Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: 80cOsp1xXMI49KSOgFsbWxFGdsk5n8qehP0GhniibrE=
Subject key identifier: A6:F7:6E:73:08:69:8D:09:DE:50:09:B3:7C:E5:CA:B0:3C:F5:EA:75
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 019D39AF5F2CD19E5D13145D6832EBBB462C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 13:01:27 +0000
Manifest this update: Sun 29 Mar 2026 13:01:27 +0000
Manifest next update: Mon 30 Mar 2026 13:01:27 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: xU9ASWqX8/Y+LLshHqA84UMvQhq3QBmNLZ6T/bjM5Js=)
2: x6n822Rpr9x_ujzRReAoyI3uWJE.roa (hash: xHlOIj9K0jyV1cDKqnDaDCInd6n4ZibqQVDDfE1qwao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:5f:2c:d1:9e:5d:13:14:5d:68:32:eb:bb:46:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Mar 29 13:01:27 2026 GMT
Not After : Mar 30 13:01:27 2026 GMT
Subject: CN=a6f76e7308698d09de5009b37ce5cab03cf5ea75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:e0:45:68:d0:0f:9f:87:20:2c:07:c6:24:
c7:65:06:a7:e1:60:2e:14:fd:6b:af:a5:f2:58:e8:
56:be:04:74:2e:66:9d:38:ef:45:be:c5:78:3c:ef:
17:cf:03:61:8d:99:87:5c:13:d8:3a:59:66:ba:61:
49:f2:ed:d2:a4:2a:8e:43:d2:ff:fb:70:4b:14:c1:
ce:d1:30:5d:ac:2c:3b:11:a0:5e:5c:ee:2a:19:56:
b3:b6:67:67:19:4d:e4:98:b9:0a:f6:77:60:48:e1:
95:39:4e:4b:97:ae:3f:b7:8a:f2:be:98:66:5f:2e:
1a:01:ae:5c:83:2b:09:27:13:44:eb:ec:4e:bf:55:
b8:4a:bb:9a:96:19:4b:cd:06:96:48:4c:1e:b4:c6:
4d:a4:c5:3e:96:00:0c:42:2f:65:c4:ba:38:aa:8f:
67:33:94:e0:8f:bf:77:e6:27:6d:d9:fd:95:3d:d6:
4f:a0:6d:18:48:db:49:ff:7e:56:c1:7a:15:15:86:
8f:ce:75:96:8a:47:ed:cc:59:42:8b:62:82:e0:ed:
58:9d:70:7b:0d:46:a1:20:57:b1:62:5e:9b:81:79:
2c:d1:9e:ea:b0:71:68:51:82:a4:f5:4c:00:8b:bc:
1c:c9:93:64:33:4c:b1:98:90:f1:3f:8e:40:a8:28:
35:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F7:6E:73:08:69:8D:09:DE:50:09:B3:7C:E5:CA:B0:3C:F5:EA:75
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e5:47:49:3a:ca:0b:bd:ee:93:2a:62:fa:d8:f5:61:e9:40:
b9:25:a5:4e:3f:33:4f:03:4c:11:28:ed:78:d7:06:6c:9c:77:
f9:b8:d6:29:dd:7e:e2:3d:b2:f4:e8:82:18:bc:97:07:4a:2a:
01:fb:bd:e1:1e:fa:00:f4:fe:01:46:a9:2c:50:62:ec:1d:e9:
00:13:55:47:5d:58:f4:31:ed:23:99:a5:9f:ca:a7:7e:50:2f:
76:92:ab:bb:67:65:62:fa:d7:e4:fd:a5:d0:d7:11:cb:3d:32:
33:6f:06:e0:9d:3b:14:ee:ac:d2:1b:9d:b1:0a:e2:ab:be:e0:
f3:e1:84:25:13:b5:18:77:89:08:76:8c:12:33:04:d9:aa:d7:
3e:06:49:6a:14:88:93:59:e8:cb:ce:e1:8a:7a:03:12:ff:7f:
74:8b:b8:87:be:4e:62:55:7e:80:d4:46:b2:af:04:ad:7c:fb:
ae:7e:25:a5:7d:86:ae:79:b0:08:6a:74:f4:a0:a7:bf:00:7b:
d5:a4:14:4d:b7:fd:08:2e:33:f1:96:3a:d8:3a:b4:2d:fb:2a:
95:b3:c6:ee:1d:0a:58:83:c8:ed:8a:34:1e:46:33:11:06:fe:
ba:57:07:c8:c7:7b:5a:a8:70:ef:f3:53:9e:88:94:f2:b9:61:
04:ba:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:41 2026 by rpki-client