Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File: 7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier: s7AuvehNJPk3ou58bO8AJgZFAdYW6gvWx/LkMmWIZ7U=
Subject key identifier: 49:11:19:F2:2E:30:42:0B:DB:B7:A5:EC:7C:0D:1F:71:9B:11:F2:70
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial: 019D2884B11EF7505174A51D8000D667056B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 05:01:17 +0000
Manifest this update: Thu 26 Mar 2026 05:01:17 +0000
Manifest next update: Fri 27 Mar 2026 05:01:17 +0000
Files and hashes: 1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: HsXW0mQD4nw75jS79YNFjsBdzW3pWwzAovdnHoJWALI=)
2: dZLilwWHDcTBgw2vlgqQEo8wXmI.roa (hash: vNrKzB7jLGfmCB0/mX4ygPzITD3M9syDqPUvmlc8/PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b1:1e:f7:50:51:74:a5:1d:80:00:d6:67:05:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Validity
Not Before: Mar 26 05:01:17 2026 GMT
Not After : Mar 27 05:01:17 2026 GMT
Subject: CN=491119f22e30420bdbb7a5ec7c0d1f719b11f270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:86:46:b9:0b:db:2c:8d:ee:43:bf:5f:cd:
b6:a5:6e:b7:6a:6d:f4:3f:53:b7:fa:3b:ef:c3:30:
7a:2b:ff:78:54:98:4e:26:49:96:ae:52:1b:d1:21:
c2:4b:e7:d0:4b:ef:c0:a8:08:ba:28:76:eb:f6:d9:
6c:21:04:7c:95:2b:a8:87:e8:06:b4:ef:6f:5c:17:
2e:9a:cc:fb:7a:9a:31:b6:cc:e7:a7:57:e6:50:8a:
13:22:4f:cb:b4:a4:1e:d2:bf:d2:76:70:66:7d:13:
f4:c3:f5:38:cd:7c:d6:b8:d6:4e:2f:59:3f:c7:47:
dc:29:a0:45:0a:2c:77:f4:57:d7:bc:cc:b9:77:27:
96:3a:c6:ce:18:09:9c:c4:41:67:b3:8f:f0:24:f4:
5b:82:7e:b8:0a:f9:04:ce:2a:9d:f0:45:9e:57:9e:
31:7b:de:1c:4b:b7:fc:04:e8:dc:a0:b2:af:17:b0:
cc:81:94:42:4c:76:d1:13:ce:bf:cb:a0:fd:18:00:
eb:47:a9:b6:40:b7:32:8e:44:6d:05:5b:98:4c:07:
fc:dd:f3:e7:7c:25:55:58:ee:da:43:ad:c7:95:9d:
55:c3:ee:cd:56:4c:f8:b4:3f:a3:a9:d4:0f:d4:ba:
96:31:b9:c5:8f:dd:23:2b:d8:55:c3:9f:ba:40:7a:
3e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:11:19:F2:2E:30:42:0B:DB:B7:A5:EC:7C:0D:1F:71:9B:11:F2:70
X509v3 Authority Key Identifier:
keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:67:76:e7:7a:8d:8e:14:7d:9a:3c:33:71:68:f2:91:c1:e0:
3d:45:85:ed:be:5c:2f:bb:6f:e6:52:45:98:96:da:8a:04:1f:
e9:2d:46:04:b4:70:7f:49:e1:95:4c:7f:4b:18:49:e1:ad:92:
cb:a6:96:cf:4f:d0:20:7f:d8:a3:3f:e0:56:e0:3f:84:1a:dd:
9f:8a:a7:87:8b:10:42:46:76:0c:d3:00:d6:be:a9:6c:64:f7:
c8:70:3a:05:38:99:a1:bc:ae:ca:b5:f8:ad:33:a8:a4:87:2c:
c5:f4:36:2c:8c:4a:d9:d4:35:4e:da:1e:31:ad:48:8b:60:c2:
bc:58:e9:0f:11:30:f2:f0:98:fd:de:db:7d:bc:0d:a5:47:fb:
5c:51:98:32:aa:3f:46:ef:d3:c9:e9:dd:4a:ee:68:70:56:39:
ad:2f:b1:d2:10:21:36:36:ae:4d:e6:ef:0e:0c:49:86:c0:5e:
da:d0:d4:c3:95:f5:9a:d5:6d:b0:9e:8b:0e:7a:aa:21:bf:8b:
c9:f1:0c:d9:da:88:2d:2b:5b:99:a9:79:ec:4b:67:bf:e3:60:
8a:6a:1f:77:7e:7e:f6:b6:28:0a:d7:97:fa:d2:7a:a4:2f:4e:
8d:33:9d:ac:e6:66:95:82:ba:c3:ac:f1:53:7c:bb:b0:b2:db:
e4:49:4f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:56 2026 by rpki-client