Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
File: _7yuKykMgB1X0J0CWpNI4WcG8YI.mft (raw, json)
Hash identifier: JkIksI4jfb35W9aRZNmKdR2Sl01pIw/9Br+kAbLItXM=
Subject key identifier: 57:B9:60:4F:CF:CC:B0:13:30:50:69:F9:81:5E:D9:BD:DF:6A:BE:E8
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 019CA9EB72E5AF31B2FAA93B980881FEFDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
Manifest number: 17A7
Signing time: Sun 01 Mar 2026 15:01:45 +0000
Manifest this update: Sun 01 Mar 2026 15:01:45 +0000
Manifest next update: Mon 02 Mar 2026 15:01:45 +0000
Files and hashes: 1: Rw7bO49wARtLW7cvAr1hGR-8Dgs.roa (hash: PLBVzKzfY6V8bQMUJREfJf+D4bMzTqr7tyLzjpGHOPk=)
2: _7yuKykMgB1X0J0CWpNI4WcG8YI.crl (hash: x4QruIRvuvk0i3sZ/ImAwrX4tSwLce9I8QaR5Zia4mI=)
3: dj2slW3vOttM2lqgWk6ocAGgDC0.roa (hash: +gmMzsdCL+TQ11aBaKus+EwBw7GGlK23QYqU5eoC/TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:72:e5:af:31:b2:fa:a9:3b:98:08:81:fe:fd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: Mar 1 15:01:45 2026 GMT
Not After : Mar 2 15:01:45 2026 GMT
Subject: CN=57b9604fcfccb013305069f9815ed9bddf6abee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a2:a5:e1:15:f7:54:ee:3e:bd:f1:f0:42:d7:
ad:f3:49:18:7f:d6:6b:de:8a:d9:f9:27:db:47:62:
19:b8:a9:df:81:dd:35:7d:02:a1:3c:e3:cf:78:b2:
94:ad:7c:c5:d4:d1:59:f6:f6:eb:41:c9:43:dd:cf:
90:dc:92:d7:7b:e7:c5:2a:5f:e8:2d:f1:6d:ad:a4:
9e:f8:80:3c:1b:4b:fc:fc:d4:84:f2:d1:54:ca:73:
cf:e3:ed:bb:b4:4c:91:79:63:67:f4:89:ad:c6:3e:
6b:b0:93:70:21:ab:ef:c7:95:dd:05:32:a0:09:31:
b1:b0:cb:d1:1a:6d:62:da:f6:bb:5f:ba:f0:40:47:
d8:a2:10:a3:85:69:a0:c0:12:2b:17:74:20:79:7f:
41:14:78:46:53:5c:2b:5d:45:63:52:5b:40:21:37:
06:10:ee:24:fe:47:b7:38:39:aa:b0:8d:4c:3e:a2:
e1:ee:f4:1d:2f:86:45:fa:27:b5:c9:c4:5f:23:01:
aa:82:8e:51:7d:da:d6:18:99:04:2b:68:3b:93:50:
3b:43:87:51:b8:39:d7:c1:ed:c5:12:3a:a1:f4:e1:
d1:c9:be:d4:68:47:68:c3:53:fa:be:ef:44:47:c7:
b3:82:5b:16:b7:8d:4a:ad:e4:77:cb:6a:8f:fc:23:
f7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B9:60:4F:CF:CC:B0:13:30:50:69:F9:81:5E:D9:BD:DF:6A:BE:E8
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:95:33:17:88:58:7c:ff:2f:af:42:f2:24:54:e0:76:2b:b8:
22:2a:25:28:f2:08:dc:4e:bb:5b:71:d3:95:6b:f4:ea:c8:af:
53:9a:7f:5a:b4:fb:08:7d:da:9c:6b:ba:cf:8d:c9:4f:a7:3f:
c6:d2:73:9a:3d:87:9b:4d:a5:30:05:4c:95:11:bf:e3:ee:a9:
d8:d7:ab:ca:c5:3d:b4:2c:ca:d3:66:2c:81:9c:fe:05:b8:29:
52:e4:5b:60:34:42:a1:38:78:e9:37:0c:0a:4f:30:99:d0:70:
ae:2a:da:7c:87:74:92:42:86:11:b2:10:30:00:82:2d:cd:50:
8c:90:64:f6:9a:3c:88:3a:11:be:a6:26:4d:b5:83:e7:b6:e3:
36:dd:f6:30:03:71:99:c6:6f:6f:72:18:a1:88:01:d5:a5:bc:
dc:cd:ab:5f:d7:6d:6f:c7:ab:7d:8a:ae:f2:eb:0d:05:bc:7b:
24:5f:fb:c2:88:9c:e4:b1:e7:78:2d:f6:f0:a9:97:53:55:ca:
6a:b9:94:9f:28:87:04:ee:7f:23:95:a9:34:bb:0b:ef:0c:d3:
11:f1:96:7a:b3:c1:80:12:e3:1e:44:0f:ad:c7:4b:80:b0:d4:
1a:43:c0:26:0e:97:06:47:55:3e:e3:0b:6e:79:5c:b1:b2:ba:
37:60:fb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:33 2026 by rpki-client