Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: LKtedJtfUtkuw87e0V9199SLeiS7uw0OdV3tM7kaU6Q=
Subject key identifier: D8:9E:4B:44:AC:87:93:C1:DB:7E:29:4E:F3:82:11:F0:98:1E:D3:F8
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 019D382E2869BF499B5ACB0A215EB8780003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 1678
Signing time: Sun 29 Mar 2026 06:00:42 +0000
Manifest this update: Sun 29 Mar 2026 06:00:42 +0000
Manifest next update: Mon 30 Mar 2026 06:00:42 +0000
Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: VF9nj2/wB8G2rcHJsBfxmmiAn847QAmp3bmunw740ew=)
4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:28:69:bf:49:9b:5a:cb:0a:21:5e:b8:78:00:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Mar 29 06:00:42 2026 GMT
Not After : Mar 30 06:00:42 2026 GMT
Subject: CN=d89e4b44ac8793c1db7e294ef38211f0981ed3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:22:b5:11:ce:e1:93:cc:20:d0:fd:c4:3f:
19:cd:a7:8c:00:ac:ac:77:f0:cf:78:35:43:bb:c2:
9e:33:bb:68:01:7e:9e:ca:df:98:8a:58:0a:4b:e6:
b0:e1:a1:98:9c:d1:c2:0c:90:41:c1:2b:6f:16:eb:
01:fe:69:73:f9:3e:b0:89:28:77:c6:5a:ce:75:25:
66:79:e4:1c:39:9e:49:88:40:c0:29:66:dc:f2:74:
0e:42:8e:b5:1c:9a:72:bd:16:a8:39:ad:bf:49:ec:
80:04:ed:9c:5a:89:9f:18:28:f7:6b:53:4d:2e:1a:
5f:f4:c1:a1:85:91:ed:3b:91:f9:e3:4d:37:4d:23:
06:56:25:ad:21:e1:70:2f:16:2b:cf:7b:20:90:bc:
8b:c0:04:5d:92:0a:32:5b:f5:9e:5a:ce:a1:c5:d0:
e0:8c:cc:c6:1a:be:91:ca:59:8a:89:00:72:fc:19:
bd:de:27:c4:ae:a3:88:a8:01:39:3d:57:b5:7d:fb:
b0:a1:4e:08:88:1d:06:33:53:00:4d:b6:c1:ac:21:
8e:a8:cb:cb:61:83:d4:4f:e4:84:5e:26:3a:af:21:
7e:76:ca:d8:49:ab:82:96:23:86:e3:4a:e3:04:5f:
aa:2d:92:c8:53:2b:3d:11:7f:62:8c:a7:eb:75:a7:
5e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9E:4B:44:AC:87:93:C1:DB:7E:29:4E:F3:82:11:F0:98:1E:D3:F8
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d0:56:7c:c3:25:bc:4c:0b:a2:b5:1b:1f:50:f8:6e:cf:b3:
4d:25:b8:f5:f0:f9:43:96:89:46:26:13:7a:8a:39:91:e2:3c:
36:cc:02:a1:4a:0e:f0:ba:51:3a:15:d1:24:90:f0:bd:30:ee:
5e:bf:68:2f:d0:d4:8b:eb:cb:80:0d:a0:5a:2b:d9:3e:3c:2a:
26:42:f0:04:db:85:34:84:54:51:8d:f6:f5:4c:24:dd:d0:fe:
34:67:4e:0f:5d:d5:b5:6d:60:17:cf:08:91:95:e9:4c:54:54:
17:c0:37:46:e3:a1:aa:6b:fe:02:5a:46:6c:d1:a6:d5:87:96:
b5:f5:0d:21:2b:49:6e:5e:2b:fb:d2:f6:6a:bd:d2:ea:24:d9:
5d:9e:41:a8:b3:5c:dd:c9:dd:81:e0:d5:ea:b5:1e:3d:cc:a3:
68:15:1b:6d:ac:5f:b7:0f:7e:a6:d7:2f:72:0e:08:9c:2f:77:
26:cc:79:de:84:ec:ea:9a:f0:fd:98:47:49:53:cb:47:9d:ca:
c8:7d:df:cc:7a:c1:39:9c:96:cb:72:27:10:44:8e:97:b7:20:
f2:c2:91:b1:65:39:80:69:fe:57:0b:54:16:1b:e8:75:69:e2:
28:af:1d:ac:7c:12:89:3a:e6:8b:27:72:eb:b1:6c:85:66:b5:
90:16:55:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:43 2026 by rpki-client