Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier: ATy3jpN/4emdDwmoopRWcFSrPYX8+JxOyhNe828fduI=
Subject key identifier: 46:DE:3A:3D:9B:7D:01:F8:60:D7:BE:80:66:89:C9:84:98:87:FC:12
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 019CAE3552162CB7419CC5C14DFFBC5C17A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number: 126F
Signing time: Mon 02 Mar 2026 11:00:55 +0000
Manifest this update: Mon 02 Mar 2026 11:00:55 +0000
Manifest next update: Tue 03 Mar 2026 11:00:55 +0000
Files and hashes: 1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: lnd35zS0QoiBI7pe0cUS8ah0FoxWQyoAx35kmqvv354=)
2: Z-Nhf0GUm-eK6gBfuWRH4mBMDa8.roa (hash: j8yQFLI888ZXRlZcfp3XqLieyu9/rqxMNp1WWGddyFc=)
3: zQxCSJAybTKhMbu9tj9geo08EHM.roa (hash: vRuFfeMEunDY9UG2VQ5bdPd5mpRSySgDc592VktLEXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:52:16:2c:b7:41:9c:c5:c1:4d:ff:bc:5c:17:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Mar 2 11:00:55 2026 GMT
Not After : Mar 3 11:00:55 2026 GMT
Subject: CN=46de3a3d9b7d01f860d7be806689c9849887fc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:60:69:3e:23:1d:1d:f0:d4:23:d2:0c:39:61:
4a:ef:b9:27:94:2f:5c:ea:df:b0:48:43:fe:00:94:
10:9b:3a:7b:fe:ed:f9:26:47:b3:86:81:03:dd:a0:
58:f7:b6:f5:d3:c3:89:b4:3b:f5:2f:e5:cc:e0:b3:
51:ad:3b:0d:87:5f:40:3d:bd:23:99:24:07:d2:d5:
b1:f7:90:35:71:9e:86:7c:06:7a:20:fe:d5:76:4b:
6c:90:1e:07:1e:d2:dc:27:6a:b7:80:f2:01:8d:77:
57:75:b1:b0:8e:2d:50:76:76:db:98:c1:46:0d:79:
26:a8:e6:9f:e9:2c:1d:b2:40:9d:36:25:30:1b:e8:
ab:be:41:41:b4:f4:16:45:9e:5d:54:44:c3:79:d4:
86:7a:a1:36:e6:cc:ea:66:34:2a:b6:f6:cb:93:ea:
2a:18:9d:6f:76:d2:f0:43:68:9a:ba:93:ed:14:1c:
4a:0a:32:09:9a:56:c8:41:52:5b:82:04:d0:1a:4c:
0d:40:5c:1c:99:bf:d2:c4:07:49:c5:89:b9:f5:66:
f4:ce:34:47:a4:9f:b6:72:f9:5c:ff:f6:60:80:41:
51:7e:a4:f1:44:89:f8:e8:61:fb:b2:0b:16:58:76:
83:83:50:cf:77:e7:8c:d7:33:25:0e:6f:7b:e1:e1:
06:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DE:3A:3D:9B:7D:01:F8:60:D7:BE:80:66:89:C9:84:98:87:FC:12
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:7d:11:31:0d:e3:e3:c2:d3:e5:f0:5f:8b:7d:f4:58:db:98:
ae:78:65:ac:7c:77:00:46:61:31:ce:20:f9:b9:a7:59:35:c1:
ca:2a:df:a2:7e:a2:1f:3b:73:ed:a2:f0:b8:42:2a:18:17:42:
b5:dd:f3:24:86:8b:f4:aa:2c:0d:58:c4:b4:c3:7a:d6:78:29:
6c:2c:86:ba:76:bc:72:22:84:2e:49:10:19:d4:7a:81:06:34:
82:6f:12:5f:f5:4b:e9:80:28:01:71:6d:a3:c9:cc:3c:22:4a:
b0:32:f7:db:0e:fe:b1:7b:9f:d2:22:c4:9e:dc:7d:19:57:05:
99:3e:7f:d4:bc:8c:6b:d9:44:f4:19:e4:c7:3e:a3:c9:73:94:
13:b8:18:1d:17:41:75:ae:ed:0c:91:26:0e:01:d3:8c:33:0c:
fb:72:b2:26:1c:b8:59:c0:50:0e:bb:32:65:cf:64:b6:1f:84:
f8:c3:83:26:d2:14:87:b1:4a:3a:5a:01:ca:95:5e:b0:fd:19:
cb:df:d8:69:2c:7f:68:29:71:15:ad:55:9c:30:fc:d6:d2:b9:
31:76:5d:36:1d:44:73:85:1e:2f:73:cd:54:a0:a4:95:d7:f3:
3a:44:90:19:3a:4d:0f:83:01:d9:51:65:43:e9:22:b1:22:3d:
66:e8:f8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:14 2026 by rpki-client