Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier: QHn5igueZG9lh9lufs/QNGrX13R8BxrRkDmYtzpnJck=
Subject key identifier: D7:83:54:71:B6:9A:B9:6E:FE:FA:69:0C:ED:78:72:5C:98:A5:27:EA
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial: 019CAD230EB0F48F11DA5EEF7A5DF2CAF037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number: 07CB
Signing time: Mon 02 Mar 2026 06:01:21 +0000
Manifest this update: Mon 02 Mar 2026 06:01:21 +0000
Manifest next update: Tue 03 Mar 2026 06:01:21 +0000
Files and hashes: 1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: AMKtjmS9T8cpexQIe3ru6GlQBpKpAI+6K6nZ/El2E3M=)
2: ci8f7Y86uB9atamo1D3e8sszzV0.roa (hash: JE0+am3liaO3am6zHqUi0SmfiCv9crbc5X4aX8Cwg8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:0e:b0:f4:8f:11:da:5e:ef:7a:5d:f2:ca:f0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
Validity
Not Before: Mar 2 06:01:21 2026 GMT
Not After : Mar 3 06:01:21 2026 GMT
Subject: CN=d7835471b69ab96efefa690ced78725c98a527ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:28:2b:13:d0:4b:04:86:9f:24:30:ac:94:24:
80:d1:97:b2:5d:f8:b6:b9:5b:fb:52:fc:31:c8:52:
d5:df:ae:f6:8b:88:73:94:96:cf:42:c7:6f:de:3e:
ba:3d:c6:f3:c9:c5:28:16:2d:c4:3f:f6:25:d3:a3:
c5:dd:bf:42:85:ee:08:e7:02:72:12:14:5d:c3:47:
61:57:bd:e4:aa:62:32:6d:0c:4a:77:8f:67:14:cd:
3c:45:98:5c:05:b0:a9:ea:72:dc:67:28:f1:3d:e4:
7d:a9:a9:e2:d5:f4:b5:97:f7:ce:e5:93:b1:d3:e9:
64:fc:0d:02:f8:e3:07:d0:f8:96:d1:7e:00:c4:d8:
85:50:3a:52:e8:92:b3:98:cd:29:b4:45:7a:a6:ff:
e0:0f:39:37:89:b1:3c:8c:b3:a3:92:0b:55:66:96:
4d:d4:86:57:5a:05:db:a1:93:01:04:27:31:56:29:
d2:d1:01:76:bf:79:17:7d:4a:9a:15:e3:f1:c9:25:
64:39:52:c1:93:71:7d:67:2e:16:72:7f:52:79:50:
ff:e1:d9:b9:8d:6f:6e:dd:11:90:1c:5d:31:6f:ee:
d7:f4:68:13:96:e8:3f:03:64:8f:e2:af:f7:ad:26:
a8:c7:e9:61:98:92:4b:f3:cb:f2:a7:8a:3d:43:d0:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:83:54:71:B6:9A:B9:6E:FE:FA:69:0C:ED:78:72:5C:98:A5:27:EA
X509v3 Authority Key Identifier:
keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3c:2e:24:17:94:f0:6b:9f:2f:32:c1:2c:e4:2a:ec:05:8d:
4f:9f:13:19:ea:95:e9:9b:aa:91:e5:33:82:6a:d9:ad:96:34:
0c:c0:e2:89:49:55:50:de:76:37:1b:21:23:40:90:72:ed:b8:
1a:7f:2a:82:f9:1f:aa:82:a8:63:b5:dc:fe:d8:c4:eb:87:74:
a8:89:5c:b8:d4:cb:6d:6f:98:83:e1:42:ae:b3:75:89:4c:3d:
43:be:c3:9b:98:4d:b2:82:28:81:c0:b5:ab:f7:45:49:08:9d:
53:b5:6d:13:3a:40:56:23:10:4e:65:66:a4:e1:f0:9e:df:da:
2f:75:44:bc:4c:4e:47:1a:e9:f0:bf:94:ce:ba:fd:98:c7:25:
5f:3f:48:93:75:64:f5:1f:2e:e5:3b:1c:9b:56:94:fd:f3:8b:
fa:c4:3c:b8:14:56:76:f8:f5:83:da:ac:11:a1:f4:cd:a0:a2:
72:92:0e:bf:68:8b:dc:f3:5d:da:5d:e8:ad:f3:08:ac:39:ce:
68:05:a2:9b:57:3e:57:f2:b7:ee:e4:40:b7:89:7f:d5:c8:c6:
42:56:89:a1:91:cf:98:c8:6e:f9:42:77:bb:f6:45:eb:d5:75:
9b:0f:b5:3d:84:c5:b3:33:4b:2e:ab:7e:d6:b9:26:e4:4c:2f:
8a:36:e4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:09 2026 by rpki-client