
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
File: rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft (raw, json)
Hash identifier: WQAIThYj0sIb2Cd+ncE+AUYrnt7TbU/IAh0ebQQD02c=
Subject key identifier: 77:36:FE:E1:32:F1:06:30:C5:AA:4C:8A:A3:60:9B:35:7E:02:3B:32
Authority key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
Certificate issuer: /CN=adc647ba017c8a4599c009be04d81b268eca62f4
Certificate serial: 019D27DF8AF9ED525A3BFFD4C647EE3140E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
Manifest number: 07A5
Signing time: Thu 26 Mar 2026 02:00:54 +0000
Manifest this update: Thu 26 Mar 2026 02:00:54 +0000
Manifest next update: Fri 27 Mar 2026 02:00:54 +0000
Files and hashes: 1: rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl (hash: x1QsHsCgnKnGt9EgZRiKBxRQWZQqb01Pmp2lRpcLXxE=)
2: y1Acn-nX2-7OFeDZEqyAj0HHUbI.roa (hash: Z/l1m2g2kzxvfaR8aMT4tSywwcoOw223UuXpwNiGyGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:8a:f9:ed:52:5a:3b:ff:d4:c6:47:ee:31:40:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc647ba017c8a4599c009be04d81b268eca62f4
Validity
Not Before: Mar 26 02:00:54 2026 GMT
Not After : Mar 27 02:00:54 2026 GMT
Subject: CN=7736fee132f10630c5aa4c8aa3609b357e023b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:2c:59:1f:ac:b1:29:51:6e:24:8f:b2:bf:
3a:9e:ba:c1:91:af:39:07:ef:41:b5:65:16:64:58:
b0:eb:6b:6f:e9:14:c9:98:6a:1b:21:b6:cb:a6:db:
b8:ac:ac:14:5e:ec:f9:e7:59:40:8a:0b:68:bf:f3:
34:dc:1c:4d:78:7b:54:02:a8:d9:c6:71:7f:d4:d7:
30:6a:90:b0:f9:ea:92:6a:11:3c:80:09:be:22:1d:
df:97:dd:df:f0:ab:86:59:e7:9e:f8:7d:72:37:e0:
4f:ad:c9:08:d1:59:52:9b:e3:a9:1c:ee:20:e2:a9:
a7:cd:3d:a1:69:b6:81:8d:58:81:a1:64:3c:fd:33:
49:3e:49:f9:32:3e:27:8a:4c:e2:f8:d8:c7:a2:38:
63:c9:ee:71:ba:de:0f:bf:d7:a3:6b:98:d8:e6:b6:
79:21:ab:45:27:3c:18:a9:6c:53:cd:fd:a5:a2:73:
90:c9:e7:27:50:61:e5:73:d5:39:fd:28:b9:dc:8a:
e9:9a:d5:34:89:e0:a5:e6:dd:ee:e0:93:72:5f:27:
21:9e:1e:9f:36:bd:cf:29:c8:f2:9b:db:dd:9f:ac:
19:6e:a4:d3:c5:01:01:18:49:7e:12:ea:7a:2d:42:
90:12:89:b0:85:32:35:97:e9:d5:e7:f0:10:1e:23:
0e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:36:FE:E1:32:F1:06:30:C5:AA:4C:8A:A3:60:9B:35:7E:02:3B:32
X509v3 Authority Key Identifier:
keyid:AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:df:8c:b4:2c:e1:15:86:b7:d2:27:03:98:02:4b:17:59:e9:
9a:63:d9:0b:a5:94:f9:79:53:d3:69:05:05:ad:b7:8c:14:8c:
a5:2d:fb:0b:e7:7c:2c:c5:82:95:9e:48:bf:62:ed:b3:62:68:
e8:da:3e:c4:f6:c5:b6:8e:77:1c:d5:45:c8:8e:51:a2:48:e9:
37:38:71:7b:22:c0:37:e8:e1:1d:e9:f9:41:49:0b:3d:9c:76:
5d:28:4f:54:71:1d:31:65:ea:9b:77:50:f6:7b:71:9f:d1:aa:
72:74:10:fd:33:a1:5f:a6:28:ec:f5:13:68:a3:85:f9:32:ca:
09:fc:68:09:0e:d7:8d:65:36:32:c6:23:87:c1:63:15:2e:22:
13:65:1a:20:76:5d:f0:3b:31:f5:1a:33:68:1a:29:ea:ff:f4:
1e:4e:d4:92:d3:5f:d9:02:41:94:29:a3:e8:5a:a8:98:f3:e1:
5d:fb:9e:bd:05:68:80:5d:64:85:96:cf:f1:f2:de:5b:27:49:
15:05:1e:ac:dc:4c:5e:56:66:70:85:93:55:85:80:b9:c4:95:
7e:78:bf:53:b8:f2:10:57:ba:3a:c3:d1:32:38:cd:24:49:a2:
2c:5b:04:b9:e1:67:87:0e:f7:3d:64:5f:27:c6:d2:17:d9:2e:
11:ee:21:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:17 2026 by rpki-client