Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier: GsjxF/MYtbutPN2xgklj85I4DQQeBDKrlORS4Aseixo=
Subject key identifier: E9:6C:45:FD:A8:21:63:B1:F4:03:C2:F8:B4:FF:38:FD:DE:16:16:A7
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial: 019CAE35519C7B4DACDFEF9232335BEAC046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number: 0A6D
Signing time: Mon 02 Mar 2026 11:00:55 +0000
Manifest this update: Mon 02 Mar 2026 11:00:55 +0000
Manifest next update: Tue 03 Mar 2026 11:00:55 +0000
Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: oR3dwS/jv0SlveeSJgcFxU2El8ry/tn0elGww6cUpEY=)
2: prj-gjU2FJGtEVAkFqN1UEoiuck.roa (hash: MBD1FKmACbSwTw7FTssOYwGdssDUFI7ku4bKYJP3LtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:51:9c:7b:4d:ac:df:ef:92:32:33:5b:ea:c0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Validity
Not Before: Mar 2 11:00:55 2026 GMT
Not After : Mar 3 11:00:55 2026 GMT
Subject: CN=e96c45fda82163b1f403c2f8b4ff38fdde1616a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:8e:e2:f6:18:ee:08:78:2c:c6:62:31:78:
35:1c:94:a2:e5:46:5c:c5:4a:80:41:b2:9f:b7:53:
32:fb:c1:7c:0c:ab:f4:7b:50:1c:81:83:3d:b9:a0:
37:6e:a9:e2:3b:26:c5:40:c9:73:eb:f3:32:c7:a1:
29:1c:7a:ef:bc:4b:7e:f6:f7:9f:d2:4b:71:fb:c9:
0b:0f:75:90:19:39:75:03:9e:c8:00:5d:15:36:d9:
34:b1:20:f0:25:ca:13:52:26:88:8a:83:1a:3d:82:
28:da:8f:f5:1e:83:93:f9:60:d5:f8:58:26:81:58:
9b:c0:d2:0d:5d:d9:ca:2e:a0:8c:a6:e8:39:ce:49:
7a:6b:80:19:b5:c9:b3:5f:e9:44:dd:09:d1:bd:fd:
c3:1e:03:27:1e:f8:8d:0d:cd:e3:c0:03:d8:86:12:
5a:1f:c5:e8:f1:24:af:61:e2:65:35:b1:0a:6f:53:
a0:e4:0e:db:81:d1:66:12:75:62:26:93:c2:a6:f3:
8a:93:59:51:6c:82:26:05:8d:53:16:20:39:4f:85:
1f:a3:5a:ad:86:4f:1f:c1:f7:67:6f:ed:18:0e:6a:
51:b0:9e:95:d6:7e:8b:bd:58:7a:3c:c9:a0:d8:e3:
25:c2:b0:99:9e:84:0e:a9:82:23:c8:7d:5d:59:c1:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6C:45:FD:A8:21:63:B1:F4:03:C2:F8:B4:FF:38:FD:DE:16:16:A7
X509v3 Authority Key Identifier:
keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:00:e7:29:57:44:a8:16:85:59:2a:64:56:08:c3:d7:13:3f:
c2:02:ae:40:fa:ad:9b:2d:7c:30:b5:46:30:78:71:20:3a:03:
fa:02:e3:31:c3:96:df:cb:26:1a:db:b6:8e:98:66:7a:f0:59:
1f:bd:c4:3b:8a:23:1e:0b:4d:e3:11:4e:5d:9c:2d:c0:85:30:
21:22:81:45:b4:a6:10:87:52:c8:80:7a:e6:45:cd:0c:e5:db:
17:30:5f:7a:b5:1b:ca:3a:c5:f1:35:e4:9a:b9:69:11:3c:b3:
7c:98:a0:66:dd:67:c7:bb:1a:ec:fd:b8:96:c4:9c:44:4e:e6:
f6:1b:6b:2f:50:93:3f:c2:a9:83:6b:ea:c8:14:d1:da:f3:9b:
38:40:92:2e:f0:ec:a2:30:7a:83:d6:db:62:33:15:6e:51:eb:
d0:64:b6:26:04:e2:ee:6f:30:12:73:68:32:63:30:fe:6c:d6:
f5:e0:5c:8a:40:a5:51:4e:66:9f:84:52:b5:b8:49:4a:0b:88:
3e:1e:0d:6b:21:29:b3:a5:c1:6e:0f:e2:8d:ea:e8:e9:e5:c7:
90:37:49:22:bc:a3:df:2a:4f:0a:48:ba:e7:87:d0:95:2d:0b:
87:79:bf:05:45:62:96:a9:b2:e1:39:ee:70:fd:e4:a5:c0:b9:
ee:58:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:02 2026 by rpki-client