Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File: 7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier: RhEUG/AXR5w+Xe5+sy3w07nWiSV2HALYqCZ9Xa+LcGw=
Subject key identifier: CD:E2:32:70:21:BD:6E:1D:B0:34:D0:1A:BF:E4:16:25:17:77:D6:6F
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer: /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial: 019CACEBA34B58301E722DAE324914CDEF15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number: 058A
Signing time: Mon 02 Mar 2026 05:00:49 +0000
Manifest this update: Mon 02 Mar 2026 05:00:49 +0000
Manifest next update: Tue 03 Mar 2026 05:00:49 +0000
Files and hashes: 1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: iVok6vsXaUcMbwMaW6vpGBn7iQWGq/eOJBKvOlbPDGM=)
2: s7LS5E2_BqhGC5kkRJyj8qADFIY.roa (hash: F29Cc0fGTR/n9/kt6ymI38j28/wC/Ug/3ed8suC1jpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a3:4b:58:30:1e:72:2d:ae:32:49:14:cd:ef:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Validity
Not Before: Mar 2 05:00:49 2026 GMT
Not After : Mar 3 05:00:49 2026 GMT
Subject: CN=cde2327021bd6e1db034d01abfe416251777d66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f1:aa:f3:c3:b8:e0:7c:d7:5e:ef:c9:b5:c0:
ff:c3:08:82:0f:4b:e1:ef:e2:1d:0c:eb:ef:05:d9:
be:22:79:c9:96:c7:b8:fc:3d:d6:71:67:73:29:50:
2a:42:26:28:ce:a4:04:8f:ad:4a:03:f5:5f:70:d0:
e1:ff:5f:19:77:16:f8:71:98:09:6d:2c:38:16:4d:
df:3d:8b:00:bb:51:fd:18:30:91:34:74:6b:b1:a9:
96:50:ec:a6:a5:49:5f:28:f1:2b:52:d4:a5:88:c3:
59:92:c1:6c:b2:1e:3f:bb:e8:43:97:eb:2b:9a:84:
f1:e3:70:dc:a9:db:7d:32:a5:cd:ee:c8:fd:08:60:
f7:a3:c7:0e:37:f7:0b:9c:6d:0c:e2:ff:75:c1:31:
7f:a6:46:2e:01:9d:b3:cd:9d:30:4e:ab:42:ea:9c:
a9:97:6e:12:03:4c:2e:a9:4b:05:24:f8:61:03:ba:
dd:d6:d5:77:1d:11:cb:c6:cc:c1:05:f5:64:c1:7c:
2e:0a:8f:2c:84:96:c5:04:ba:ba:4b:43:ad:07:6d:
99:fa:f5:83:fd:14:81:38:73:a5:6f:50:8d:03:f2:
7c:77:94:8d:8f:4c:cb:2a:33:9d:53:3f:48:e7:80:
27:10:72:0d:ff:4e:60:c7:13:44:2b:32:4d:98:e5:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E2:32:70:21:BD:6E:1D:B0:34:D0:1A:BF:E4:16:25:17:77:D6:6F
X509v3 Authority Key Identifier:
keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2d:e7:02:bb:99:d7:57:a1:b1:90:40:e9:48:eb:15:d6:76:
c5:97:d4:ee:6e:71:07:59:71:cc:a8:69:ea:4d:3a:49:b9:01:
ee:b2:61:18:4f:87:cd:a9:08:e6:0e:76:19:76:da:5c:04:c3:
0e:03:0f:df:40:f3:28:77:66:81:f5:fd:98:05:e4:bf:67:9f:
4f:11:9f:fc:39:09:fc:b0:cc:fd:46:d8:c4:7e:d0:32:ae:61:
52:08:20:c1:a0:4d:09:88:3b:75:d6:2a:e1:6c:53:1f:61:9f:
04:a8:32:48:16:d9:89:53:e3:50:46:df:d3:c4:2c:34:69:9b:
d0:ed:18:f6:08:34:86:db:2c:3e:50:eb:af:33:79:a2:61:cc:
ee:14:e2:cd:49:17:b8:52:12:08:4b:7e:e1:f7:1f:18:8b:b6:
eb:ab:5b:70:e8:d0:f4:7a:10:31:99:29:b9:27:f2:10:d0:01:
35:cc:03:93:3b:74:43:38:0e:89:87:f0:48:5d:8d:76:47:a1:
52:ff:47:b5:fa:67:da:04:e6:e2:65:8f:ab:5a:a4:b7:00:de:
35:ed:ce:4d:f8:33:7a:7d:c9:c2:bb:6d:92:ef:cd:b3:ad:67:
26:9a:5b:8f:4e:b3:f8:f4:88:92:80:22:ff:51:bc:61:32:72:
57:d9:cd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:30 2026 by rpki-client