Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
File: p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft (raw, json)
Hash identifier: G5r1XizXNX65b3lAxC20T+nbAGZPjyOjvkADWk8U4tY=
Subject key identifier: D7:8C:50:67:E2:56:E5:35:1C:8D:17:CF:EA:A2:B6:C9:D8:4B:E2:31
Authority key identifier: A7:B4:87:BE:4F:27:C9:1A:E3:2A:17:BA:2D:ED:67:C3:D5:15:3D:3C
Certificate issuer: /CN=a7b487be4f27c91ae32a17ba2ded67c3d5153d3c
Certificate serial: 019CAE3555AB9C2B271477C19BCAA0165D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
Manifest number: 45
Signing time: Mon 02 Mar 2026 11:00:56 +0000
Manifest this update: Mon 02 Mar 2026 11:00:56 +0000
Manifest next update: Tue 03 Mar 2026 11:00:56 +0000
Files and hashes: 1: F4WIL5lRn1e8KEX9ZaKzwbn8OK0.roa (hash: fsVPNfzwVtcxP1d7ng53S1s+p3QUE/oW7iQYmnK5p84=)
2: p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl (hash: 0OFiFrjs4fQpprnXUXF4lSf43fubh+ZVwIGOA8SQ+SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:55:ab:9c:2b:27:14:77:c1:9b:ca:a0:16:5d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b487be4f27c91ae32a17ba2ded67c3d5153d3c
Validity
Not Before: Mar 2 11:00:56 2026 GMT
Not After : Mar 3 11:00:56 2026 GMT
Subject: CN=d78c5067e256e5351c8d17cfeaa2b6c9d84be231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:ea:03:a1:0b:f7:75:45:9b:27:a4:4e:82:
1a:02:b7:fd:f0:59:1e:e1:10:64:d5:02:6e:1e:4b:
02:2a:4d:1d:44:f8:63:e6:71:34:05:ec:23:e1:2e:
59:cb:fe:f1:a8:59:bb:9a:a9:6a:de:25:11:69:6c:
01:da:df:da:4e:96:44:2f:29:60:51:10:66:a8:83:
af:f3:0b:b3:e5:81:71:1e:b5:33:e2:7d:92:67:23:
e6:3a:91:ae:3e:f8:9f:84:2f:0b:44:f1:aa:45:dd:
7c:9c:34:84:29:49:9a:c3:ac:b1:80:c3:45:ff:fc:
01:b3:dc:49:87:f3:f2:2d:0c:92:be:00:de:c9:4b:
99:cf:0b:b0:4a:8c:29:00:8c:93:29:17:8c:93:0a:
1f:f0:96:43:37:80:51:24:43:3b:bc:68:93:dd:2b:
17:8b:6b:88:e9:e6:8a:97:19:e3:0c:f2:66:7d:78:
66:ce:83:9a:9b:e2:50:f4:51:f4:b4:6e:a5:3a:1a:
45:dc:a0:2b:47:a2:2d:0a:ca:31:a1:68:72:cc:c7:
fd:5a:9f:34:13:81:ab:e5:8e:81:eb:77:f2:ba:93:
d6:86:f0:53:58:5b:34:8f:4b:c2:4a:c7:ed:36:f7:
35:8b:88:f7:12:d4:91:56:64:16:96:71:14:42:e5:
df:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8C:50:67:E2:56:E5:35:1C:8D:17:CF:EA:A2:B6:C9:D8:4B:E2:31
X509v3 Authority Key Identifier:
keyid:A7:B4:87:BE:4F:27:C9:1A:E3:2A:17:BA:2D:ED:67:C3:D5:15:3D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:14:64:5a:ab:d7:7d:62:7b:96:0f:06:be:f8:2f:ca:b4:c0:
ba:a4:cd:c9:22:7c:4e:9a:47:01:a1:67:a6:12:97:f6:1d:cb:
b9:8c:a4:2e:42:fd:02:3a:24:71:cf:7a:fa:e8:55:59:58:73:
46:7d:ad:ba:77:65:78:c0:c5:21:9e:77:03:3b:e5:9a:05:72:
37:39:6e:70:81:8a:81:3e:60:20:e6:b2:4f:37:15:c9:25:15:
6a:12:af:18:1e:80:14:f5:f2:71:05:94:60:38:6a:fa:5e:50:
8c:dd:bd:5c:8a:24:c6:a5:c5:ea:5f:a9:bd:a9:55:05:f9:98:
95:a5:67:f0:16:9a:14:9d:58:33:8a:e1:c0:da:82:b6:c6:27:
c8:0d:8d:6c:89:9f:37:23:ab:76:70:86:d3:3f:b1:29:7f:3e:
6b:f8:2c:bf:c1:c1:44:39:c8:98:e7:aa:a8:66:ad:a4:e7:37:
bd:79:e1:36:11:d4:62:7e:db:6b:7d:6c:be:55:44:39:c0:f0:
bb:78:b6:50:61:8a:79:36:a0:e0:53:55:cf:3c:02:9d:f8:de:
88:e7:25:55:b5:07:21:9c:18:db:dc:b5:2c:bc:e0:0a:c2:d0:
b4:b3:6b:55:6d:9a:00:55:42:40:5f:d4:a0:81:cb:59:cc:ec:
bc:eb:4b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:52:22 2026 by rpki-client