Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: /bAY3qMuCbnsrhazGNI1ZrDj6mCGlk65ru+yVqHNgEw=
Subject key identifier: 84:6A:31:EC:A9:B8:1C:75:0E:CE:E1:64:63:DF:C5:1A:BB:72:74:3E
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 019CC7BEB7BACAAFBE5D5D3D2B1F0E938599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 070B
Signing time: Sat 07 Mar 2026 10:01:30 +0000
Manifest this update: Sat 07 Mar 2026 10:01:30 +0000
Manifest next update: Sun 08 Mar 2026 10:01:30 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: 4Pel5s+yL3LMnKkHUIjUUIOsksOxrBUjClC1UHAPLGM=)
2: QanxQFNXzm9WZ4FLagQm8rqjYVg.roa (hash: z/pk9haxpoiUwaj9wllu1rSy4e1+a+aVccYlUM/WIn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:be:b7:ba:ca:af:be:5d:5d:3d:2b:1f:0e:93:85:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Mar 7 10:01:30 2026 GMT
Not After : Mar 8 10:01:30 2026 GMT
Subject: CN=846a31eca9b81c750ecee16463dfc51abb72743e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:c2:66:d2:52:f6:bc:d2:98:dd:7b:b5:40:
1b:b3:db:42:6b:65:0b:b1:8e:91:a6:ed:45:d1:93:
4d:c8:86:18:75:a4:8d:e7:4d:55:25:e4:17:81:0f:
06:55:67:46:53:50:c9:f0:6b:7a:78:6d:50:b3:75:
ca:ed:7a:1d:27:36:da:64:76:d3:d7:01:0e:80:70:
9e:d2:9a:fb:c4:b4:31:f3:a6:21:07:74:69:3a:7d:
26:bb:0b:b9:1d:7c:4c:11:a9:64:4e:5a:a0:ec:59:
e6:bb:91:37:84:f4:a2:2a:69:86:05:47:87:38:65:
84:3a:cb:ee:26:07:88:a5:37:38:d9:62:7e:7a:66:
71:cc:3e:cd:77:4f:55:81:26:5e:46:07:e1:e3:e4:
b7:65:fd:a3:bd:a5:0d:3d:b9:bd:4a:12:6d:fd:4c:
59:c0:f0:71:01:1d:1e:47:1e:26:d6:38:22:02:97:
fb:53:51:29:d6:0d:8a:19:b2:b3:96:eb:59:db:58:
9e:4f:47:11:c1:c3:7f:3a:e9:5d:a6:1d:2f:2d:a5:
8d:2b:f7:ee:9d:9d:4d:86:e3:40:ea:7a:c5:ed:f6:
a1:b3:ee:e6:44:0a:32:8d:55:c1:8a:e9:c9:e5:76:
7a:c2:94:b1:cd:83:1f:c6:2b:38:32:a5:16:21:d5:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6A:31:EC:A9:B8:1C:75:0E:CE:E1:64:63:DF:C5:1A:BB:72:74:3E
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:58:de:34:b2:b4:d9:93:0a:aa:b4:58:7a:2c:3f:da:c5:a3:
2b:47:97:fe:71:ef:ed:8c:52:ed:ac:0e:8a:b1:37:b6:6a:21:
29:cb:07:aa:50:f1:59:68:86:a3:d6:9b:06:e5:e0:fe:ae:3f:
6d:96:4e:05:00:1e:41:53:21:94:6a:c1:d5:40:2b:ef:69:31:
5c:ed:ad:4d:16:ce:0c:68:ca:46:db:2a:63:63:ea:5b:79:c4:
d8:37:ca:01:4e:f8:7c:73:72:7a:68:eb:4a:a5:e5:a9:af:7e:
72:a7:6f:1d:6d:0e:05:27:1c:88:18:e5:24:f8:38:46:84:5c:
b8:d1:a8:44:87:a9:4f:8d:05:78:86:f1:d0:eb:4f:65:71:40:
25:91:22:57:04:30:8d:a3:e6:45:67:56:52:7e:46:0d:7b:c5:
33:75:8c:84:4a:e1:aa:b1:98:6c:97:52:4b:37:a9:94:2a:91:
bc:67:d8:ec:74:05:16:2b:1c:34:30:6c:9c:ba:8d:1c:12:9e:
d0:20:31:4f:7c:ff:3c:12:da:c4:ec:15:87:99:96:91:c8:85:
31:61:5b:9c:a0:68:bd:ff:e8:ba:92:41:a4:fc:96:5d:4d:06:
20:a2:03:11:4a:47:65:40:00:bb:5e:26:2c:db:d6:51:3b:c1:
aa:a9:22:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:00 2026 by rpki-client