Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
File: t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft (raw, json)
Hash identifier: NCNEUzCtz3LF+Comc5H3gHi/y4JCa39vS7FfrKm2z3M=
Subject key identifier: 51:BD:FA:9F:9A:02:F9:A8:BF:50:EA:84:FE:D5:04:DE:A1:33:D6:5E
Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
Certificate issuer: /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Certificate serial: 019D29CE4240F5DB5D0E96B48F2D03C86F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
Manifest number: 06DC
Signing time: Thu 26 Mar 2026 11:01:16 +0000
Manifest this update: Thu 26 Mar 2026 11:01:16 +0000
Manifest next update: Fri 27 Mar 2026 11:01:16 +0000
Files and hashes: 1: 3-ZRPzIcEVUi-ra3cIe_QiX4MmE.roa (hash: ioG0rYT2U8xqbe9ZiKXHC8R0PXnU7MQZkccybD0LOac=)
2: t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl (hash: 0c2K0vIc38btFJrEUiLfaq2t0jhl3UUXfcAaqwsTMmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:42:40:f5:db:5d:0e:96:b4:8f:2d:03:c8:6f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Validity
Not Before: Mar 26 11:01:16 2026 GMT
Not After : Mar 27 11:01:16 2026 GMT
Subject: CN=51bdfa9f9a02f9a8bf50ea84fed504dea133d65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:fd:e1:7a:c0:d7:fe:3d:de:39:77:49:43:
e8:48:7f:12:7d:d0:11:3a:b4:9d:da:63:62:6e:1f:
32:47:9b:56:6d:5e:6b:7a:1c:bf:b3:5e:2f:86:b6:
06:3f:ef:1c:e2:fb:0a:f1:84:8a:5f:49:24:de:7d:
27:db:cb:a2:e8:31:de:98:27:fe:9e:fb:ad:57:b5:
8d:ba:73:cb:8d:c3:20:4a:e3:25:da:c1:31:be:07:
c7:36:6f:f2:05:8a:b2:52:80:28:6c:c0:c2:8d:9a:
6b:41:81:63:b4:24:3f:cd:cd:42:a7:a0:58:28:bc:
5c:dd:20:8b:8b:33:7c:a5:47:80:f1:b5:8c:19:fa:
83:59:c3:2f:07:d8:a6:dc:3f:0b:75:1e:de:63:02:
45:c4:2e:a0:8e:51:65:e7:e0:16:c0:a5:eb:8a:27:
fa:b3:9d:74:30:af:5f:92:a6:8e:d5:3a:90:8b:76:
63:78:75:98:39:3b:8b:60:fd:3c:5c:9c:ff:6b:fa:
2c:45:8f:df:8b:26:38:54:c4:66:e7:15:64:72:ef:
e1:43:8c:44:07:ec:58:b0:36:95:bd:b5:bb:3b:a4:
40:1b:26:f2:52:71:e1:51:76:43:82:8f:de:fd:68:
95:99:8b:33:48:cc:56:e3:39:c7:de:82:59:82:d3:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BD:FA:9F:9A:02:F9:A8:BF:50:EA:84:FE:D5:04:DE:A1:33:D6:5E
X509v3 Authority Key Identifier:
keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:49:9f:83:6c:f2:78:5e:1b:d4:fa:fa:77:6d:39:76:01:f7:
92:94:d7:ca:2c:e0:d5:71:c6:c8:80:43:cb:0a:89:77:26:b1:
38:a2:b4:f9:b5:e5:47:96:fd:a2:5d:6a:18:57:98:20:e5:4d:
5e:af:03:1c:13:02:aa:e6:3c:50:27:5f:4a:93:c2:95:29:a0:
37:4c:b0:c4:25:02:4d:d6:4b:bd:ec:5a:e7:da:1c:e3:0d:c9:
e4:5d:41:1d:32:a6:50:92:8e:dd:18:bb:bb:35:77:1e:d2:e2:
a9:4b:ec:ce:15:1c:9b:9e:b0:73:9c:b9:fc:69:ce:d3:5e:74:
15:b4:35:96:1e:15:75:1e:5c:87:9c:f4:e3:95:2d:7d:47:c6:
a6:b8:35:b2:ed:eb:00:43:49:3c:85:1e:de:f6:92:17:c4:fd:
77:47:fa:c2:5a:18:40:fb:46:2a:29:5f:b4:81:79:e0:79:bf:
7b:78:c9:5e:c8:7d:98:60:1e:38:4e:86:b1:55:4e:78:4e:ca:
89:74:bd:56:1b:79:12:c0:9d:8f:97:d4:70:f7:cf:b3:5b:37:
c6:03:f0:56:e4:62:00:01:4b:ee:8f:95:29:94:e3:51:6c:b6:
ac:f9:18:bc:f8:73:b3:7b:4e:eb:34:91:b2:22:28:85:72:53:
2b:9e:d1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:03 2026 by rpki-client