Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: iBpyi6IDtDvMFIRyikwbk3AnlSSTdua7r73MY+Wd6GI=
Subject key identifier: 36:85:5C:C6:49:E1:10:80:25:29:E6:E4:5A:D8:4E:9A:2D:E8:89:C5
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 019D2884708F3AB21E5A5A5388BAB0B6CBCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 105C
Signing time: Thu 26 Mar 2026 05:01:01 +0000
Manifest this update: Thu 26 Mar 2026 05:01:01 +0000
Manifest next update: Fri 27 Mar 2026 05:01:01 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: vGt9HieSRk4sJGRaCqqnTtS+SfXmMo7M9LCs/+6bvRo=)
2: rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa (hash: reSEL9M69wAKbL5gRtqeNyqy/DyxKPTT8rPI7JNy6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:70:8f:3a:b2:1e:5a:5a:53:88:ba:b0:b6:cb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Mar 26 05:01:01 2026 GMT
Not After : Mar 27 05:01:01 2026 GMT
Subject: CN=36855cc649e110802529e6e45ad84e9a2de889c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:ae:be:07:d8:5f:0d:bb:16:e7:a1:74:a8:
c2:b7:83:95:af:13:ca:8e:e9:0b:75:38:0c:e6:a6:
b3:af:63:23:db:c1:25:f8:75:75:29:92:55:e3:bf:
00:3e:3e:79:ce:b2:c5:55:b9:5f:8c:d3:06:a3:ec:
a7:a5:78:43:61:0f:01:d9:5b:4c:42:02:c2:36:f1:
f8:48:47:76:4d:fa:70:ab:42:d4:6b:18:85:0c:89:
df:e0:47:c3:24:7a:5d:53:72:83:eb:95:02:89:90:
49:4e:77:2c:26:c8:f9:c5:5f:50:f5:e9:c1:98:87:
59:9e:3a:af:7b:69:99:f6:2d:7f:c1:3a:c5:c4:2e:
5c:45:84:21:af:48:03:1c:e6:52:72:0e:e9:e8:95:
07:87:82:65:d6:8b:4c:33:8d:c3:72:56:f5:a7:c8:
d4:5c:91:11:61:ae:64:80:ed:2b:f4:62:8e:ed:15:
8a:82:e9:d1:62:ba:85:d9:f3:b1:48:49:e6:da:47:
ae:4a:eb:f9:70:8f:d5:fc:e1:6a:9d:4b:dc:fc:2d:
80:44:25:12:28:8d:88:54:7c:61:17:6e:75:8f:a0:
cc:6c:ca:2c:90:ea:5a:23:f6:88:70:cf:b3:3a:0d:
0f:07:3c:a5:4a:b4:03:0b:56:60:e1:aa:b1:59:81:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:85:5C:C6:49:E1:10:80:25:29:E6:E4:5A:D8:4E:9A:2D:E8:89:C5
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fe:3e:7c:19:22:2f:23:fe:00:ea:a3:22:d2:4b:8b:e1:84:
b5:e5:a4:02:6f:14:59:1c:55:e6:87:e8:0e:e1:29:85:12:22:
21:96:27:fe:1d:07:9a:80:4d:04:c9:59:84:93:52:e7:a6:7d:
aa:a7:28:ba:4b:f0:d5:12:1a:6f:04:4e:d7:c3:79:aa:d4:26:
7b:fc:65:35:29:c7:ef:66:ae:9e:69:81:a1:32:df:26:79:fc:
80:57:cd:91:21:2b:48:4f:81:e9:6f:91:cb:d5:86:f3:ea:41:
7e:49:42:8d:24:55:a1:ed:66:10:71:f6:3d:80:44:0d:42:47:
31:b6:fd:12:17:7c:29:d4:71:19:71:27:0f:ce:d8:66:ed:41:
f8:6d:21:85:f8:2d:0d:03:5d:eb:b2:0a:50:e6:9b:18:4d:ce:
54:76:5e:01:97:8b:cb:24:fb:f0:ec:1f:10:2d:f6:ee:de:c1:
80:6b:87:ef:01:56:a0:72:2f:58:ac:55:66:2e:de:d1:c1:11:
0d:fd:cc:6c:40:ab:98:28:8c:05:70:68:cf:63:88:79:d5:ae:
35:ef:1a:10:3d:d7:b5:5e:29:02:4f:07:60:37:35:e1:70:70:
6b:f1:5e:4b:02:7d:5a:69:db:4d:0e:70:7d:b2:d3:db:c3:ce:
7f:cd:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:54 2026 by rpki-client