Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
File: 7w7IG5xlO440BQj_hI2wZuNncrA.mft (raw, json)
Hash identifier: fv+IN5Q3s9uM99WlKv74irkX9oEKI6KJ3taMXzw/kbQ=
Subject key identifier: 7C:0C:0C:83:76:4B:00:A4:40:BF:80:1C:EA:9A:32:AB:85:1E:D0:27
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 019CABA1F3F1FA4FEB1D6DA121F8819C8CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
Manifest number: 0878
Signing time: Sun 01 Mar 2026 23:00:43 +0000
Manifest this update: Sun 01 Mar 2026 23:00:43 +0000
Manifest next update: Mon 02 Mar 2026 23:00:43 +0000
Files and hashes: 1: 1-iYojE0-bkqoV5dZTp5mESZkuMc.roa (hash: IBrMOBEILaJ3aIFlHGFpIPbUN6/UuC5r0K5zqJd+Mnk=)
2: 7w7IG5xlO440BQj_hI2wZuNncrA.crl (hash: WUe9VRYY9xPtE8cdnFlTz41ZUtC+joUonrWbZDvlOCM=)
3: atHWqvE_ZaHJPo5qCwW1PGxUw7s.roa (hash: jkDG3raOa2YgMVxrQwlxDz2jPOeQPczc27crizlM5xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f3:f1:fa:4f:eb:1d:6d:a1:21:f8:81:9c:8c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Mar 1 23:00:43 2026 GMT
Not After : Mar 2 23:00:43 2026 GMT
Subject: CN=7c0c0c83764b00a440bf801cea9a32ab851ed027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7e:4e:26:e2:a5:40:54:2d:2d:ec:4c:b0:e5:
ad:16:dc:19:3a:e0:f5:7a:db:2b:c0:03:5c:29:7b:
a7:b6:57:e5:8b:fc:20:05:d6:cb:7a:9f:8b:13:bc:
6a:8b:fd:d5:d2:4d:66:a0:7c:4c:9f:46:b8:f3:f3:
de:94:fb:cd:7e:0a:22:93:4d:e5:d5:fe:5b:12:83:
69:5c:b4:0b:db:a6:79:0a:34:f4:89:ec:3f:82:4e:
4a:83:0a:b6:ea:cc:57:0c:64:a3:60:28:9b:fb:c2:
46:06:99:7e:a8:df:ea:c2:72:a0:d6:57:fc:d6:27:
d0:6a:e6:cc:8c:fe:6b:ec:eb:2a:44:b7:3e:70:0b:
99:aa:1c:15:ef:a9:20:86:ce:ed:81:dc:bc:a4:44:
33:a9:3f:f3:f5:32:e0:c8:90:39:57:93:5b:b8:62:
51:d9:cc:b0:ee:61:53:8a:f3:d7:e8:43:e4:a5:d0:
c2:b2:db:1c:48:15:90:b5:d3:ef:5f:7e:ef:8d:25:
a6:45:b7:fe:3b:6e:93:2e:92:a5:49:cb:0d:5c:b7:
64:3f:a6:63:5f:2f:f4:fb:53:03:50:a9:f7:e1:ea:
f3:b0:a3:84:22:fe:67:5d:4d:62:c0:c8:3f:39:68:
00:38:d9:9e:57:83:91:19:f8:03:d2:80:0c:2d:97:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0C:0C:83:76:4B:00:A4:40:BF:80:1C:EA:9A:32:AB:85:1E:D0:27
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9c:32:b7:38:8a:e3:92:51:c1:ad:13:58:e5:63:fc:72:51:
2e:78:6c:f0:4d:48:6e:b0:27:83:34:d4:4c:b7:3e:73:76:74:
85:18:d3:8c:f2:f1:3f:3b:92:80:a5:8a:54:f6:7d:62:76:74:
6d:2d:a0:d4:fe:0c:fe:84:6c:d6:cf:5d:35:73:f6:88:cb:3f:
b0:f7:e7:3f:e6:09:a3:c9:8e:dd:c8:1a:33:5c:a9:d2:ad:29:
bf:71:3a:42:b7:9f:26:11:d9:8b:5f:1a:68:f0:0a:cc:ce:41:
ad:f8:75:1f:4d:ac:c7:e1:74:05:27:42:02:2b:39:08:64:71:
89:04:64:c8:71:46:33:ce:6b:7b:11:3b:8c:99:15:56:09:a9:
32:c0:dd:3f:61:b7:02:e2:8c:7a:d2:9c:8e:23:0b:d9:3d:6f:
24:38:23:a2:b1:27:44:66:ff:7b:fd:ba:b8:93:5f:59:80:6b:
01:31:18:8b:25:07:0f:91:e2:51:49:4e:6b:4d:15:18:c5:e6:
73:ac:75:cc:b0:bd:fa:d4:32:2c:67:c8:97:85:75:be:8f:0c:
60:06:f8:09:d9:3b:45:24:97:47:1a:34:3b:98:5e:26:48:3c:
a9:2a:69:b8:3a:50:f7:e8:f3:7b:38:54:a6:26:ab:71:74:57:
cd:d7:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:22 2026 by rpki-client