Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
File: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json)
Hash identifier: dKMcDLALnaLUVUFw4EhBWwfeJeu2qQrqQQnWTFYKduo=
Subject key identifier: F3:84:C9:27:17:01:4A:3D:13:5E:3E:CC:E2:97:E7:C0:87:95:CC:50
Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
Certificate issuer: /CN=ef1e225614c65ce2cf5275eb464334395c06f430
Certificate serial: 019CABD97D9019B31A2E0AD21AED2663CCC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
Manifest number: 17D7
Signing time: Mon 02 Mar 2026 00:01:23 +0000
Manifest this update: Mon 02 Mar 2026 00:01:23 +0000
Manifest next update: Tue 03 Mar 2026 00:01:23 +0000
Files and hashes: 1: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: czGaKnVonVGV7B5RCJ5t+Idyck8i9bNDWQuTait28JA=)
2: iGZBxF80eg1s-AXqofHEFgzkQW8.roa (hash: lIhOn1xqmKsRUERs7AyAkoKDdV8gvZyVvDH+bT2A3zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7d:90:19:b3:1a:2e:0a:d2:1a:ed:26:63:cc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430
Validity
Not Before: Mar 2 00:01:23 2026 GMT
Not After : Mar 3 00:01:23 2026 GMT
Subject: CN=f384c92717014a3d135e3ecce297e7c08795cc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:d4:b3:07:b8:28:47:20:d6:e7:4e:47:c8:
68:60:f7:a5:4c:7a:44:8d:29:b0:40:0d:9c:89:8a:
93:2a:e8:df:d4:b9:92:37:87:8e:8b:07:61:a5:71:
53:ae:d3:33:87:74:e8:22:bc:de:f1:a2:97:18:8f:
e9:3c:f4:11:16:a4:86:16:30:fa:2f:bd:08:34:4b:
60:f3:e0:4d:89:9f:60:ac:3f:47:8e:63:c4:c7:bc:
f1:b3:1f:7b:99:ef:c6:d8:d7:37:b3:fe:52:65:fd:
27:b4:84:75:23:ec:0a:a0:81:17:f1:0a:6e:e8:ca:
bc:54:8d:20:bc:20:83:88:cb:9e:97:7f:b9:08:5a:
65:e6:56:1d:8f:50:46:68:0a:d2:3f:0d:b1:84:a4:
4e:03:97:fc:37:f3:a8:0a:b7:8f:63:bc:25:7e:6e:
f8:4f:16:f1:b7:7d:5a:7d:f2:4f:95:36:3f:da:ee:
74:9b:20:f4:f9:22:f0:eb:f8:4d:d6:0a:4d:8d:50:
02:95:c6:a9:7f:d1:0e:66:dd:35:27:1e:d1:51:b9:
50:6f:ca:0e:8d:00:cf:f6:10:f3:ae:6c:31:9b:89:
bd:12:66:04:07:d2:0d:5b:bb:b9:81:b2:80:e8:62:
43:74:eb:3b:80:14:96:63:89:9a:be:1d:68:41:ad:
88:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:84:C9:27:17:01:4A:3D:13:5E:3E:CC:E2:97:E7:C0:87:95:CC:50
X509v3 Authority Key Identifier:
keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c9:29:6f:e4:53:05:92:b5:ea:40:c3:2b:51:f0:96:f1:3c:
bd:dc:22:fc:1b:af:ca:6a:6a:ce:12:a8:e4:55:d5:5a:45:b1:
c6:87:f4:07:ba:dd:c1:34:e3:ea:e9:44:cb:8d:d4:33:1c:e8:
5d:f4:a6:68:af:9f:03:c8:20:5e:a1:a5:36:8d:97:02:ed:13:
1e:9c:60:46:6b:d3:8c:02:a1:37:e5:25:15:02:d3:cf:97:66:
56:2c:58:14:a7:83:ea:62:ed:f7:75:a4:e5:9b:bf:1d:77:33:
ca:9c:0e:38:54:82:77:fd:12:69:d3:50:66:08:c2:71:4f:08:
5f:55:87:eb:5b:67:09:69:f1:7f:3c:0a:71:9f:5a:3f:ee:2e:
e1:71:62:d5:f7:a9:4c:ab:92:29:bf:6b:eb:c4:69:bb:60:28:
e1:a8:8d:1b:49:78:73:99:27:96:20:66:f1:c5:e1:92:a5:c6:
2b:09:b1:13:d1:58:0c:4b:ec:a5:e2:c5:06:b9:4f:40:b9:f2:
83:e2:a0:81:1b:ea:71:01:17:3e:78:bb:19:66:c0:6c:2f:ec:
2f:57:67:c9:8f:3f:50:5d:69:ae:6b:8a:53:b8:1d:18:34:47:
d8:de:04:5d:1a:b5:5a:4a:7e:c8:7d:e8:22:f9:34:78:3e:14:
50:73:3e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:01 2026 by rpki-client