Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
File: t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json)
Hash identifier: L4BXKEh0tT+IKrLrCFW5dZasKDqGRSxrMF2CkrmD22o=
Subject key identifier: 4C:FB:E5:DD:96:CA:8B:82:E9:01:A7:B7:39:E4:88:F5:BC:E4:0F:52
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Certificate issuer: /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial: 019CAAC635B5631EADF2FFCF8CB39FC0BCD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 19:00:42 +0000
Manifest this update: Sun 01 Mar 2026 19:00:42 +0000
Manifest next update: Mon 02 Mar 2026 19:00:42 +0000
Files and hashes: 1: l2K815BrxnyKxX1Z80Pet8asKu0.roa (hash: Eu+brIQ4UCkAdjGsx7xGNJPQX039Fdi67RknQ8veG7g=)
2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: 3l7AVP2GSFYEz5NPkp62YF8Q6PGJlEt4scrcgJpoR2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:35:b5:63:1e:ad:f2:ff:cf:8c:b3:9f:c0:bc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Validity
Not Before: Mar 1 19:00:42 2026 GMT
Not After : Mar 2 19:00:42 2026 GMT
Subject: CN=4cfbe5dd96ca8b82e901a7b739e488f5bce40f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fc:82:5d:d5:1f:14:23:cf:fc:f7:28:8b:99:
93:c8:27:98:e3:99:3e:f0:19:39:14:09:45:d5:6b:
02:1d:9c:d6:6e:be:d1:bc:1b:0a:c2:06:51:b2:6f:
a7:c5:b2:6b:bb:b9:bd:3a:a3:1d:f2:57:86:13:36:
1d:25:d9:95:77:f6:e7:e7:39:fd:5a:e6:31:dc:a6:
4e:1a:9d:26:2c:24:b5:4f:3f:92:dd:f9:8b:2d:2c:
e3:d2:93:70:58:d5:5f:1b:e3:08:dc:55:9b:8e:4d:
0a:a5:cf:14:99:48:ba:0f:dd:70:f4:6a:aa:2e:14:
8e:b6:24:a1:fd:b2:b5:30:20:81:65:24:f5:bf:b3:
52:c8:ca:f1:da:bf:ae:cc:6d:05:e2:3b:4e:5d:cf:
53:04:98:85:6a:f4:e4:2a:9d:2e:43:01:ad:79:43:
8b:42:0b:32:a4:e7:8f:9c:b0:94:44:e1:c6:fa:ea:
9a:57:7b:b6:84:18:d2:b9:3b:62:b0:e4:83:70:39:
9a:98:d9:fd:5f:15:dd:33:ac:d5:78:3b:12:fb:2e:
ea:b1:ba:ef:73:52:83:d6:00:6c:01:63:fc:bc:9e:
c7:b5:8c:dd:8b:21:6d:52:d1:e7:13:e4:42:30:14:
0d:8d:82:e1:86:d7:cf:0a:13:40:a7:5b:4e:d3:97:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FB:E5:DD:96:CA:8B:82:E9:01:A7:B7:39:E4:88:F5:BC:E4:0F:52
X509v3 Authority Key Identifier:
keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d9:18:de:4b:94:df:6d:bc:c9:35:15:de:80:d8:f0:5b:04:
43:5a:2b:90:58:ec:cd:31:ff:af:e1:2c:79:14:6c:ee:df:c9:
5c:11:96:f6:29:b5:9f:b1:2d:22:d8:da:a3:3b:47:47:86:89:
d9:b2:a1:61:84:52:28:a1:2c:a2:c6:b2:8f:9b:4b:8f:e8:2d:
3e:fd:6a:69:20:42:d0:52:02:b9:9a:ac:df:33:b0:aa:f4:90:
75:69:d7:d8:d7:d3:0b:a8:c9:40:0b:0f:09:f6:1f:8d:61:e6:
69:58:b8:59:7e:0f:d2:63:19:5c:9a:72:64:44:67:c8:19:09:
6e:f1:90:14:f4:85:ff:92:92:61:4b:49:25:70:b5:10:2a:50:
e0:57:ef:8e:09:75:a9:aa:f9:59:6d:81:01:53:5c:af:b8:23:
10:41:6a:9a:42:69:a7:10:54:87:67:9f:ff:62:71:52:22:d9:
35:8e:95:49:41:09:8c:46:7e:72:27:b3:45:a2:d2:59:ba:a7:
83:00:a1:3f:98:55:17:09:4d:41:6d:d2:e1:bc:64:54:01:10:
90:46:29:2a:87:06:b8:8e:15:a2:aa:5d:59:82:04:c1:be:9c:
d8:2d:6b:01:17:39:96:f9:c1:36:17:48:81:bc:8c:22:62:8e:
98:f9:8e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:05 2026 by rpki-client