Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
File: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft (raw, json)
Hash identifier: ZUl04HPp0kmm28LGbVK5ucG3/AN6gO3pZLZRHvqyqus=
Subject key identifier: 4F:53:24:52:40:B7:B3:16:E0:7D:D7:A9:C1:6D:95:CC:62:FE:73:28
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 019CAA2147A714012E9D9CF3E0E4642A4DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
Manifest number: 0797
Signing time: Sun 01 Mar 2026 16:00:33 +0000
Manifest this update: Sun 01 Mar 2026 16:00:33 +0000
Manifest next update: Mon 02 Mar 2026 16:00:33 +0000
Files and hashes: 1: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl (hash: K4oosvO0JSINUqRr9dypjyVaMjfOc8msK0JjJ0nI7GA=)
2: GEAJLO1s8mVtn-r3Ht2TeuVtCRU.roa (hash: VPMCHcd1Kc5vuonwZZAObs79evOSI4sYgTK3tPjqiPE=)
3: _4KNDUF7g83lv5SJMUefTksauhs.roa (hash: 8MqS36z0z/4kn3leqGP6/RJdC8IFP3/yzmKFmZtggO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:47:a7:14:01:2e:9d:9c:f3:e0:e4:64:2a:4d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Mar 1 16:00:33 2026 GMT
Not After : Mar 2 16:00:33 2026 GMT
Subject: CN=4f53245240b7b316e07dd7a9c16d95cc62fe7328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:e5:99:26:91:96:ae:33:07:84:40:0c:59:
28:40:ec:84:75:bc:e9:ab:9d:f8:c6:64:44:e6:43:
3a:f4:6c:69:fe:68:00:1d:a8:72:0f:88:d7:c6:50:
9f:2a:97:b5:d2:f4:a8:36:95:e6:d5:d8:b3:6f:d5:
1f:35:81:b2:3c:69:62:08:bc:24:60:e6:8d:6b:fc:
be:0f:64:ec:b1:0a:ed:c1:d7:51:68:fe:c4:05:b5:
9e:c5:c8:aa:61:70:e6:0e:a5:fc:b6:00:51:5a:76:
b6:a0:0f:c9:1e:bf:92:d7:50:a9:7c:aa:a5:6a:ff:
a7:c8:7f:da:45:9e:83:2b:f1:0d:70:cc:20:db:55:
ab:7e:6a:20:b2:49:01:e5:25:7f:a8:56:db:59:c1:
40:02:1e:10:60:42:a4:0d:6b:a2:d9:1c:df:18:68:
6c:d8:99:84:1d:47:79:03:ff:ab:ce:84:da:75:a8:
cd:e8:3c:1a:a5:97:92:dd:3a:db:17:af:62:fd:1b:
bc:1a:b7:cd:5b:2b:d8:66:77:69:e7:2e:8e:d1:16:
f2:86:40:63:6b:ae:3d:88:38:e2:0c:23:e3:cd:b0:
38:3d:bb:93:0c:49:e9:84:9e:6b:d6:d8:56:a8:2f:
4d:7b:48:0d:79:28:6f:b7:fc:09:2a:54:5f:92:cb:
78:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:53:24:52:40:B7:B3:16:E0:7D:D7:A9:C1:6D:95:CC:62:FE:73:28
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0d:ba:3e:03:34:35:89:75:5e:95:96:86:88:7c:04:06:99:
a1:8f:05:9b:ec:9f:33:04:f5:c8:2c:be:57:3c:d8:43:be:ab:
8e:51:08:b5:69:ce:f5:45:64:fb:e1:c1:f0:58:99:a6:2b:c0:
eb:62:82:fa:e5:b1:ab:ce:aa:71:f4:4f:a2:c2:2a:86:38:d4:
33:66:f2:4a:38:86:9e:0d:a2:81:8b:b2:dc:d4:f1:b8:ff:72:
da:50:ef:41:62:98:4f:c9:fd:00:d5:cf:69:46:d3:8b:35:c7:
d6:c9:9a:d2:67:99:b7:94:73:ea:73:7d:69:a4:74:f6:d9:bb:
4f:a0:b7:d8:c8:8d:93:be:c2:e0:26:89:5a:2a:63:1a:e2:75:
da:83:b7:c3:6b:34:02:78:c1:56:b2:a4:46:2a:78:92:6a:d2:
0b:b4:99:62:33:70:4d:49:66:ea:00:a1:74:bd:89:80:91:eb:
2c:9d:eb:f7:cd:df:7f:0b:88:35:6f:6a:6b:7e:19:07:91:eb:
38:9b:10:49:51:52:01:aa:5d:21:6c:d5:aa:3e:16:e3:79:bf:
00:14:02:bf:7d:f5:52:ec:3a:58:18:fa:28:b1:92:e5:d5:32:
1a:80:c2:07:8a:d3:8f:47:27:81:9f:17:f7:6c:bd:aa:14:2f:
32:8e:fa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:06 2026 by rpki-client