Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
File: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json)
Hash identifier: /txeyThXatBKB32tNnLf8iUkz6EPFpQwlOHK61hdToU=
Subject key identifier: AA:39:19:C4:EB:D1:BC:03:BB:00:F4:EA:3E:CF:AC:9E:C5:E3:D8:D6
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Certificate issuer: /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial: 019CAA8F5D5C983E5033760A421CA90A6427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 18:00:48 +0000
Manifest this update: Sun 01 Mar 2026 18:00:48 +0000
Manifest next update: Mon 02 Mar 2026 18:00:48 +0000
Files and hashes: 1: 1zEvIox69c2lph8To4y01za8sxk.roa (hash: NK/LeMgA4R1YoY3PIzw3AAc8sU/wtNG17ZKOs8j1HAs=)
2: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: zgALD2lS7iQPd5zS2IjM7dRmqmewrHpE/wZBHsgSrs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:5d:5c:98:3e:50:33:76:0a:42:1c:a9:0a:64:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Validity
Not Before: Mar 1 18:00:48 2026 GMT
Not After : Mar 2 18:00:48 2026 GMT
Subject: CN=aa3919c4ebd1bc03bb00f4ea3ecfac9ec5e3d8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:b2:05:51:6f:d2:23:99:e3:88:eb:52:c7:
a1:e0:2c:da:73:5c:09:ba:61:e2:78:f0:34:eb:b7:
85:07:45:b1:25:39:12:fe:d7:b2:01:87:fd:8b:b1:
86:df:76:76:1a:15:d3:51:4e:bb:d4:6d:06:97:7b:
e2:2e:47:ed:a1:4e:33:df:0e:ad:68:c9:b7:14:4c:
55:da:ab:39:f2:d5:ec:3d:43:89:f0:18:5e:69:82:
50:d3:0a:58:07:f4:31:4a:08:eb:61:2e:d4:4e:81:
e5:e0:2e:c4:a8:90:85:aa:a9:f6:04:73:8b:57:94:
eb:55:01:d6:a6:c0:e8:e4:a1:8f:aa:ec:d9:7b:0b:
eb:84:9e:9e:77:50:9f:e0:d9:f1:31:df:24:54:2b:
27:65:fb:84:97:ff:db:bc:64:cc:ec:95:5d:12:74:
9a:11:62:5e:24:4f:84:7d:bb:25:68:ba:ff:1b:52:
3c:00:e3:ef:04:c8:21:42:61:ee:30:a0:84:ad:a7:
ef:e3:9e:a7:1e:86:d4:b6:08:a7:3a:8f:d7:22:b3:
b5:25:a2:29:d9:d9:aa:48:ae:e2:58:8c:a0:a5:ea:
a0:16:a4:c2:47:97:a8:d8:5b:d1:ca:d8:ac:d1:20:
8b:05:3e:48:94:08:cb:48:d3:7f:55:fe:9b:ed:fe:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:39:19:C4:EB:D1:BC:03:BB:00:F4:EA:3E:CF:AC:9E:C5:E3:D8:D6
X509v3 Authority Key Identifier:
keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d4:37:07:0e:2e:ec:d7:03:04:35:be:6b:1b:75:46:b6:9e:
73:f9:e1:fe:11:a1:f8:51:7c:27:88:be:5e:a3:08:e2:fc:6a:
be:b9:80:42:bc:77:77:6c:5a:f7:27:e7:f7:1a:56:0d:6d:e1:
e8:a8:4c:00:93:46:0b:f6:5b:c7:7f:9a:2d:ec:3e:e8:ad:de:
69:2b:a6:b2:cc:fd:b7:22:fc:9f:5e:97:46:fb:08:53:a6:cd:
ef:66:18:34:fc:d9:1c:ba:eb:c0:51:35:c8:bd:9e:d3:c0:b7:
37:67:c7:64:f7:c6:11:f6:87:27:ff:e4:49:9c:b7:1c:29:73:
60:67:16:95:1b:99:97:f2:eb:c4:2d:be:9f:f4:f1:81:4c:78:
15:b7:e7:26:a3:90:35:f6:f4:c2:97:cc:9b:b5:f3:9f:d7:c5:
55:5d:9f:fb:84:17:5c:3d:0d:6f:05:45:33:ad:bc:98:9d:75:
a9:85:f4:3a:dc:5a:cf:2b:f6:68:78:d2:57:e9:b1:96:00:c1:
d6:27:9f:ba:2a:95:03:d8:78:40:f8:44:68:5f:85:01:9e:23:
d4:05:30:fd:05:b7:f5:a3:b1:53:82:31:c1:50:f0:bb:56:d7:
f4:11:fe:61:ca:9f:d2:c5:40:d6:93:b2:f8:4e:a5:36:47:06:
97:03:8f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:48 2026 by rpki-client