Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
File: 7WoxJ-11rNJGANs1qPIw4vMkug4.mft (raw, json)
Hash identifier: 4gZbgKzs/8ILong3rnj07Dx7MdyMsi0oGtbFwDytRb0=
Subject key identifier: 28:47:38:34:1F:27:C7:F4:54:E8:AA:7D:B5:4E:FA:69:32:C2:C1:96
Authority key identifier: ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E
Certificate issuer: /CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
Certificate serial: 019CA945AC4EE9A94574C8BA07DC321858AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
Manifest number: 4D
Signing time: Sun 01 Mar 2026 12:00:41 +0000
Manifest this update: Sun 01 Mar 2026 12:00:41 +0000
Manifest next update: Mon 02 Mar 2026 12:00:41 +0000
Files and hashes: 1: 7WoxJ-11rNJGANs1qPIw4vMkug4.crl (hash: obCXrBpue2+vu8fSI6w93O/ncsjB6isA1MncPbNO9RQ=)
2: RQqhLPcGGSGX-Yx2wib2KDftxXQ.asa (hash: aHQ4ca8e5T8BDTfMZOey9jkGfKWYE/aGZxfTiuf/1Ro=)
3: jFPGtX_FcQAwHXe-QQOgTka56j8.roa (hash: g/NOz6pPl41kH4Yiy/SzHiZpH6VRanD2q2qJkEMccn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:ac:4e:e9:a9:45:74:c8:ba:07:dc:32:18:58:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
Validity
Not Before: Mar 1 12:00:41 2026 GMT
Not After : Mar 2 12:00:41 2026 GMT
Subject: CN=284738341f27c7f454e8aa7db54efa6932c2c196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:68:23:fc:3b:a7:70:a7:4c:8e:23:50:9e:
4c:7c:a6:af:9f:92:a0:0d:b1:14:da:b0:04:2c:dc:
41:c5:8a:ac:43:b9:c5:c4:85:2d:46:d7:3f:27:d6:
8a:39:c7:59:74:7e:b4:39:40:d2:38:ff:e8:ac:78:
67:40:a3:97:b8:21:82:35:02:8a:13:52:ac:44:2e:
f1:35:67:76:dd:62:90:e3:04:79:e1:66:24:1c:51:
bb:2f:08:6a:85:fe:58:ac:74:6a:9e:bd:04:fd:94:
49:5c:5e:2e:a4:52:df:13:7b:c7:91:5f:26:43:ec:
db:d1:b1:75:67:59:2a:ad:19:7e:c0:2a:d1:f6:80:
6b:cf:4e:fd:01:47:1b:6b:0e:5f:1c:f1:af:27:15:
82:26:e9:ca:fe:60:a4:b5:91:9a:29:ee:be:65:ec:
bc:13:aa:c7:e3:d6:96:b5:38:21:17:43:b5:bf:78:
5a:32:30:3d:fc:df:fa:8d:9e:8c:86:b6:b0:6e:0d:
b5:26:d6:e6:da:ac:18:4c:cc:8d:26:4f:e6:5b:42:
8a:6b:b3:a9:3d:d1:5b:d2:c7:23:08:6c:4d:fa:bc:
8b:28:11:c0:3b:3c:ea:d1:24:07:7f:bd:27:03:0d:
ad:7f:d3:67:24:63:5d:8d:18:a2:3a:ab:c0:bd:3c:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:47:38:34:1F:27:C7:F4:54:E8:AA:7D:B5:4E:FA:69:32:C2:C1:96
X509v3 Authority Key Identifier:
keyid:ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f4:e2:ac:bc:7c:d3:6b:11:99:71:87:7a:5c:dc:74:2a:0c:
92:89:73:eb:52:a5:c9:8e:fb:bd:65:a3:4d:bf:dc:6b:8a:88:
b0:7e:31:dd:2c:e2:d8:ed:f4:51:c0:68:bd:ff:41:64:06:24:
f8:97:49:04:53:c3:e3:74:a2:a2:4f:d4:d8:81:8a:8f:db:fb:
3b:b2:13:db:d9:cb:a8:46:cc:ee:57:0b:5d:03:43:21:c5:52:
50:02:18:76:a9:d4:8a:95:1d:0c:4b:f2:ec:4c:5e:7f:ca:c4:
13:06:64:35:5c:fb:2f:f3:ee:2d:e6:7e:ee:b9:2d:d7:70:cb:
44:31:aa:be:ce:d2:01:56:78:66:1b:4b:4e:88:38:f1:b7:98:
e9:25:d7:ed:44:d4:40:91:2b:29:45:4a:72:57:13:be:5b:c6:
ac:4e:5f:fd:b7:96:11:d6:e1:c5:fa:c0:80:cb:8d:97:07:a3:
d4:d4:8a:f0:c5:b1:c0:20:49:0f:34:76:df:c4:07:f1:13:57:
c2:11:e2:e2:9b:37:fa:d2:fc:cd:a4:70:77:3f:7c:ff:00:bd:
69:41:67:05:0b:fd:20:ff:5b:a3:fc:68:fc:eb:2f:e2:ca:9c:
9c:3d:ee:20:4b:16:50:78:da:4f:43:e5:de:1a:f3:ee:43:2a:
0d:8b:39:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:52 2026 by rpki-client