
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
File: j7ev7MJi-jz8WRYejpeLYo4_E2E.mft (raw, json)
Hash identifier: RSr6nFQLyasmU7VBWwE7iFC6xDU25x9Rqg090/pbTRk=
Subject key identifier: 29:28:31:78:9A:B3:E1:74:49:C8:EA:D7:49:40:50:F8:36:0E:D5:B6
Authority key identifier: 8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61
Certificate issuer: /CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
Certificate serial: 019CAD594133F3F8C89ACEB9A449C2102A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 07:00:33 +0000
Manifest this update: Mon 02 Mar 2026 07:00:33 +0000
Manifest next update: Tue 03 Mar 2026 07:00:33 +0000
Files and hashes: 1: j7ev7MJi-jz8WRYejpeLYo4_E2E.crl (hash: CGfd8Y+JDjQpxKDQ+zf7F1P1hU3IJOVDEEAlmVxjamw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:41:33:f3:f8:c8:9a:ce:b9:a4:49:c2:10:2a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
Validity
Not Before: Mar 2 07:00:33 2026 GMT
Not After : Mar 3 07:00:33 2026 GMT
Subject: CN=292831789ab3e17449c8ead7494050f8360ed5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:77:80:6d:95:0e:a5:52:1d:68:0b:8e:98:
c0:4e:0a:ec:eb:d6:76:a9:17:cf:1f:4a:60:ed:6f:
62:14:f5:59:96:10:79:52:2e:83:e3:4d:ad:f3:cd:
fc:a0:55:79:57:40:bf:36:e3:9b:d9:06:5f:27:fa:
2b:41:49:98:27:24:0c:08:4d:16:3c:02:ba:f2:34:
83:b6:ce:12:4b:33:00:df:2e:ac:f6:4d:fb:ac:5d:
12:df:bf:eb:7f:af:72:45:3e:9e:36:ed:59:4e:24:
4d:d5:2c:30:65:18:86:60:20:f0:1f:28:7b:bb:bb:
70:14:17:88:ca:02:50:f2:3a:40:ba:d3:78:e6:72:
a4:70:5f:e0:0a:54:7b:3b:37:ea:b8:29:06:aa:ef:
0e:40:c0:6d:a3:ba:fb:13:85:0b:b8:0c:39:aa:e8:
47:ac:12:20:d8:bc:22:b2:4e:b8:78:b5:e0:9a:78:
32:c6:71:cf:5f:18:06:5c:7a:38:75:57:02:f6:8c:
8c:7a:74:76:3d:04:27:df:ab:af:79:ee:4e:14:17:
42:e0:9f:ff:d3:8c:8c:f6:d9:6c:d2:21:d9:ee:d2:
71:f1:bc:a9:48:3d:c7:a6:ff:f7:13:9f:06:68:52:
9b:bc:1d:cb:c8:e7:33:14:03:06:70:9b:fd:ad:6b:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:28:31:78:9A:B3:E1:74:49:C8:EA:D7:49:40:50:F8:36:0E:D5:B6
X509v3 Authority Key Identifier:
keyid:8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5b:8e:50:02:8a:83:64:2a:78:c2:9a:8c:db:58:a2:15:33:
df:b6:db:4c:55:ff:3b:f6:c4:b6:80:9a:74:d0:19:b2:c4:03:
fc:92:1e:83:f4:2f:a7:36:b7:54:80:a0:4c:f6:e6:6e:0d:6f:
dd:2f:21:82:1a:19:36:53:0e:83:e7:b8:6d:8c:1e:36:77:02:
77:9b:d0:81:d8:7c:69:be:61:0c:22:f4:4a:05:e8:0d:fb:e8:
98:5f:d8:af:8e:f8:7f:c4:64:ba:d0:5c:ad:72:d4:4e:54:d6:
d6:cd:2e:a4:a2:77:e1:1e:7f:fc:a4:de:7b:bb:14:e1:fe:e8:
b5:f1:59:8d:a0:a0:ad:fb:02:52:dd:63:87:03:c0:cb:45:26:
98:36:dc:fb:11:c6:d7:98:9f:18:11:a9:a4:c2:6c:ac:29:09:
3d:cd:12:fe:ed:79:13:72:c0:8d:bd:04:21:1e:19:d7:18:f4:
eb:b1:61:8b:64:4f:43:d0:39:b3:4d:d0:b2:d7:e2:03:40:c7:
35:20:f5:51:a3:ba:12:2a:b4:4e:38:86:3c:0d:00:43:55:17:
19:c0:b7:c1:a9:51:75:f3:0e:44:7a:f2:f3:32:0b:cc:63:ef:
24:04:3e:67:59:63:9f:12:60:94:da:b3:cc:80:16:d5:38:a4:
a8:53:5f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:53 2026 by rpki-client