Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier: TZ3ZEE7yRXTPeckMtMu2KRdEQB9rhejrsxT4dHS2y20=
Subject key identifier: 5E:9A:72:E1:7D:FD:C7:8F:09:96:44:53:7C:C6:80:C0:BC:43:AE:B2
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial: 019CACB4E089D69258612FD0BDFD90D6A717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:01:00 +0000
Manifest this update: Mon 02 Mar 2026 04:01:00 +0000
Manifest next update: Tue 03 Mar 2026 04:01:00 +0000
Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: xkdevPFFxURokr+cOTrQfRtSBur1N1VWM9dzdAqPvGo=)
2: TPFA9ANmjeizoRraD4Ig8TEK1SU.roa (hash: kT6UPV2xN7mmP7EqC+AR1+y3Fgn76QDWPblq40BQx1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:e0:89:d6:92:58:61:2f:d0:bd:fd:90:d6:a7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Validity
Not Before: Mar 2 04:01:00 2026 GMT
Not After : Mar 3 04:01:00 2026 GMT
Subject: CN=5e9a72e17dfdc78f099644537cc680c0bc43aeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:ce:27:a3:7e:28:c1:ec:4b:e5:94:d7:ae:
38:b5:4c:72:38:1a:fd:8b:f3:37:00:3e:2a:b1:8a:
3e:d9:61:b7:dc:f8:7c:8e:26:16:39:e1:dd:ca:6a:
ea:59:70:a4:d2:a3:9b:9d:e7:9e:66:1a:b5:d0:e5:
5d:6f:89:4a:55:a9:91:50:f0:9f:cb:0f:36:ee:a7:
e4:8e:c5:1d:8e:c7:a3:a7:18:b2:fb:a9:6c:ac:0d:
04:10:99:f7:dc:16:fe:30:37:f2:65:9e:05:5e:b2:
b7:f9:2f:ca:ea:e2:27:35:83:da:dc:e0:73:f0:58:
14:fe:8f:7c:5b:a3:38:6c:ea:ee:fd:29:72:41:9a:
68:7f:b6:b9:fd:14:bf:1b:63:9a:4f:6b:01:d7:da:
52:3a:b8:fa:a0:fe:ec:e6:ad:2e:89:e3:93:f9:c0:
30:20:ce:4d:a3:c6:ba:d5:27:f8:ef:a6:e7:55:d1:
ab:fb:67:3b:7d:a4:c9:0a:67:21:aa:2b:bd:5e:23:
23:b4:e5:f1:a7:59:21:f6:57:8c:94:f0:e8:53:d8:
82:6c:59:b7:2b:68:f5:39:2b:d1:22:d7:c7:96:5f:
62:b8:b7:6a:dc:2b:69:45:51:7a:47:11:ee:f4:78:
8d:16:52:e0:52:fc:31:a1:bd:28:d0:14:a5:24:f2:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9A:72:E1:7D:FD:C7:8F:09:96:44:53:7C:C6:80:C0:BC:43:AE:B2
X509v3 Authority Key Identifier:
keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7e:eb:43:05:1b:d9:2a:57:53:7e:99:fb:6a:a6:e1:f1:72:
fe:8c:72:00:84:9b:69:18:76:34:db:71:51:33:43:30:ac:2a:
ee:ba:16:b7:2e:08:87:2f:a6:ad:d4:fb:84:05:7e:2a:94:8f:
a9:2e:ee:89:f4:30:ac:ae:b0:29:8d:f0:2d:ae:86:8b:46:31:
58:13:cb:d5:50:a6:58:ac:93:fb:66:c3:44:bd:d1:83:09:4e:
62:a1:e1:9c:cd:c6:a6:4d:7c:2e:28:15:24:03:44:8b:f5:70:
c1:ce:10:df:79:2a:b1:ad:b1:73:12:e4:26:98:03:12:a0:41:
9d:19:ec:d7:f2:ee:0d:b4:24:22:78:39:e3:72:17:69:16:6e:
60:d6:d7:c0:95:6c:cc:7e:20:e5:54:ec:28:e1:87:ab:da:52:
c1:56:20:c2:cb:08:88:c2:97:87:3f:58:50:9d:5d:b9:02:18:
47:bc:30:4c:c6:b8:7b:aa:43:37:7a:3d:0c:2e:30:fb:ba:50:
b7:e4:63:49:43:ac:01:75:b0:0c:a1:dd:3b:6d:a8:1d:16:44:
28:6d:2a:44:4c:65:ec:35:fa:b1:4f:4b:55:3c:02:54:c1:1d:
4d:4d:f7:08:87:3c:dc:88:16:db:d6:73:e1:d9:03:8f:7c:98:
55:67:75:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:20 2026 by rpki-client