Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: XcA+HocSIPHYBu82zHDnuP7LhFZMj3HO63SQCeMdask=
Subject key identifier: EA:50:03:B0:8D:6E:66:61:1F:71:6D:2F:C3:B5:74:EE:3D:5F:22:B3
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 019CAB34280ACEF7D989323F92418634E1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: 0423
Signing time: Sun 01 Mar 2026 21:00:47 +0000
Manifest this update: Sun 01 Mar 2026 21:00:47 +0000
Manifest next update: Mon 02 Mar 2026 21:00:47 +0000
Files and hashes: 1: 200hGiiiZsPIFyhRS3fgiw7TDL0.roa (hash: RXdmnfglVdphnX74nph9B1kezoQQBk9ZlsO2RYNXwvo=)
2: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: d8Y6pJHBtkIqE8iY8V6njGznOpEnhLhAR4/OlAO5pOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:28:0a:ce:f7:d9:89:32:3f:92:41:86:34:e1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: Mar 1 21:00:47 2026 GMT
Not After : Mar 2 21:00:47 2026 GMT
Subject: CN=ea5003b08d6e66611f716d2fc3b574ee3d5f22b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:fa:49:29:ca:83:5b:ef:8f:75:c1:10:1e:
61:06:cf:37:a3:11:d2:4d:5a:4e:21:a4:bd:27:c3:
65:0d:05:53:09:3d:f7:77:a7:62:65:06:61:ba:5f:
14:5d:f6:ff:d6:d5:72:30:cc:af:4d:cd:e2:97:70:
08:8a:14:32:11:9a:65:73:9a:9a:bd:4a:6a:28:d8:
2a:32:5f:30:60:ef:70:d6:3f:0d:c5:c3:9f:99:b2:
83:de:ac:dc:9b:6a:e1:23:50:2e:7d:12:eb:5d:77:
72:f4:85:32:9d:0d:8c:ca:cc:28:3d:fb:fd:28:51:
b8:d4:27:3f:4e:08:42:4e:66:81:e9:e6:37:90:59:
0c:2b:27:6e:7b:ab:03:7e:e3:f3:6f:83:fd:08:e3:
ba:df:cc:a5:4f:96:c3:c7:d3:1b:97:2d:a0:65:86:
07:88:9e:75:a0:12:2c:b9:7b:8a:bf:6e:f9:9d:3a:
81:2d:e3:dc:7f:c4:46:4f:34:a2:a1:48:95:1b:86:
08:17:02:5c:1b:a9:1c:1b:72:29:0a:50:7b:44:35:
9c:21:77:3e:ff:71:d9:0b:ff:55:27:dd:98:59:27:
98:72:61:9e:46:e8:ba:b1:8b:e4:7f:42:8c:dd:57:
ea:33:72:2b:de:f8:f8:6c:0c:8b:2a:d5:6e:e4:76:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:50:03:B0:8D:6E:66:61:1F:71:6D:2F:C3:B5:74:EE:3D:5F:22:B3
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b6:54:a7:e3:da:86:85:c7:3a:86:e5:4d:6f:90:74:9e:cb:
4f:2f:57:4c:86:ee:62:2d:90:af:18:8f:8f:8d:cf:d3:68:a4:
cb:f5:41:3d:c1:ea:35:a8:59:9a:c0:98:d1:9b:45:e6:5e:31:
c1:e3:94:37:73:d8:dc:1f:e6:0c:24:c5:b9:f3:fe:9a:6b:24:
3c:e9:6b:7e:d5:32:e2:5b:0a:ef:72:41:bf:e5:f5:66:68:e8:
19:3d:80:3f:36:d5:45:2f:fd:69:53:5e:e4:b3:67:cf:e5:50:
4f:71:dd:f8:bd:d2:cf:d4:f7:72:59:d5:1a:a6:d6:c3:cf:db:
a4:04:7b:a9:81:c9:e4:58:f1:fe:6a:30:6e:14:e5:52:93:18:
a2:54:be:c8:92:77:6a:da:02:72:b1:67:52:40:c4:af:1b:c4:
e1:5b:ac:77:52:5d:ee:64:55:2c:06:9e:92:33:52:d8:9b:d2:
21:d0:4a:5d:17:44:0c:5b:aa:b8:21:8c:80:32:c2:b5:b6:99:
2f:6b:80:53:98:ae:ef:ee:77:5a:21:d4:c7:da:ab:58:5a:47:
32:4d:8d:1e:b4:d0:dc:db:98:a7:61:06:be:2c:22:a2:e0:c3:
67:ca:74:05:61:80:87:93:cf:e0:72:f8:da:e4:a7:b1:dc:94:
97:73:35:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:13 2026 by rpki-client