Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier: kJer6xuraTCdz0u8RJjm/zMlZKt0tOjAeAX3cn1Ozhs=
Subject key identifier: 74:EA:02:92:41:5C:48:38:81:9D:49:C4:48:BC:E9:65:C8:16:B9:12
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial: 019D386652C2BBD593F99CCDA08D4EDD0C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number: 0FF5
Signing time: Sun 29 Mar 2026 07:02:03 +0000
Manifest this update: Sun 29 Mar 2026 07:02:03 +0000
Manifest next update: Mon 30 Mar 2026 07:02:03 +0000
Files and hashes: 1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: +Cgf9zj02UxsQ2DbcDkYZdW/Q3LWQ/bPLkjFtFWUt6I=)
2: xWJAqfrPXr4KnkU7Qd4lSzlkp8o.roa (hash: ceeD+cwy4G4/W2RDlhQiQMMWpwCMIwxk/08X/W6eMjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:52:c2:bb:d5:93:f9:9c:cd:a0:8d:4e:dd:0c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
Validity
Not Before: Mar 29 07:02:03 2026 GMT
Not After : Mar 30 07:02:03 2026 GMT
Subject: CN=74ea0292415c4838819d49c448bce965c816b912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:9c:92:bf:d3:c6:10:90:64:f7:0b:79:89:
04:86:b1:38:b9:a7:df:0f:14:72:bf:d2:eb:47:f7:
eb:7f:44:17:7c:aa:be:f2:e2:11:a2:49:7b:b2:1d:
25:a0:41:36:d9:3e:76:93:e4:1e:10:42:23:55:80:
72:eb:01:62:e8:12:12:24:2e:98:bf:1b:40:b0:73:
13:63:71:2e:60:fa:0b:be:d0:c9:c6:bd:a0:2a:a0:
82:ca:7a:c8:7f:b0:47:43:6a:90:f4:50:f2:34:ac:
92:4e:77:7e:d7:bd:dd:f3:9e:ba:a0:b3:10:55:58:
ed:d6:dd:5c:90:6d:c9:1f:30:14:2f:5b:65:17:2d:
4c:f4:3d:0d:47:47:5c:59:cb:54:2b:b3:d9:ae:25:
ad:f8:f0:85:99:4a:2e:cc:5f:b4:70:8c:34:37:96:
0e:0f:f0:99:27:e5:8a:8c:a0:27:fa:a7:ea:21:07:
79:87:39:05:a8:0b:5d:77:42:77:88:ba:4c:68:2b:
02:2c:95:cf:1a:4d:b3:05:a4:ec:f7:2c:9b:07:ad:
e2:69:13:7a:a6:7c:04:ef:d5:b1:2f:0d:db:f2:e4:
94:27:a9:be:02:54:39:63:ce:13:9d:dd:40:87:a2:
cf:16:dd:60:ef:41:62:b1:20:fa:a9:89:62:88:87:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EA:02:92:41:5C:48:38:81:9D:49:C4:48:BC:E9:65:C8:16:B9:12
X509v3 Authority Key Identifier:
keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:46:06:70:fd:7c:39:ed:25:fb:34:27:a2:c1:cc:51:1c:aa:
75:f3:1f:29:e4:1b:37:1c:9c:b4:6b:bf:b7:6d:3a:89:b8:b3:
06:5d:84:83:ab:03:2a:10:12:d0:2b:18:b9:72:13:4d:02:b7:
ed:8e:0e:75:13:da:12:e6:ea:18:8d:7c:fb:03:c5:13:59:78:
9e:b6:1c:93:3b:2e:f8:30:df:00:20:6d:1a:bb:b4:1d:56:83:
29:b0:c6:e0:18:b6:8b:d5:8d:2e:47:2d:5e:c6:44:ff:cf:3d:
ca:04:93:74:a8:5d:e5:d5:1e:81:5d:92:9e:b3:b6:75:55:46:
0b:c0:fd:a7:be:66:8e:22:62:33:06:03:0f:7c:66:cc:42:ef:
62:56:fd:ec:53:a8:53:6c:9a:6a:99:f8:d1:d1:71:3f:be:96:
87:0b:61:1c:eb:a8:fa:14:7a:9b:e0:0c:ab:86:b1:21:44:c5:
de:ed:db:c4:f6:61:8a:b6:ed:21:ac:08:04:f8:8a:57:01:d0:
8e:15:73:73:b5:f1:b4:af:79:f9:ad:d2:91:55:0f:17:c4:bf:
0c:5d:ab:76:9a:39:79:68:d5:e4:c7:29:b3:df:97:22:9b:09:
f2:11:47:fc:a7:b1:7f:c3:d6:8c:bf:b3:4c:ef:fa:27:36:98:
6b:d4:f3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:04 2026 by rpki-client