Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: E8o+sCTvPzKUIFjdRqn0iI1nwwWlR4+sttRMh6fkWg0=
Subject key identifier: 12:DF:38:85:5C:31:98:77:95:BD:AC:48:32:E5:4A:9D:69:96:A3:22
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 019CE6DB2B2AE3E23710649A50C66E3BFA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 11:00:48 +0000
Manifest this update: Fri 13 Mar 2026 11:00:48 +0000
Manifest next update: Sat 14 Mar 2026 11:00:48 +0000
Files and hashes: 1: F13QQirUcyQJSbRfCl6w_cI9WWQ.roa (hash: Qmtb36fS7mGPq7TyueOpeM3xtlJooopxzuWWdKo+FIo=)
2: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: fPh3HBQHqU2awGE1x9oQLW2nQine++tK2jZVpXLkZoQ=)
3: yXL2c-lh8z3Pu6QXVoEmuyvEfX4.roa (hash: yk0yZqIR3aCNm4M9eEBAKHg+9JBzxKPA8wbCVYP14nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:db:2b:2a:e3:e2:37:10:64:9a:50:c6:6e:3b:fa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Mar 13 11:00:48 2026 GMT
Not After : Mar 14 11:00:48 2026 GMT
Subject: CN=12df38855c31987795bdac4832e54a9d6996a322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:bc:e9:dd:10:85:d6:66:c6:72:3c:3a:27:
59:6c:32:41:ae:90:87:3c:da:fd:85:2a:29:7e:d9:
86:b1:f6:4c:e2:07:59:19:47:e5:54:02:c1:c7:d4:
fc:dc:ec:99:75:4d:db:58:f4:ff:67:06:3c:97:cb:
16:41:f3:3e:77:56:28:b5:1e:c1:05:ba:ea:c9:8a:
9e:4b:1b:82:8f:f0:73:ca:9c:83:1d:3f:7e:c8:bb:
c8:66:aa:d1:18:64:0c:07:3b:bf:48:21:59:1f:d9:
18:ea:ef:78:96:db:ba:53:5f:25:9f:b8:8c:25:26:
c2:4e:86:a5:84:e6:b7:cb:1b:bd:c8:8b:63:f7:68:
1f:75:7c:f7:1f:3d:a7:d0:5f:fa:6b:67:02:16:42:
b8:7e:59:e3:f4:99:f1:0e:9f:6c:f8:2d:0c:2f:85:
2f:d4:39:35:48:ed:b1:d3:9f:b6:14:c8:e1:69:ce:
cb:9a:d0:f1:c6:2f:e9:6e:dc:c9:0b:5e:d3:fe:6c:
11:66:ed:67:27:3d:90:50:a0:91:04:d3:28:81:01:
f7:6c:e8:26:82:ec:4e:6f:c6:28:eb:20:be:cb:94:
12:32:c5:e0:86:17:2d:5e:f6:71:66:fe:29:b7:b3:
5d:1d:2b:54:67:c8:cb:11:83:6e:ed:26:85:50:0f:
29:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DF:38:85:5C:31:98:77:95:BD:AC:48:32:E5:4A:9D:69:96:A3:22
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:32:09:8a:1f:7e:7b:eb:1d:bd:04:8f:3b:94:dd:af:6b:1f:
70:3b:36:2c:81:71:a9:1a:87:7b:36:3e:4e:ba:54:39:15:65:
7e:4f:fd:7d:bd:5d:ad:ce:ab:63:9a:1d:07:77:60:a7:a9:99:
3b:e0:7a:21:4c:17:f6:87:e9:2e:62:9b:cf:90:7d:9c:8d:9c:
71:35:92:2b:2b:61:7a:57:3b:14:24:15:e7:4e:65:20:ad:5c:
00:f7:a4:d5:f3:0e:72:d1:ac:34:0d:9f:bd:40:2d:e3:f7:91:
bf:d1:32:3b:a0:c1:ae:e7:82:68:c6:3e:5a:df:f2:04:41:a1:
ac:4f:97:13:3d:ef:af:01:ad:3e:e2:74:b2:31:54:ad:f3:52:
a4:7e:92:d7:9b:31:ff:11:87:ab:94:45:e6:04:0f:7e:f7:9b:
dc:c6:19:e0:69:6a:c1:f1:1b:bd:f4:d8:e9:1c:c1:e3:fc:50:
a8:ce:0d:2a:34:9a:bd:d1:f6:c1:68:4e:73:d1:58:f7:a4:b4:
92:70:66:2e:06:72:03:d8:75:fe:6a:07:4d:8a:9d:63:1f:3a:
1e:d2:b0:d5:cf:02:d0:5f:05:c8:56:03:1d:e5:5a:6f:79:9e:
1c:11:07:55:e6:a2:c0:2d:e5:1b:f3:d1:a3:41:6d:fd:8e:5d:
98:bc:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:08:49 2026 by rpki-client