Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: sb0uJLk3nb7WCfD4F8kMDk0KK4cX4on5PSr3RJJiK/g=
Subject key identifier: 9D:6A:6E:1D:D3:70:7B:AB:D2:7A:58:C5:FD:52:7C:89:1B:5C:16:B4
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019CE6365427B4CAF42FE8D6E7768B696977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 1882
Signing time: Fri 13 Mar 2026 08:00:46 +0000
Manifest this update: Fri 13 Mar 2026 08:00:46 +0000
Manifest next update: Sat 14 Mar 2026 08:00:46 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: dInWme4krN27zNcXkUEYF6mMswGc/5CwqWswywodQ5E=)
2: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (hash: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c=)
3: QjmmSQtuTEwVRLNgjWi1-_buOYk.roa (hash: iGWXEQ+bzEdCoqctThCJX9CzR90FyOfcbpLC/ESLWio=)
4: UV-Za1MLDNSaG4DuH_q131i6c6o.roa (hash: /nY7i2nihg09pwfCz4ZETusOQgWbnKeEZAo2lp/8PQQ=)
5: XwwEduTGUdEUmzQ6Vn1Qh0lULKE.roa (hash: yP/C4oSHOkCL3b3u7lTD0ceM0Z9V/7tsggm9f4RRupE=)
6: gDu74A_Z1ksatoKHQD455fxsAx0.roa (hash: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig=)
7: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (hash: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o=)
8: zx3WBwHkzNsgOV5-TkoYXRcSw5A.roa (hash: 4eHXkHe5YH2jE8fgsQc251JhI+IMaU/jZg/f89akxiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:54:27:b4:ca:f4:2f:e8:d6:e7:76:8b:69:69:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Mar 13 08:00:46 2026 GMT
Not After : Mar 14 08:00:46 2026 GMT
Subject: CN=9d6a6e1dd3707babd27a58c5fd527c891b5c16b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:20:9f:a7:5d:28:d1:46:0d:04:70:35:82:
df:e3:7c:88:a2:b1:57:a8:ca:b0:1a:fa:28:ec:5d:
82:60:15:b2:f4:3d:aa:2c:76:3e:f7:56:1c:ad:8b:
a5:72:cb:c2:f2:b5:90:46:5c:49:ea:91:3f:af:2c:
3b:f8:ce:b1:d5:f2:6a:2e:3b:6c:db:73:eb:e9:e4:
1d:df:07:b9:af:92:8f:a2:87:bd:f8:b8:00:c5:76:
70:82:ba:9b:19:53:0d:ab:f1:1e:d2:ee:66:77:ef:
fa:9f:ee:6a:0e:db:80:8e:76:90:94:9c:8b:88:f8:
dd:35:ca:4b:55:bc:b3:e8:9d:8c:17:ea:73:08:64:
91:ce:ba:11:98:56:c9:18:18:3d:d4:cd:c1:91:e2:
34:9b:ac:ed:65:3e:01:1e:57:31:de:d2:dd:67:86:
6f:6f:01:ea:14:09:57:d3:80:74:3b:8a:e8:d6:b1:
23:f8:79:41:d2:49:44:68:e8:78:d5:81:80:c9:7d:
48:6f:47:31:67:13:52:77:c3:e7:08:e2:74:5f:8e:
c9:05:74:20:0e:97:6d:de:da:86:94:32:a8:17:44:
be:52:0c:69:8a:57:9b:a0:66:72:df:ed:93:ee:eb:
99:49:ec:43:a2:e6:16:8a:96:eb:89:93:c2:2e:c1:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6A:6E:1D:D3:70:7B:AB:D2:7A:58:C5:FD:52:7C:89:1B:5C:16:B4
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:25:72:71:9d:b1:ed:43:f0:48:d8:82:a8:b3:62:bc:cc:64:
36:1b:eb:fa:97:f3:06:b7:d2:b2:95:78:47:89:90:bb:d4:7c:
9c:bc:44:2b:bf:3a:72:ee:a6:9a:f2:be:db:cd:61:25:c8:ee:
6b:18:c6:b0:98:8a:d8:06:1a:8b:69:96:f3:8b:44:62:31:fd:
99:1c:ca:89:ed:f3:be:df:70:26:5d:9f:81:80:98:7d:9f:3f:
94:7b:d1:63:4c:43:93:74:f1:d8:30:9c:74:a0:36:a2:0e:aa:
25:e1:84:44:57:80:6e:32:33:77:f1:25:ce:5a:57:e0:cd:2d:
51:60:8e:5f:3f:f3:9e:17:3f:2e:9e:62:eb:2e:21:4d:52:f5:
e8:5e:ff:55:57:78:4f:32:3e:c9:55:a8:2c:5d:7b:a9:68:64:
6f:f3:6f:f7:ce:8e:f5:51:97:32:4b:3c:d7:8d:b5:77:44:f2:
83:e9:07:33:49:a0:b8:8d:4c:e6:67:4b:62:fb:97:72:7a:6b:
23:c0:90:95:f4:06:a8:a1:26:6e:bf:4e:93:6a:18:4c:42:72:
83:bf:46:f6:7d:88:cb:72:d2:b4:8f:f5:a1:c1:5f:7f:9a:05:
42:6c:7d:dc:39:41:aa:59:9e:44:49:c4:07:e2:85:e0:2d:d4:
bd:be:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:55:56 2026 by rpki-client