Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File: 7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier: y6R5G/EV5rWg02L/FPfhqMbSDGF88VgHY9GDzJTkNfY=
Subject key identifier: 04:16:FE:08:D3:1B:05:D4:24:16:33:DB:67:EA:DF:4A:9E:07:E6:4F
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer: /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial: 019CA90E95708AA9E7B023D0CD213E6B30FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 11:00:30 +0000
Manifest this update: Sun 01 Mar 2026 11:00:30 +0000
Manifest next update: Mon 02 Mar 2026 11:00:30 +0000
Files and hashes: 1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: zYhWlgseG7DvGCZYnNaY4RHQICWLHJ83TQnIMmIeOzw=)
2: guibBNdYNmYjs3BhZ4d37Us7C4k.roa (hash: ERVCfgK3qCQAc++yH8oVuuxPI5EAT0LJxo2iXgCuAbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:95:70:8a:a9:e7:b0:23:d0:cd:21:3e:6b:30:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Validity
Not Before: Mar 1 11:00:30 2026 GMT
Not After : Mar 2 11:00:30 2026 GMT
Subject: CN=0416fe08d31b05d4241633db67eadf4a9e07e64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:a0:10:2c:8b:f4:af:59:a3:0e:86:e1:82:
05:b5:cb:6d:c0:6d:ee:98:22:59:81:bf:fd:08:10:
c6:58:1d:2e:4e:9f:dd:ad:f7:9b:af:33:f7:f0:2d:
58:22:92:92:2d:39:a1:b1:d6:1b:27:da:57:9f:7d:
42:7a:96:c3:6c:1b:21:98:99:75:9f:85:c8:7f:63:
23:a7:00:ee:bd:b7:34:b3:d9:1f:01:a7:41:59:1c:
29:1b:1f:cd:06:bc:cf:5a:29:6c:c4:ca:9e:da:22:
8a:8a:a6:5f:c8:99:64:3e:30:85:21:44:95:0a:e1:
6a:2c:dc:36:f1:3c:a2:eb:a8:3c:6c:4c:49:17:19:
e9:42:0c:26:34:f7:ca:b2:a0:63:36:60:76:1e:78:
f8:ed:0a:fb:cc:72:fb:7d:0e:0b:96:d3:80:58:c9:
83:17:bf:3e:7a:a1:2f:a3:19:2a:8e:0f:bf:a7:8a:
cf:46:ce:29:c7:32:47:44:66:57:fd:da:45:28:fe:
06:20:63:21:68:49:d2:2d:15:eb:b3:73:66:dd:08:
34:5d:ce:5b:f8:e7:f6:e2:9d:0b:f4:3e:71:05:57:
c6:7e:46:14:84:4f:7e:6b:10:61:71:9f:28:5b:ed:
c7:4f:1e:49:fe:4d:ec:b7:63:f4:2b:01:da:72:00:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:16:FE:08:D3:1B:05:D4:24:16:33:DB:67:EA:DF:4A:9E:07:E6:4F
X509v3 Authority Key Identifier:
keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b2:49:54:93:92:85:9a:49:04:37:d6:18:b8:f5:00:6e:26:
da:13:50:66:15:b4:57:2c:39:ba:8e:d2:08:b7:67:7f:69:ac:
fb:b4:91:65:57:9b:27:8d:1c:01:f1:94:d3:56:71:30:93:63:
a1:66:e4:4b:40:56:96:c9:bc:cc:f5:34:c9:ad:7d:42:ef:1f:
07:9d:f8:b6:e1:89:38:0f:09:b3:4f:20:a5:96:f9:5d:f9:12:
e2:2b:d0:02:be:a3:f9:74:44:5f:c5:8c:7f:27:95:10:ab:74:
ee:53:8f:cf:58:df:d4:9e:67:f2:52:c2:b0:a4:42:b1:e8:da:
7b:01:ea:e7:ca:43:7a:28:b7:99:29:94:63:9a:79:05:a8:35:
bd:84:24:52:23:8b:97:c9:11:e8:5f:15:86:60:a3:81:cc:57:
7e:70:da:dd:2a:2f:c5:53:fb:79:40:63:03:49:76:2a:5a:c2:
3f:34:f7:91:d8:2c:90:0a:6b:39:1b:2b:1b:61:b3:4e:84:cd:
d9:33:dd:04:e1:f9:e4:9a:3c:9f:5c:34:b0:07:a9:dc:52:df:
15:bd:f5:df:6f:4a:10:da:96:46:5f:e6:95:18:3e:f7:af:a5:
65:d1:1a:3c:5d:4e:08:9b:83:c6:12:35:a3:b6:cb:0f:64:fe:
69:85:b3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:07 2026 by rpki-client