Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: zZzHrcvvFaphEgsklWtN+mMBZQmNVl6UU0WryOn9fGw=
Subject key identifier: A8:CC:13:B7:03:52:93:F4:12:67:2C:CB:85:5C:F1:6E:66:04:32:15
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 019CAA8F98AA18D2FF0CCC9AFF9368C787BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 1013
Signing time: Sun 01 Mar 2026 18:01:03 +0000
Manifest this update: Sun 01 Mar 2026 18:01:03 +0000
Manifest next update: Mon 02 Mar 2026 18:01:03 +0000
Files and hashes: 1: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: fqFC13h+AMKhfBj1VbQLwlZJRy9Q55Mm049WjL3UCQ8=)
2: GJC0hK61YfoTGiu4_BgSpKpEET8.roa (hash: WwyFHk/cwNc1twKhKndoqjGYh79zgc/kHaQHCW2vww4=)
3: XmgvodIVZlwmFpJZFx9OEb_S0YI.roa (hash: U77Nh8N61bX2SG2LWG51QmpxAadiZWSFMU1pOMYXXLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:98:aa:18:d2:ff:0c:cc:9a:ff:93:68:c7:87:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Mar 1 18:01:03 2026 GMT
Not After : Mar 2 18:01:03 2026 GMT
Subject: CN=a8cc13b7035293f412672ccb855cf16e66043215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:5f:9e:25:15:c0:18:a0:24:1f:aa:ac:98:
59:07:07:6d:78:46:2c:d0:db:35:41:a1:f3:e6:6c:
f6:35:e5:9a:f2:03:06:a9:b6:cb:a8:59:da:91:c2:
31:62:3a:e6:20:de:0f:b6:b2:4a:d2:40:e8:20:db:
93:dc:b9:cf:a3:5d:40:13:5b:d8:ca:fa:1a:f5:f6:
ca:8e:a9:c2:d5:9e:df:ce:56:e2:d3:f2:3b:a2:99:
ee:90:b8:34:e2:9c:19:64:e1:20:c1:75:b2:32:79:
28:ec:52:a7:c6:27:ed:1a:06:ea:1c:36:4c:ff:bc:
7d:f9:ba:f0:45:85:a0:94:08:9a:4b:d8:5d:f8:01:
61:81:05:e8:f3:b2:72:9e:a2:e9:6c:c5:b7:be:87:
b3:ec:ae:f9:88:1f:2b:49:94:43:d6:62:56:cc:c0:
df:b1:8b:2a:b5:55:12:94:68:75:9f:e7:66:12:f0:
46:8d:4a:51:76:aa:e4:c8:ec:6b:14:32:cb:63:38:
6d:46:f9:83:de:cc:c4:02:5a:84:3d:e2:e0:7f:7f:
8d:80:f4:d3:3a:62:1b:2a:41:36:11:5c:5c:c4:f1:
ab:87:1b:da:45:cc:68:33:f3:b3:d7:c9:77:39:94:
80:a0:9d:84:2d:72:0c:b5:b5:06:8f:38:a1:fe:f7:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CC:13:B7:03:52:93:F4:12:67:2C:CB:85:5C:F1:6E:66:04:32:15
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:29:88:d1:8d:85:0f:df:92:24:9c:f6:09:4d:b1:9c:be:fc:
ae:04:0a:fc:c0:2e:a0:25:de:fe:14:cd:17:8f:6f:a1:c7:02:
f2:26:92:fa:44:15:cc:d3:eb:0e:04:a1:b6:19:06:99:85:60:
1d:8f:a1:b6:35:d6:3d:b3:d0:b6:c1:f4:cf:ab:6e:ad:d9:24:
04:e5:2f:42:10:0a:e3:fd:f8:3f:25:f8:e2:b1:32:3c:32:5f:
47:41:33:b5:f8:7d:31:bd:bf:97:d2:46:b9:c8:0e:26:32:92:
5e:0a:69:75:24:da:cc:40:06:35:e5:7b:b2:0e:d2:22:fe:1d:
02:2d:36:08:c1:7b:90:de:cf:2d:af:fe:4a:e1:67:cd:e4:96:
d0:f1:e8:0d:ae:a3:0c:2e:00:62:3e:ea:e4:84:c1:b1:76:54:
d1:84:b4:6e:a6:d6:a3:d9:a5:56:a5:26:e3:eb:ac:07:bc:bd:
79:61:8b:21:0a:ff:0b:a1:d7:61:de:2b:8b:63:c3:b2:40:fb:
bd:22:14:c9:ef:da:e5:f9:33:80:da:ae:05:8b:ba:78:ec:94:
4f:49:79:7a:88:7b:bb:8a:0b:74:72:6d:e7:35:92:4b:d2:99:
07:17:09:b2:cd:2e:8f:a7:45:98:26:db:6f:a9:15:55:81:38:
e4:9b:70:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:28 2026 by rpki-client