Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier: yTCM4bi+lRFRwlVAsnWT16j/zSZcY65V5wvCDIYRjP8=
Subject key identifier: 5D:8D:DC:5F:C3:EC:79:08:43:DC:FC:ED:CC:DE:72:1B:C3:12:CD:AE
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial: 019D27E070FA719A767A50A2C72654B4D511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number: 0AAC
Signing time: Thu 26 Mar 2026 02:01:53 +0000
Manifest this update: Thu 26 Mar 2026 02:01:53 +0000
Manifest next update: Fri 27 Mar 2026 02:01:53 +0000
Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: 9CXf+th8SYhHNNtK6gWAFfPTKyEC1ryEw7OPgutN+sc=)
2: prj-gjU2FJGtEVAkFqN1UEoiuck.roa (hash: MBD1FKmACbSwTw7FTssOYwGdssDUFI7ku4bKYJP3LtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:70:fa:71:9a:76:7a:50:a2:c7:26:54:b4:d5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Validity
Not Before: Mar 26 02:01:53 2026 GMT
Not After : Mar 27 02:01:53 2026 GMT
Subject: CN=5d8ddc5fc3ec790843dcfcedccde721bc312cdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a3:d9:9b:1e:a8:3c:16:b4:cd:d0:e8:0f:4a:
be:80:c0:b7:b2:bf:f2:2d:9f:72:35:47:ef:7f:4b:
b3:70:bc:64:cc:dc:46:01:38:06:a7:c6:b3:c9:23:
66:0a:54:64:9c:5b:e1:22:9c:e2:e3:17:59:82:f2:
37:18:00:1d:1b:93:96:9f:ee:ca:d7:bb:8a:1f:4c:
1a:f7:42:f1:e6:ef:39:6d:dc:af:98:1e:30:91:81:
a4:84:09:cf:c1:ee:04:06:38:72:b8:ac:f2:5f:0c:
ce:c7:37:f6:85:9c:6d:4d:4c:a6:f0:fd:e2:93:a4:
29:9b:ba:4e:b0:0b:ff:bc:f5:b9:af:bf:26:d4:f9:
87:0b:12:70:80:6d:de:63:d5:fc:d7:8a:bb:a3:ff:
66:67:54:65:34:47:b4:80:57:43:6b:32:58:a7:06:
46:de:9b:0e:de:d4:a8:1b:21:7d:f0:e2:01:46:d7:
3a:67:6b:f3:48:1f:c1:a5:5e:d7:51:04:e0:4e:ea:
7a:8c:29:09:dd:58:9c:dd:ae:ef:91:7d:35:98:f4:
01:27:4a:ca:a0:b0:4b:20:fd:c5:c1:3b:7f:fa:89:
55:d1:d1:d5:47:b5:0e:a3:3e:a7:97:f5:90:da:ad:
75:e4:21:a1:20:10:9e:2e:19:d4:66:f8:ac:92:d2:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8D:DC:5F:C3:EC:79:08:43:DC:FC:ED:CC:DE:72:1B:C3:12:CD:AE
X509v3 Authority Key Identifier:
keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:56:16:7b:c6:4a:9f:61:ee:05:cc:ef:66:e3:50:f3:d6:06:
6c:dd:5a:c4:ec:a1:55:a0:70:73:11:87:a5:3c:02:28:2b:f8:
15:26:90:9f:a2:e8:0b:09:3f:ba:7d:fe:79:f6:77:d7:aa:d7:
cf:38:73:6f:f8:8d:e0:d7:e0:45:64:29:71:5d:81:a9:73:ae:
6a:17:99:4a:42:45:77:ff:3e:98:f7:2c:95:0b:32:de:72:1f:
24:4d:14:30:8d:59:40:f2:65:b6:1f:79:21:e7:ea:ee:4a:f3:
53:0c:bd:8c:37:d8:62:e8:60:4c:a6:f5:17:fe:18:a4:aa:d8:
8f:e0:95:0d:23:4c:10:df:e8:b1:26:cb:b8:29:f7:e2:39:bd:
12:87:ea:f5:e0:9a:f6:d7:ec:b6:bf:2f:94:a7:39:74:d7:96:
f7:50:ad:34:56:dc:e5:2d:b8:66:64:73:6a:ab:ad:df:4d:bd:
42:c4:a2:1a:52:1c:4f:c4:db:90:ad:c0:3b:fb:d4:d9:bb:44:
65:68:32:a5:54:49:a8:24:f1:d9:d5:57:7d:74:e3:62:b0:af:
31:95:c6:ed:c2:91:55:78:46:7c:1d:5a:25:c5:80:5c:46:77:
b7:25:76:f4:ac:fe:9e:80:73:c1:f9:43:27:44:03:b2:0d:3a:
b2:dd:b3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:06 2026 by rpki-client