Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
File: 58fsjXgFA9t8q8sUHWuZHNAppqI.mft (raw, json)
Hash identifier: Sf4SSWh4gELQmXNA11qlVIuVRkM8HZoGd9/gu9YIw+M=
Subject key identifier: A0:B8:C8:49:76:68:86:49:3F:3E:F7:99:5F:B6:79:99:50:99:73:7B
Authority key identifier: E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2
Certificate issuer: /CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
Certificate serial: 019CAD595BDA7A221FD0F21584C5B926E8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 07:00:40 +0000
Manifest this update: Mon 02 Mar 2026 07:00:40 +0000
Manifest next update: Tue 03 Mar 2026 07:00:40 +0000
Files and hashes: 1: 0u1EuXjDpMxmJEton1vb24EC90g.roa (hash: c5s8FvXe/Y+Qj5eKBuhwHIjGOjYzX65vKHhFShS4Kfo=)
2: 58fsjXgFA9t8q8sUHWuZHNAppqI.crl (hash: hItyphRYJqSIFID8Hsx80oKHcnRw3tWLr66VFZMOBoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:5b:da:7a:22:1f:d0:f2:15:84:c5:b9:26:e8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
Validity
Not Before: Mar 2 07:00:40 2026 GMT
Not After : Mar 3 07:00:40 2026 GMT
Subject: CN=a0b8c849766886493f3ef7995fb679995099737b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:15:77:f9:58:47:20:b1:07:62:3a:a1:d3:
26:87:89:14:71:14:66:44:a0:23:a2:8a:f7:12:8f:
6a:11:3e:1a:1b:c6:4a:8c:71:18:07:df:f1:a9:e9:
58:cf:ad:22:78:8e:14:90:ef:db:54:2c:07:d4:98:
46:e0:bf:3e:3b:72:18:f5:0f:81:de:3b:9b:1b:7f:
06:59:b6:91:8e:d2:f3:3b:76:dd:22:83:69:c4:ab:
00:42:66:14:7d:d4:15:54:df:b8:e0:eb:f2:db:9b:
04:27:b2:c4:f8:47:13:67:1a:30:ad:89:40:61:4a:
04:c4:91:74:36:76:ab:f4:63:9e:a5:ad:9e:38:99:
58:a1:6a:98:27:ff:7f:47:00:fa:26:2a:e6:d3:54:
d5:12:e7:26:1e:a0:a1:44:e7:69:9d:f6:a1:56:f6:
12:37:a8:9a:8e:d1:32:f9:95:c9:4a:5d:ce:be:2f:
ae:5d:d3:82:bb:45:92:a0:c5:eb:bd:11:4e:f7:63:
6c:7d:55:3c:90:7a:9e:ba:36:cf:0d:14:69:e3:42:
e4:1f:02:55:49:5c:72:f0:86:1f:6b:49:fc:df:e8:
5a:3f:41:d3:62:38:36:67:a9:29:cc:f7:96:1f:33:
94:75:3a:f5:b2:55:b1:ff:f8:74:53:13:c6:1a:4c:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B8:C8:49:76:68:86:49:3F:3E:F7:99:5F:B6:79:99:50:99:73:7B
X509v3 Authority Key Identifier:
keyid:E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:61:cc:fa:11:e4:e8:94:27:1a:fb:af:48:62:a9:3c:a4:5c:
3c:25:6b:c3:f5:aa:c8:28:5a:08:b8:0e:49:2e:e8:ce:51:fd:
11:38:c8:97:62:a7:5e:7b:1b:af:a0:ec:2c:19:6f:ac:c1:5f:
59:17:9f:46:ef:9c:84:da:5f:1e:e7:c7:02:19:b3:fb:0c:9f:
77:0e:c2:71:c8:9e:e6:9b:bd:58:12:45:c1:3f:39:30:2f:2d:
45:ba:97:cb:e7:a8:38:23:1b:13:d4:4d:b7:05:d2:07:d7:0e:
f1:97:8a:bd:50:17:77:6f:f6:86:b6:6d:64:61:a5:fd:2d:58:
ba:0e:96:9e:98:4b:83:a0:7a:e3:d3:f7:af:a0:e4:d2:0c:ca:
e8:63:92:70:45:fb:59:9b:9c:75:e7:22:f2:c4:84:4e:ce:ee:
7b:bb:48:e2:e2:ea:a0:4d:de:85:8d:c7:5c:e2:0d:32:e9:19:
32:1d:f2:ef:c2:a7:77:0d:08:a6:e4:0d:79:54:c3:a0:6a:0c:
a6:b2:ed:79:e4:1d:a2:1b:2d:e5:b9:21:e7:2d:3e:df:c8:91:
9a:cd:18:5e:c6:3e:12:75:b6:1a:21:79:28:1d:fb:db:7d:c0:
51:9a:20:3b:29:5c:d5:da:e8:da:a3:0b:b6:56:ec:f1:a6:ff:
cc:e8:2f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:30 2026 by rpki-client