Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
File: 7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json)
Hash identifier: ZckP2wlFTesaz3AJzmrahi6/mz6CeHmk/TeCLmmCaqY=
Subject key identifier: 72:65:85:E4:4D:99:A7:3A:D8:26:99:49:69:88:23:22:FB:27:A2:2B
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial: 019D382DE42070C074E84CEF27E05100CEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
Manifest number: 062F
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: 4uWpNgCX3QYTMHQ4TLwrGgDdFjYgh6iKrm2z2NXdsGQ=)
2: t5LOWwENqQioKciGyoMxLyNCNN8.roa (hash: zlv1UWEx5L67DFS1Ff+3kq6sBK6VPzVmabPisFcvJBk=)
3: wiLmfdGgzijMr6H7FRSYjpbRctE.roa (hash: Z51vNTE/VSPJwzjerq5rKZBcW7aBhn2nt4GaxW27CY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e4:20:70:c0:74:e8:4c:ef:27:e0:51:00:ce:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=726585e44d99a73ad826994969882322fb27a22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:a0:84:a0:fd:f2:b7:03:a2:cb:0c:f8:d7:
95:44:b4:60:47:50:fe:61:2c:b4:c6:9b:c2:a9:0b:
84:0c:f2:9d:a5:a9:d3:4f:17:a5:25:2e:c1:60:1e:
ee:e5:72:1b:22:4c:15:50:00:fb:92:8e:84:1c:c4:
52:74:df:47:20:ab:29:d4:7d:f9:c6:06:64:3a:c0:
57:64:0d:bb:8e:87:af:ea:70:4b:7f:81:77:5d:a1:
33:84:1a:4b:1f:cf:da:95:a3:42:36:98:f2:08:3f:
c5:f3:af:f6:c4:a9:b5:4b:85:5d:39:a5:c6:e0:41:
a7:ac:9d:ab:fb:8a:16:29:3d:fe:fa:15:e6:8a:b7:
e1:6a:d5:8b:27:ab:8a:db:8d:2e:96:bc:d8:0e:65:
34:80:da:be:88:34:6e:6f:fb:51:97:24:0d:ee:b6:
59:a3:ab:c8:2a:d0:9f:d0:2a:4b:dd:46:7c:c0:8e:
1d:6b:7f:2c:3c:cb:10:2c:39:41:ac:18:22:51:d9:
17:b8:65:6f:e5:16:57:0b:a2:9b:d7:d3:d3:8f:8b:
89:a8:af:b7:49:62:01:cb:05:54:d3:d0:80:1d:d3:
01:2e:a1:cc:ea:83:8b:e4:51:36:ff:bb:c6:ba:89:
79:2d:18:8d:3c:38:03:68:42:81:63:6b:5a:be:8e:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:65:85:E4:4D:99:A7:3A:D8:26:99:49:69:88:23:22:FB:27:A2:2B
X509v3 Authority Key Identifier:
keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:18:ae:4e:44:e5:82:35:ae:76:46:d8:fe:9d:8b:77:42:44:
84:86:a0:9b:7d:5c:0d:f8:2b:a8:40:60:b5:6c:32:20:0f:a2:
87:be:1e:18:3f:6f:f8:0b:84:2f:0a:7d:68:55:4d:25:c7:0c:
79:8d:82:c4:38:d2:6d:2f:93:39:0c:d9:81:5c:62:8f:66:3d:
20:5d:63:4a:79:b4:a3:d1:1b:0f:67:0e:87:a3:73:45:3f:b6:
b0:c9:2d:1f:a6:35:35:5d:42:7d:97:b2:12:c6:e5:b9:d4:75:
fd:7c:df:42:94:2b:b7:ce:f4:34:1f:67:ef:9f:47:fc:1d:ab:
68:3c:1b:bd:a8:67:79:f9:a1:09:79:34:03:b3:50:bc:c8:3e:
27:7c:ce:c7:a2:5e:98:eb:b9:c6:da:11:bb:21:84:9d:9b:87:
bb:04:16:e2:ec:d8:f2:a8:1f:f9:a4:2e:26:1d:95:bd:27:87:
f4:38:3e:2e:76:b0:92:74:e5:01:ca:ea:3c:fd:bc:c9:b5:a8:
2e:2d:42:5c:d3:37:b1:ed:35:c1:1c:17:6c:18:55:ea:91:d8:
54:16:e2:45:75:1a:61:4d:7b:b1:25:3c:35:52:65:e8:57:62:
f8:ed:64:52:48:70:a9:d2:27:5f:a3:f8:49:6e:a7:a6:04:cc:
c4:33:d1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:44 2026 by rpki-client