Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: a8KCq5rsMsOijtoTJZDD0YWsuAtGyc3TVGqBvOVl3tU=
Subject key identifier: 3F:F7:A9:27:48:87:67:85:AC:7B:08:AA:24:14:F5:D2:DD:A1:88:AD
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 019CADC790B685CF12247A24CFFBE9237B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 15C8
Signing time: Mon 02 Mar 2026 09:01:02 +0000
Manifest this update: Mon 02 Mar 2026 09:01:02 +0000
Manifest next update: Tue 03 Mar 2026 09:01:02 +0000
Files and hashes: 1: 3wC4iAYIU6RjN3EGUKVhlIp3rko.roa (hash: r6BtCtLIRGTbjhqdmmeh1e+4MWSh7VLtqxWzoKISutU=)
2: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: NUmM3oT9a2B21nnR79pFVG82NFz/tQTYFw8ZEEVQ1lo=)
3: H6GA7joAUfNPurokrgS1LJjNtfY.roa (hash: FKRThdMjAtwcwfUfR10ZtwzWVg2CFJr5Omg8dgAq7bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:90:b6:85:cf:12:24:7a:24:cf:fb:e9:23:7b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Mar 2 09:01:02 2026 GMT
Not After : Mar 3 09:01:02 2026 GMT
Subject: CN=3ff7a92748876785ac7b08aa2414f5d2dda188ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c5:e3:3b:2e:7b:27:7a:92:a5:8b:15:a3:ed:
ef:01:bc:9b:be:ff:80:8c:bc:b5:8b:00:a7:88:00:
4a:41:f7:d2:be:5d:fc:30:f7:4f:45:26:06:28:df:
5a:60:64:4d:28:5f:c6:00:1a:78:ca:4d:fc:8c:f9:
f7:df:3c:26:cd:aa:94:df:82:91:97:22:e4:a0:a8:
0a:c9:77:34:a6:5e:c6:0c:7d:06:e0:b2:1b:f8:c6:
31:f9:d6:fb:0f:cd:0d:10:c2:f5:12:8b:f2:64:07:
1e:7e:97:d3:83:52:c5:f7:0c:d9:e7:50:9a:df:95:
15:bd:21:ae:2a:0d:36:bf:a7:7e:e4:cc:68:04:6b:
b0:96:15:3a:e7:45:bb:fa:9e:23:92:f7:76:ec:89:
c9:08:8d:1f:c2:99:40:d8:3b:83:e2:eb:0e:3f:80:
fc:c8:39:9c:dd:72:c1:f4:c2:45:e9:14:97:fe:50:
97:6a:a3:3d:b7:93:4a:55:c6:4c:cc:27:7b:19:aa:
a3:68:11:dc:dc:71:d4:7c:ce:c8:c5:61:a0:97:b5:
d8:9f:d2:64:14:f4:c5:75:09:ae:af:b5:3c:54:6c:
d7:c5:08:ba:f3:1d:5c:3a:20:ce:9f:05:02:03:f0:
72:71:b9:a0:df:1d:77:23:4e:b0:4c:97:58:b1:da:
1f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F7:A9:27:48:87:67:85:AC:7B:08:AA:24:14:F5:D2:DD:A1:88:AD
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:04:4d:7a:43:da:68:38:79:cc:4a:84:c8:41:42:67:50:98:
03:51:57:96:13:29:b2:28:04:b8:2e:a0:2d:15:c7:ff:13:9c:
90:57:fc:d8:0d:b6:98:af:b4:18:f3:c0:cd:07:20:61:90:3c:
25:70:8b:9f:aa:3f:2f:91:c1:58:a5:a4:8f:d2:33:f5:e6:af:
e4:cf:e3:eb:75:b5:dd:08:28:8a:76:25:cb:52:5a:a7:27:14:
16:a2:aa:a4:6b:4b:ac:13:ec:5f:e7:95:5e:83:01:cc:1f:75:
8a:7f:90:dc:fe:fe:ca:57:2f:f1:23:3a:20:05:b5:80:86:f2:
7b:ae:00:6a:a0:2a:79:30:98:05:a9:d9:49:17:05:1c:ad:c2:
0d:32:78:36:ed:08:4d:12:33:7e:2a:6f:d3:7f:04:ed:76:1d:
bb:d6:09:21:f2:62:86:92:1e:00:c8:53:c2:8a:9b:bb:c9:1e:
a2:73:9f:a6:21:5e:ca:78:f9:a4:3a:5a:97:d0:9b:9a:2d:24:
bb:f0:ad:ec:f6:30:eb:4c:96:71:2b:81:c1:b4:e5:3a:6e:9c:
5b:5e:a2:26:04:6f:40:6d:dd:a8:a7:1d:8a:d0:38:ec:bd:aa:
9f:7c:ba:58:cd:76:73:77:5f:6f:01:9d:44:80:53:3a:38:1b:
0f:4a:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:47 2026 by rpki-client