Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
File: 7aJsQI_Ge3UnNMyZfzYw269vYG8.mft (raw, json)
Hash identifier: eBx3k6ru8u1XrhZQZjaI+pjq5ARDsa5RJ7kCr7eUD5M=
Subject key identifier: D7:50:C3:0E:77:4B:F7:69:FF:3C:AA:AB:F4:04:AE:4F:19:F2:87:C9
Authority key identifier: ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
Certificate issuer: /CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Certificate serial: 019D3940A0A162C2A8F7048F4AD064B8D380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
Manifest number: 0D08
Signing time: Sun 29 Mar 2026 11:00:29 +0000
Manifest this update: Sun 29 Mar 2026 11:00:29 +0000
Manifest next update: Mon 30 Mar 2026 11:00:29 +0000
Files and hashes: 1: 7aJsQI_Ge3UnNMyZfzYw269vYG8.crl (hash: daMyvdEbLjFhpISJMebUgC9xv6taNd2FRAAYN1LaVrE=)
2: FPqdZZMf-fAPrlSDgNZhOHhHZxU.roa (hash: 3JadQ2sVOsTDIpy9yP5IPOoHewm11RGCjoRS/5qYd6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a0:a1:62:c2:a8:f7:04:8f:4a:d0:64:b8:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Validity
Not Before: Mar 29 11:00:29 2026 GMT
Not After : Mar 30 11:00:29 2026 GMT
Subject: CN=d750c30e774bf769ff3caaabf404ae4f19f287c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:a2:3e:67:83:2c:ea:1c:eb:4b:54:64:7a:
f6:d3:0b:a9:29:0f:23:cb:30:44:ae:ee:1b:6b:68:
f1:2a:d5:7e:c0:52:74:fa:69:13:53:c3:21:50:d3:
50:cf:09:aa:99:db:8b:a3:9f:41:4d:97:e2:8e:e9:
74:a7:1a:3e:67:e3:ed:f6:8a:78:88:8e:e6:b1:13:
4a:11:6f:7f:57:2d:46:b6:59:a0:3b:06:59:7f:af:
ff:9c:1a:c2:e9:1f:e0:67:92:c9:46:2f:ce:0d:12:
d4:ee:f5:49:02:48:e3:2a:85:d5:52:ee:9e:d6:db:
2f:24:c8:c1:e0:66:d1:7c:b3:fb:8b:4d:e0:f1:9a:
9e:68:c9:43:60:3f:45:30:07:01:12:b5:34:1a:01:
cf:66:af:6c:5a:24:bb:57:d9:91:b2:dc:d1:e2:ec:
56:92:f3:a9:6c:da:8e:80:1e:60:6c:8a:1c:92:39:
1d:62:34:b7:d4:3d:fc:09:5f:53:65:7c:3d:b4:55:
9b:c2:20:14:07:ed:ac:9d:ed:92:b9:a8:bf:24:a8:
74:f1:16:19:52:40:0a:ec:e8:4f:c3:a8:f6:92:04:
45:1a:96:03:b5:c1:fd:40:d8:56:d6:84:52:ff:8d:
50:68:40:e6:da:d1:a1:47:5d:6d:6d:22:46:bb:c5:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:50:C3:0E:77:4B:F7:69:FF:3C:AA:AB:F4:04:AE:4F:19:F2:87:C9
X509v3 Authority Key Identifier:
keyid:ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5b:15:cd:4f:87:7e:ba:87:22:d0:75:fa:ca:1b:fd:2b:91:
0f:93:ac:96:97:da:e8:c3:27:99:19:ca:0c:5a:ea:88:0a:18:
cc:d3:42:00:5f:02:96:1f:7b:de:f1:14:95:7b:33:87:bf:34:
0f:1a:fa:83:a6:c1:06:86:3b:d2:63:12:2b:1a:f9:e9:d5:77:
98:ac:a7:d3:6a:30:7f:8b:02:af:b8:12:0c:52:85:13:65:9c:
66:06:06:9e:f0:42:a0:bc:c6:9f:53:6e:bc:8f:3f:61:c9:c7:
c8:a9:ea:a7:55:ac:4d:99:77:89:1c:ab:d7:83:80:d1:31:9f:
7a:4d:c3:e3:b4:5e:ee:5c:ea:15:38:33:9c:a9:13:ca:46:5a:
36:8d:bd:aa:c7:51:a6:ab:52:fa:bf:26:66:32:cb:91:dd:fa:
62:aa:b9:05:01:30:2c:6e:d8:a1:15:67:d2:f2:45:49:c8:07:
79:91:82:2d:3a:40:4d:d2:2a:25:32:8b:af:16:70:8b:aa:a2:
23:33:b6:82:2c:67:e4:0e:8d:c1:56:3c:92:ec:b2:c1:9e:34:
38:98:44:40:a6:8a:3b:42:3d:79:2f:a3:16:aa:b8:8a:6b:4b:
37:af:de:83:e6:e9:e1:13:df:f3:19:4a:03:59:b0:dc:c4:63:
0d:6d:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:41 2026 by rpki-client