Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier: NkJfCTvImg9YyCa07xEcvgMYEk3mGb7JHcFDs3xaM6s=
Subject key identifier: 2E:F2:70:BA:D6:4A:FC:93:7C:65:A6:39:F0:E3:3A:B6:8D:4F:02:79
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 019D38D2B73E0073387D9E672ED26BB1C196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:26 +0000
Manifest this update: Sun 29 Mar 2026 09:00:26 +0000
Manifest next update: Mon 30 Mar 2026 09:00:26 +0000
Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: KIfOP/IdnmsY6m3YxZEHNJMwenA7uIPQeytnkez/mI8=)
2: Uzq6jnjiBmJhQ77sdYIGU3rtoW8.roa (hash: TaYrbh565HuhRP+MsEApRFlphctYPIuvYOeurCpD+fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b7:3e:00:73:38:7d:9e:67:2e:d2:6b:b1:c1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: Mar 29 09:00:26 2026 GMT
Not After : Mar 30 09:00:26 2026 GMT
Subject: CN=2ef270bad64afc937c65a639f0e33ab68d4f0279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:a3:50:cc:14:66:77:e2:33:cb:2a:0c:4a:
c4:84:e1:92:1d:ad:d3:6d:98:1f:21:5f:0b:83:2c:
4f:61:1d:49:af:b2:bf:ab:b5:76:49:f9:4b:78:f5:
d9:7d:5d:8c:0b:28:f3:3a:41:f4:f7:83:dc:a4:bc:
d0:a2:fa:16:a1:ff:24:47:88:09:e5:93:21:90:e4:
8e:2c:59:b0:7a:35:b3:1f:bc:e1:95:2a:95:48:5f:
e7:58:4d:7f:a1:c3:89:23:b1:d3:c7:99:2e:e1:f8:
2a:82:32:b6:2c:e5:ec:bf:69:0e:90:44:6a:b9:47:
92:99:38:87:a2:db:2c:c0:bc:37:89:c8:3c:70:2e:
de:f8:18:eb:9d:07:5c:40:5f:c8:91:65:4b:d4:30:
06:9f:c8:66:75:67:06:5d:7d:9d:0a:92:b4:b8:cd:
1b:43:76:14:64:32:8f:43:c0:d5:c1:ee:f8:82:05:
bd:2d:32:d4:f4:0d:36:0e:68:fe:2c:5c:67:06:bd:
2c:9a:b4:68:83:7a:5f:39:7d:c6:9c:a3:10:1e:67:
fe:39:69:b0:86:e0:5c:2c:d5:f3:f7:92:52:31:c2:
a9:a6:aa:01:81:7e:ac:19:94:62:ef:d4:c7:01:54:
4a:c8:21:70:75:d5:cd:08:88:6e:9d:aa:06:0b:ec:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F2:70:BA:D6:4A:FC:93:7C:65:A6:39:F0:E3:3A:B6:8D:4F:02:79
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b2:2c:7a:2b:1c:17:fe:53:94:ea:2b:86:db:3b:b7:f0:55:
77:f6:28:e6:b4:9a:bf:a2:45:f8:75:e3:db:3b:ef:7b:d4:11:
e0:0f:f5:7d:47:32:1c:8f:9a:d8:fb:95:03:56:33:e8:8d:0d:
15:4e:e4:e7:be:4a:18:58:91:a6:07:e4:71:94:00:1a:ff:b4:
8a:e3:47:14:05:fa:8f:c5:c0:74:cf:f9:bc:86:85:5c:d5:24:
2b:86:fe:99:21:17:94:e8:52:f1:70:40:3b:2d:87:7f:38:c8:
1b:31:96:99:e7:24:22:66:f4:67:2b:92:10:be:fb:49:c8:c6:
99:2e:5a:f4:a2:97:c1:75:89:84:c7:6b:3a:53:5e:a0:b4:5b:
0b:1c:9b:04:19:35:d3:69:3f:50:0c:98:0e:b7:63:30:99:b8:
ad:e8:d2:34:f2:c5:7f:92:2b:5a:35:e0:8f:00:e1:82:58:ca:
86:7d:3e:8b:ca:26:f9:78:17:13:8a:02:c4:47:55:91:5b:38:
50:95:a7:58:bd:90:33:f4:ed:f3:f9:55:3f:ee:7d:66:e3:f8:
c7:c2:3a:6e:15:0e:15:ca:2b:48:d4:d3:16:e5:3d:99:9f:8e:
7a:c9:a8:2d:8c:ee:15:01:fd:2a:6e:e0:9d:85:da:2e:1b:51:
06:e0:97:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:51 2026 by rpki-client