Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
File: ezF1mINz5Wtv_gsVofx11Gk64sA.mft (raw, json)
Hash identifier: XzmJvyD4Hl9sltzVVaqS42OD6aKXq75FkTtu0IoftZI=
Subject key identifier: 7B:F9:3A:DA:9B:9C:43:1A:23:AC:7E:8E:26:AF:B9:E3:19:7F:EA:74
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Certificate issuer: /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial: 019D3940C95E6415A5FD815CEA3B1C8A89A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:00:39 +0000
Manifest this update: Sun 29 Mar 2026 11:00:39 +0000
Manifest next update: Mon 30 Mar 2026 11:00:39 +0000
Files and hashes: 1: JhpQkfIoKyp0VaSZxZLNw6jUfAI.roa (hash: 4h1dtzwyhpjNGvQdPUfuv1zV9ouJgOTf1l7tAneTCYU=)
2: ezF1mINz5Wtv_gsVofx11Gk64sA.crl (hash: /t1zoIRt+jqwHGBAYnegTjmAJSXmwOpGiaBacjQT2rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c9:5e:64:15:a5:fd:81:5c:ea:3b:1c:8a:89:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Validity
Not Before: Mar 29 11:00:39 2026 GMT
Not After : Mar 30 11:00:39 2026 GMT
Subject: CN=7bf93ada9b9c431a23ac7e8e26afb9e3197fea74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cc:8f:4d:f6:f1:df:af:7c:7d:9d:53:83:9c:
f7:ab:08:6a:6a:48:12:04:f3:0f:6b:15:ac:50:90:
b6:fa:d1:cd:b9:ae:f8:3d:36:ee:92:84:35:a3:e3:
c7:17:cb:bf:53:48:d5:51:cc:23:c6:9f:5b:69:90:
e5:8a:4c:b8:ff:b2:b4:b3:b6:61:57:cb:ed:9b:90:
39:29:4d:81:38:21:bc:a1:3d:81:83:df:5e:ab:f6:
9d:1b:5b:ab:ea:e5:ab:ec:71:dc:9f:31:3f:9a:4d:
03:cd:da:87:fb:52:12:24:d6:d0:ae:d4:a6:1b:2e:
ab:52:1d:91:3f:c9:b0:a0:fa:ee:69:3d:0c:9c:5e:
43:c0:ae:94:f7:d3:7f:44:08:80:73:b4:9d:0f:8b:
0d:26:11:50:b4:e8:b2:9a:6f:96:bd:16:ef:87:db:
1d:04:f6:a4:3a:4a:be:61:97:aa:c9:28:a9:14:06:
c8:b9:53:b5:97:3b:f0:10:ac:36:8b:5a:6a:e4:a7:
cc:4b:12:3f:a6:67:d8:f3:55:c3:c3:9d:69:5b:01:
99:82:f9:a2:51:13:57:19:f8:ea:81:db:4e:52:11:
7b:fd:23:4f:42:ba:90:28:8e:22:28:56:8b:20:82:
80:13:6e:24:5a:35:60:ac:05:5c:3e:de:d6:eb:3c:
fd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F9:3A:DA:9B:9C:43:1A:23:AC:7E:8E:26:AF:B9:E3:19:7F:EA:74
X509v3 Authority Key Identifier:
keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a8:ea:3f:1e:9f:0b:e6:a6:f6:55:9d:a8:9b:1b:19:71:39:
80:d4:3f:b4:93:66:35:7d:57:b1:5f:5c:31:db:93:d2:bb:d7:
26:87:ed:7a:f8:35:33:07:cc:cd:2d:2f:00:e0:1e:54:f6:d6:
53:74:36:3b:16:4b:03:db:86:e0:3d:31:d8:34:b3:38:89:56:
10:5d:76:ce:eb:7a:66:a7:1e:99:f9:8a:ba:08:01:fd:55:3a:
75:14:24:7b:53:a6:46:6c:43:74:30:1a:58:dc:dc:b5:74:65:
7a:1d:f2:ca:cb:bb:ef:df:75:79:75:57:84:d9:0a:9b:39:f7:
1a:75:3a:22:b2:52:a8:1f:41:66:05:d6:e6:fe:65:f9:92:8d:
bb:ad:56:0e:cc:e7:c8:24:ac:43:45:de:d7:1e:31:6a:15:96:
74:70:9a:fa:11:50:c5:38:27:ed:ab:31:4c:35:36:5c:ae:a2:
de:41:1f:c4:f3:ea:58:67:82:11:6d:e2:f7:ea:a3:c5:f7:cd:
66:73:62:7e:13:b8:f3:0a:9e:cd:e8:d3:50:5d:eb:f9:15:41:
94:33:f9:3b:b3:1a:1b:13:21:d7:28:9f:66:1f:b2:f7:1f:42:
d2:68:60:98:6b:27:d1:63:dc:7e:99:15:9e:c4:04:9a:5e:97:
98:b4:ee:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:57 2026 by rpki-client