Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier: yiDskz1IEN/5evyAs4fK99VIyQ6bygm8hlrs4fSVZPo=
Subject key identifier: 84:C9:18:2D:36:C1:CC:CD:6B:18:1B:B1:31:B8:11:AB:34:1F:5F:DE
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer: /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial: 019CE636D83ED11E2BF3E25CF99DF5E339F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number: 0623
Signing time: Fri 13 Mar 2026 08:01:19 +0000
Manifest this update: Fri 13 Mar 2026 08:01:19 +0000
Manifest next update: Sat 14 Mar 2026 08:01:19 +0000
Files and hashes: 1: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: zwBYCwkVhAKhbjRxhNSB3cC+RdBUM9ljEg7cIfS9L28=)
2: DBz0WhaRA9wNrK9K1etEW30ajBM.roa (hash: TIvrus04yBKxsgpsBLzS8XeHM34FR+aAzVV81lSqNzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:d8:3e:d1:1e:2b:f3:e2:5c:f9:9d:f5:e3:39:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Validity
Not Before: Mar 13 08:01:19 2026 GMT
Not After : Mar 14 08:01:19 2026 GMT
Subject: CN=84c9182d36c1cccd6b181bb131b811ab341f5fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:07:26:8c:e8:0b:94:48:6f:69:8a:d2:d8:
06:67:75:30:c4:ce:20:90:d3:22:5b:72:c1:84:6b:
ca:0f:dd:96:40:be:ea:6b:50:8d:d2:23:4f:9e:09:
07:9c:de:78:b3:57:17:7f:48:52:68:6d:d6:e1:ae:
4f:a2:a0:51:cb:c9:ae:58:c3:7f:da:77:56:7b:ea:
48:5c:24:0b:bc:e5:0d:0c:2b:5f:43:2f:b0:26:36:
8d:ea:d9:a2:e3:10:76:8a:ba:cf:23:7a:68:6c:15:
0f:f3:0f:d6:0a:17:05:ef:32:f9:10:92:60:b9:68:
ff:f1:31:8a:dc:f3:67:ba:0d:7f:4e:8a:15:08:50:
f1:8e:f3:10:dc:07:47:42:47:a2:c8:44:8d:13:47:
25:d1:74:ef:13:03:38:29:4c:33:eb:c1:c1:3f:3a:
c7:61:45:5b:2d:9a:9c:77:e4:4e:71:93:2f:7d:67:
6f:44:79:14:17:ca:3f:c0:ba:e9:c9:5e:2b:01:07:
7b:de:4b:c0:d8:46:03:1b:e9:da:5f:7c:6e:d0:a2:
e3:43:53:1d:ea:b0:7e:81:b7:54:6d:ed:d3:c1:d6:
03:07:77:dd:fb:59:d6:ae:5c:bd:03:7d:88:cf:d0:
3c:dd:f2:46:90:98:97:84:b6:74:4c:16:15:a6:d9:
0f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C9:18:2D:36:C1:CC:CD:6B:18:1B:B1:31:B8:11:AB:34:1F:5F:DE
X509v3 Authority Key Identifier:
keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:93:8a:bc:03:8e:44:92:dd:fa:6d:36:33:ec:a9:9d:e2:cc:
22:7b:c5:c8:17:a7:c7:cc:80:4b:96:0c:9c:82:bf:70:f7:ea:
c4:f9:f9:74:cb:fb:07:81:b3:89:c1:bf:1b:fc:59:1a:27:7e:
c3:e0:22:3e:0e:2d:c5:8f:dc:ba:90:b4:a1:06:fb:21:d6:4a:
7c:db:da:6d:c8:44:e3:75:a8:64:14:e6:02:cf:2a:29:1b:ec:
a2:19:97:39:a3:e2:57:3c:b9:e3:fd:a7:f7:0b:76:10:82:19:
4a:7e:63:35:d7:e8:60:b2:a9:cd:a0:f2:4f:38:db:b7:b2:70:
48:2c:94:a1:ce:c3:55:ea:61:d2:c3:38:e1:a7:54:52:7a:0a:
e4:9e:f0:17:3d:f2:ec:0d:b3:74:cb:8a:e8:36:19:73:4c:f5:
22:e4:1a:d6:7a:55:79:b7:cc:7b:88:50:c7:e1:ef:13:40:3e:
96:24:76:74:0b:f6:4f:bf:76:2d:20:2d:d3:13:cd:fb:61:da:
ad:02:a2:46:f1:74:dc:8e:8b:e8:64:bb:36:94:83:19:bd:62:
0b:88:1b:9b:85:aa:86:75:3d:d0:f2:40:25:0d:ac:34:f9:d3:
ba:b6:4f:cd:18:14:79:4c:95:d7:b9:63:3a:2f:b5:8a:1c:59:
2a:76:29:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:43:46 2026 by rpki-client