Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
File: d7yR94ozULrLv743b4gTIS0UmTE.mft (raw, json)
Hash identifier: 91vdezIHgoxU4MQi6OUtZuuGIGUeJxqDnoVSV1BRIoI=
Subject key identifier: B7:B5:CA:D3:4B:5E:FC:D3:B6:0F:CE:4E:33:34:DC:7F:0B:F0:48:73
Authority key identifier: 77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
Certificate issuer: /CN=77bc91f78a3350bacbbfbe376f8813212d149931
Certificate serial: 019D37F700E3952862B2806C55D9F6A13A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:27 +0000
Manifest this update: Sun 29 Mar 2026 05:00:27 +0000
Manifest next update: Mon 30 Mar 2026 05:00:27 +0000
Files and hashes: 1: KH6ejIMdhy_mMZU1YZa7EnoxyY8.roa (hash: Ow6WQnn0i2VGlKGMfx6ZfMd3IxlNgwXn7QWPpo0rp20=)
2: d7yR94ozULrLv743b4gTIS0UmTE.crl (hash: ITldz6q2dtJRDkVav+bGntskfsaIz9eK2SrwEQsaQ6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:00:e3:95:28:62:b2:80:6c:55:d9:f6:a1:3a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc91f78a3350bacbbfbe376f8813212d149931
Validity
Not Before: Mar 29 05:00:27 2026 GMT
Not After : Mar 30 05:00:27 2026 GMT
Subject: CN=b7b5cad34b5efcd3b60fce4e3334dc7f0bf04873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:7b:bc:ed:ee:2b:84:dd:47:da:e7:e6:6f:
8e:20:d1:49:9b:20:cd:2f:8e:16:e8:8f:c1:13:fb:
04:62:3e:e5:c3:ec:0c:da:02:1f:18:76:99:f0:dc:
6a:77:31:13:81:84:4b:3b:aa:bb:51:84:df:19:29:
e3:95:57:93:2b:46:bb:3e:6c:b8:a1:2f:69:de:d5:
b7:71:fd:11:52:a2:2a:87:c5:fd:eb:86:7d:68:e4:
77:c8:a3:1a:f8:92:96:75:a5:08:95:b3:a2:dc:9f:
25:57:9f:db:04:92:3f:7a:6a:10:d8:2a:e7:e6:ac:
a0:d7:4b:a4:aa:f8:02:ba:5f:95:21:b8:34:51:7f:
b6:93:22:d7:f2:5f:95:92:18:b5:28:ed:89:f5:3c:
46:d8:58:81:51:8a:39:67:7b:88:ce:52:5e:8d:ee:
a9:ed:f7:26:86:70:fa:6b:72:11:b7:74:df:a8:d8:
cb:83:13:05:2f:44:1e:eb:fd:45:01:9d:db:df:25:
42:dd:48:bf:1c:ca:37:2c:8f:ea:83:ed:8c:79:87:
cb:59:7b:5b:b6:cf:44:21:d9:c6:9c:f2:28:78:8a:
23:3e:af:36:58:0d:a4:70:2f:c5:0e:92:1e:f0:66:
33:a8:51:58:48:99:4c:aa:32:87:21:af:31:3d:fa:
5c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B5:CA:D3:4B:5E:FC:D3:B6:0F:CE:4E:33:34:DC:7F:0B:F0:48:73
X509v3 Authority Key Identifier:
keyid:77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7d:6f:cd:ea:4f:50:3f:bb:21:cb:02:54:46:91:8f:cb:cf:
26:6f:6a:f5:31:25:a9:ad:1a:a1:23:07:d7:d1:76:f1:07:13:
4a:63:26:77:20:cb:d8:86:31:b0:3b:f6:d3:c8:64:d3:e1:5e:
3e:8b:ae:57:87:fb:ff:8d:48:19:47:7b:3e:cc:3d:f4:05:ad:
7d:a7:7d:bb:61:65:c6:8d:75:73:0c:db:a3:3d:54:c7:60:90:
d7:ee:6c:00:09:d3:1e:7e:b1:26:d0:d2:25:cf:41:a8:12:22:
89:5c:28:6b:29:fc:93:21:b0:ca:5d:3b:96:0b:ef:ea:96:31:
43:50:be:6a:95:8c:a7:f4:7a:90:92:97:88:20:84:de:e0:76:
27:26:ea:47:4d:04:df:ee:97:10:9e:b5:ec:a6:c7:d9:08:01:
5c:5d:56:c2:42:3a:66:75:80:eb:37:08:a3:bf:49:9f:a3:75:
98:3c:73:eb:18:1c:c6:37:c1:34:8a:e6:4c:ef:c9:d9:46:47:
7b:48:10:a2:56:24:78:f9:a1:00:12:aa:5f:bd:36:e3:58:81:
c6:f8:53:fa:c6:e9:af:b9:1a:1b:f2:12:7c:1c:b2:f1:da:08:
ed:7e:65:6f:34:40:9d:08:e5:64:64:33:e6:35:53:38:d5:90:
49:a9:dc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:41 2026 by rpki-client