Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File: m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier: CqOMUfHgGTFn7iY7eBKfwEoh6kzErR0ZmRnoRONA7uI=
Subject key identifier: 51:48:CB:1C:60:CC:19:E3:0B:49:37:F4:19:ED:E2:91:FC:A2:B8:BA
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer: /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial: 019D3909CE78B485D8449820E3BADA1BBB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number: 1300
Signing time: Sun 29 Mar 2026 10:00:37 +0000
Manifest this update: Sun 29 Mar 2026 10:00:37 +0000
Manifest next update: Mon 30 Mar 2026 10:00:37 +0000
Files and hashes: 1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: 9rv0uy/Yd3SWM2smMw2qUwC/F1IG/7+ZGW7oX+4zcWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ce:78:b4:85:d8:44:98:20:e3:ba:da:1b:bb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
Validity
Not Before: Mar 29 10:00:37 2026 GMT
Not After : Mar 30 10:00:37 2026 GMT
Subject: CN=5148cb1c60cc19e30b4937f419ede291fca2b8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d6:92:5c:22:3d:ac:45:10:da:7e:1e:93:4e:
20:6f:d2:c0:73:80:be:2b:c1:53:96:cb:3b:1b:96:
e3:59:35:bf:be:d3:d4:f5:d1:9c:5f:96:c8:3e:25:
2b:a9:78:d5:9f:be:33:71:6c:1f:53:15:23:55:cd:
3e:0e:c9:b0:fd:b3:8d:04:a1:a3:b2:6c:c0:4d:f8:
08:31:c9:dd:c6:fc:57:e7:3b:2b:0d:aa:b9:c9:d2:
f7:e0:92:68:65:9b:01:1f:7a:b1:28:09:9a:d5:91:
35:44:1a:25:23:8c:f0:ff:46:96:5a:08:da:06:08:
86:2b:24:50:30:d8:2c:37:af:bf:f5:69:b3:58:70:
20:55:6f:7d:11:06:88:d1:52:c6:d8:d5:5c:64:78:
15:d5:4a:93:f7:64:a9:ef:cf:be:03:82:f7:5b:a1:
ca:99:96:88:d3:9f:6a:c6:6c:62:f3:36:47:04:e3:
b9:0b:cc:a3:06:59:01:76:a8:8f:a5:ca:6c:c1:6d:
1d:f9:eb:3d:f3:42:db:13:81:2d:5c:1b:3d:c9:02:
4a:8c:2d:24:d2:12:92:cc:b5:bd:3b:92:6c:50:06:
ba:72:75:ab:25:b0:44:6b:f8:66:1c:b2:a8:57:43:
b6:ba:c3:f7:10:b0:a5:72:17:1d:dd:f5:18:eb:20:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:48:CB:1C:60:CC:19:E3:0B:49:37:F4:19:ED:E2:91:FC:A2:B8:BA
X509v3 Authority Key Identifier:
keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ac:f2:1f:3f:9b:cb:a4:a0:d1:d2:34:03:31:a9:45:90:65:
ca:2a:64:05:0a:dc:f2:44:ed:5f:87:0a:5a:2f:71:88:e6:84:
f1:f4:17:ce:22:eb:78:dc:d5:88:b2:90:5e:1b:50:9a:19:84:
17:28:6d:74:00:ea:c3:ac:cc:df:50:7c:cc:bb:60:42:b7:b1:
82:17:0a:9e:c1:87:2c:ca:fb:4c:5f:cc:58:23:08:3e:76:f2:
f4:15:8c:e4:92:c5:50:63:48:1a:e1:31:d8:76:91:f2:b6:ac:
c7:ea:a3:8d:c0:d8:45:e5:e9:8b:b4:79:de:4b:3b:ec:f2:3f:
91:fb:04:bf:a0:e9:6d:6f:7d:e8:8e:cf:16:95:6a:80:35:93:
3e:55:21:1e:6a:1b:e2:da:cb:02:2a:3c:e1:31:3b:c4:cb:d0:
06:6a:a0:a3:52:50:17:ee:5f:86:92:9b:e1:38:ea:f2:5f:c1:
4e:e6:8b:48:5a:c5:3f:38:7c:ad:cf:31:24:05:a8:b2:57:4e:
15:bc:4d:b8:f6:c6:44:ac:4e:62:6a:9f:4c:0f:0d:26:3c:74:
fd:c8:80:90:d8:47:73:fc:9d:42:c8:8f:f3:73:2e:21:08:54:
40:56:8e:5e:65:0b:b9:7b:75:92:c2:b6:1e:71:ef:6c:12:3c:
da:e8:8f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:32 2026 by rpki-client