:ec:91:fb:6e:d7:4d:e4:7f:f2:
ad:1e:73:ec:36:0e:dc:ab:dd:10:48:7c:66:c4:ea:
5a:1c:72:62:63:5c:2c:44:7e:81:91:33:e0:59:fb:
84:a9:c4:0a:8c:db:a4:bf:44:4b:bf:cd:d7:2c:f3:
63:86:fd:27:02:68:c2:99:1a:63:b4:d3:55:2d:48:
fa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:38:7D:2C:52:98:BF:68:37:0E:8C:2D:0B:33:DE:8A:FB:96:59:6B
X509v3 Authority Key Identifier:
keyid:EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:11:df:1a:f3:88:af:72:6c:e9:c2:d2:57:e0:49:3a:90:58:
c0:33:d9:ae:82:f2:06:90:1b:0b:2f:52:39:25:82:f2:5c:48:
50:56:43:1c:55:a6:bf:39:f7:8c:67:ab:d5:0f:c9:b3:2d:11:
51:6d:9e:d0:fa:64:22:d7:d9:51:8d:cb:1e:ea:ea:d4:76:f7:
76:65:9a:de:42:fd:a6:d5:79:6d:5c:46:b2:c9:17:f8:82:d7:
5c:f2:7c:b3:a3:65:36:d1:49:63:f7:bd:30:90:be:d6:9d:5b:
71:ff:5f:6a:b7:a8:a6:2a:09:c5:a2:78:7f:58:80:97:b2:52:
4d:a2:44:3d:08:8d:8b:93:3c:1f:1a:86:b4:75:4e:f2:a7:ed:
3a:3a:58:da:d8:78:af:a5:5b:e7:85:c6:40:0d:47:b4:bd:a9:
5e:c6:59:ba:06:86:4e:60:47:53:85:04:28:20:d0:82:dc:8a:
68:26:3a:2f:c4:46:1f:9b:97:55:0e:81:83:50:65:e5:41:94:
3d:b9:39:20:58:bb:91:5a:ed:6d:ca:57:43:6c:4d:d0:29:37:
ce:db:ce:66:cb:9a:e1:98:fe:a4:98:32:86:3d:eb:79:76:2e:
6e:04:c8:7d:f5:7f:11:2c:fe:d8:cc:b1:7b:96:d7:6f:4c:17:
f4:53:e1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:15:11 2026 by rpki-client