Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
File: t7GVtlEuyHh9maGy5OvYCIT5gLI.mft (raw, json)
Hash identifier: 054cDwQ/0YWqPRk9C2RCS+EZZDFoW3C1l/O8u3/sGbI=
Subject key identifier: 72:68:E1:64:75:25:00:8B:AC:FA:40:6E:DC:FE:09:44:58:20:D0:CA
Authority key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
Certificate issuer: /CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Certificate serial: 019D37C051E53AB2B568E2CABF3626FB7C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
Manifest number: 046A
Signing time: Sun 29 Mar 2026 04:00:43 +0000
Manifest this update: Sun 29 Mar 2026 04:00:43 +0000
Manifest next update: Mon 30 Mar 2026 04:00:43 +0000
Files and hashes: 1: UFJMBp4uub3i0PII1KHLVKqEMXw.roa (hash: P90+UkJxUgu+4FLpaN+LpqKZd3cpv3EFSdnasvG1wnk=)
2: t7GVtlEuyHh9maGy5OvYCIT5gLI.crl (hash: +Kac5hRVheDbjdUoyF5vzoAgQzsOhvu7jd6QkNu27RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:51:e5:3a:b2:b5:68:e2:ca:bf:36:26:fb:7c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Validity
Not Before: Mar 29 04:00:43 2026 GMT
Not After : Mar 30 04:00:43 2026 GMT
Subject: CN=7268e1647525008bacfa406edcfe09445820d0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:87:63:cd:cc:ba:2b:b7:1a:cf:af:9a:ad:
39:36:7e:98:e8:c6:fe:b9:b4:b6:0b:7a:65:b7:b4:
60:c3:6b:3c:76:cb:6a:17:66:0d:2c:0f:84:e9:c8:
02:a8:70:7d:07:7d:f0:42:e2:49:23:f1:cd:3f:ce:
29:f6:ed:33:94:4b:c0:76:de:2a:e4:fd:57:59:07:
59:88:5f:af:06:a8:69:16:6d:dd:3b:f5:d1:75:36:
d2:32:80:d0:43:5a:a2:0a:58:25:78:1f:ad:3c:15:
d5:67:4a:6c:81:49:07:0d:e1:92:e8:5a:6f:b8:53:
b1:f2:2a:ce:8b:02:76:c9:32:95:bf:b3:05:71:40:
7f:bf:81:c5:bf:2f:80:bf:65:f3:3c:29:6a:80:d0:
29:3a:e8:70:ef:89:17:3c:f6:72:47:de:ba:b7:29:
4a:93:c4:7d:59:52:2d:e5:39:fe:cf:6a:e6:c3:f2:
4d:d9:80:d2:66:13:c9:49:3f:27:81:86:82:87:34:
a5:7f:d6:23:59:03:12:0c:21:7d:10:b5:f0:0f:e7:
54:02:29:fc:b9:86:3f:d2:69:72:17:62:41:b5:84:
f3:06:55:0f:ba:65:35:19:d6:ef:fe:fd:5d:62:09:
bf:23:16:9b:f6:80:60:d0:ff:c0:80:ba:d2:b5:41:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:E1:64:75:25:00:8B:AC:FA:40:6E:DC:FE:09:44:58:20:D0:CA
X509v3 Authority Key Identifier:
keyid:B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ef:b7:df:98:c8:e5:58:22:02:7b:f6:e2:4e:38:73:d9:96:
aa:99:14:1b:76:99:4f:27:e5:7d:ce:fa:29:e2:e6:fa:e3:75:
42:be:c7:05:54:ad:56:6a:f9:99:72:0b:a5:4d:43:a7:f5:34:
cc:5b:85:75:bc:fd:58:9d:28:e0:8b:0f:7a:a1:af:71:1b:c3:
f8:89:16:65:58:0e:37:95:61:52:4e:dc:1f:53:5e:4b:03:46:
0a:34:bb:bb:74:7b:5e:4a:03:d1:81:7d:02:b3:2b:34:60:c5:
37:af:00:90:b0:a4:3e:5e:22:f4:d2:8b:94:dd:1b:b8:4f:2f:
0f:09:71:51:48:b9:4a:57:66:09:5c:a5:8b:eb:6d:09:71:b6:
8f:ca:14:17:1e:c1:96:b2:8b:1e:dd:ae:34:f3:e7:cc:7d:12:
1c:cd:09:99:b3:59:48:57:51:55:43:45:e7:96:79:f7:48:07:
e6:85:87:85:62:d5:59:2d:ad:61:9c:f2:cd:ea:03:4f:0b:73:
13:3c:17:06:a9:af:55:93:b4:66:dc:ad:10:68:72:22:4a:eb:
7e:a1:0a:ed:df:84:c3:76:85:52:e7:70:ff:37:83:be:c5:6d:
f5:f0:2a:58:5b:05:59:4a:62:6f:bb:ed:9d:d0:b6:bf:ea:3e:
af:9a:3e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:54 2026 by rpki-client