Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: 5KzO9SlOlzPPaJIvQvsdpcf72r7X48xAEBXBZyAPXcs=
Subject key identifier: C0:07:F9:54:84:E9:68:AC:FA:76:0E:44:2F:1A:18:D5:82:FC:FE:B6
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 019CACEBF8C1FF011EBCB7252752F6454CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 164E
Signing time: Mon 02 Mar 2026 05:01:11 +0000
Manifest this update: Mon 02 Mar 2026 05:01:11 +0000
Manifest next update: Tue 03 Mar 2026 05:01:11 +0000
Files and hashes: 1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: 5chmVDyBKnZA3kzCiknG6H32S4ZHBpexk29KMyjzJ6c=)
2: CM5yTRt39UsRzQIWzuT7HO7bzSE.roa (hash: RH4eRmyLdVDmBQ+RCsFz+zVNIdYG+Aj2Xj1CkOhS/oI=)
3: LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa (hash: bMz5HXK6775JKPVW+G1i9ymi7O9XK+msuKRHy3NE0Qk=)
4: psWOMQeMbdYZeEJwNKNEAJmZbBU.roa (hash: Kwf/BATNuOaMCMQQKCC+7fI7j3/5LLVOOW7HAw/+s1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:f8:c1:ff:01:1e:bc:b7:25:27:52:f6:45:4c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Mar 2 05:01:11 2026 GMT
Not After : Mar 3 05:01:11 2026 GMT
Subject: CN=c007f95484e968acfa760e442f1a18d582fcfeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:5d:0f:5e:20:75:15:8d:21:c7:a4:fd:7e:
3d:f6:fb:87:5c:55:d6:de:80:e8:96:58:ee:85:58:
25:00:83:7c:d1:52:4b:e2:e6:8f:a9:dd:67:50:2b:
86:43:b7:4c:65:2d:c7:03:c5:7e:ab:55:66:43:30:
33:8e:42:61:63:c7:5f:48:cb:63:57:32:73:af:10:
9e:61:65:2a:f9:56:83:48:17:f1:4a:63:d2:df:ef:
53:64:cf:02:59:9f:50:8a:45:7c:0f:e4:b3:0f:56:
8c:75:fb:02:a3:85:79:2e:4a:5b:5e:fa:28:9d:55:
aa:87:8d:f0:96:49:11:2c:f1:a4:83:7d:13:9a:52:
b5:3e:09:42:04:bb:06:ee:8b:b8:63:05:d3:10:df:
77:ee:7e:f9:6f:11:e6:c2:80:15:1f:1e:31:29:56:
1b:c5:77:06:d3:04:32:b8:8a:95:90:75:96:fa:ea:
6e:56:6b:d7:30:84:29:95:9c:f4:2f:e9:d4:b7:ad:
dd:d6:49:6b:8a:90:cc:54:ac:f1:73:71:7e:b5:af:
ac:7b:15:3d:1d:34:e2:8d:cc:10:80:8f:e4:3c:8f:
ee:3f:43:e9:11:be:00:80:fd:14:d4:0c:39:c4:85:
31:c3:b6:4b:54:24:31:46:e8:0c:89:ed:49:d9:00:
43:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:07:F9:54:84:E9:68:AC:FA:76:0E:44:2F:1A:18:D5:82:FC:FE:B6
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:57:71:ce:f4:25:ce:55:fe:8d:01:db:36:b9:85:a6:62:fc:
c1:6f:ff:69:b0:c5:f5:cb:38:1a:e9:44:7b:9d:93:b0:e6:6c:
e8:6c:c9:fb:b2:bc:8b:00:94:1c:c6:f1:54:b1:c2:ab:47:fc:
d4:cd:f7:8f:71:01:c5:e9:5f:7f:f4:0d:83:48:56:3d:ea:2d:
15:ae:fd:82:0d:0a:89:3d:ae:76:ae:db:67:27:0a:d9:0c:55:
5d:b4:36:9e:55:d9:ee:27:65:46:c2:a2:95:3c:dc:ec:c4:af:
5a:c9:a4:a4:7b:b3:fa:73:02:fc:14:23:29:00:cb:52:51:56:
ae:73:98:ab:70:77:d0:7e:53:1f:15:db:ec:c4:02:48:61:be:
b4:52:9a:ca:05:45:1f:8e:bf:f5:5c:25:b1:93:41:0d:59:3a:
aa:1b:4d:dc:c2:51:12:dc:d1:d8:59:99:0b:4c:b1:a2:63:87:
f3:11:3b:c4:3c:cc:b7:5f:b2:9e:4c:c5:68:65:32:00:ad:80:
91:5b:10:86:3d:bd:04:33:0f:4b:9c:a0:e3:cd:f9:5d:c9:f5:
eb:b3:c6:09:14:8f:d6:26:12:85:b2:2c:12:e3:4d:6a:41:2b:
eb:26:1e:46:9c:7d:ec:d2:70:0b:83:bf:2c:b7:7c:15:07:7c:
d4:fb:6b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:44 2026 by rpki-client