Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier: XAzDkAR+9plN7LobKqi3umbIXZHICyCPcC3f5vLDS/k=
Subject key identifier: 98:B4:AE:BA:D1:9D:49:59:0E:83:8F:37:40:BB:3F:17:3A:79:C1:8B
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial: 019D386697B96CD7778C43097D08C6AE55E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number: 0723
Signing time: Sun 29 Mar 2026 07:02:20 +0000
Manifest this update: Sun 29 Mar 2026 07:02:20 +0000
Manifest next update: Mon 30 Mar 2026 07:02:20 +0000
Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: ghxkqw2BSNRTqclkfApocXHoSwrR6iSpfbkYlJ1BhAw=)
2: Ane3kVXJDwOnCcrwevPbQSwdhlM.roa (hash: GcB+WQ8GGExoABfliUP8dcPeehhXNomt7lmTMnKvHmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:97:b9:6c:d7:77:8c:43:09:7d:08:c6:ae:55:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Validity
Not Before: Mar 29 07:02:20 2026 GMT
Not After : Mar 30 07:02:20 2026 GMT
Subject: CN=98b4aebad19d49590e838f3740bb3f173a79c18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:b3:54:ac:da:d2:57:63:6a:b8:e4:f7:05:
38:5f:09:96:2e:d6:d3:4c:1c:2c:18:42:93:7e:7e:
d8:e2:5f:1e:ef:29:b3:62:61:58:dc:92:8e:50:1e:
02:6c:6d:1c:70:06:ad:95:5b:e9:28:f7:57:1d:29:
12:84:36:47:c3:8e:63:69:51:43:2a:20:2b:b4:2b:
69:8a:a1:ee:a5:c6:de:82:49:6a:44:09:40:7d:36:
23:1f:5c:87:a1:f4:b7:c8:70:89:2b:bb:31:d5:20:
dc:78:85:2f:03:81:e5:57:a4:7b:01:f1:0d:fe:04:
8f:12:bc:2f:18:27:6a:41:23:3d:0f:b6:d0:9a:da:
cc:17:23:74:94:82:c9:2e:bd:dc:9c:fd:23:d0:48:
1b:42:dd:3a:8b:6b:a2:c6:d7:87:db:44:86:b3:8d:
c4:5a:de:98:a3:74:e2:1e:36:c5:f3:64:71:2c:ef:
0a:19:df:b2:e3:a3:d8:35:1d:39:69:5a:68:aa:49:
c5:1b:63:64:52:6d:bb:38:52:34:fa:b6:d3:ab:80:
dc:bb:85:90:de:7b:78:f5:4b:fa:1f:3f:33:75:1c:
2b:46:54:e4:e0:47:1e:98:64:f9:8a:92:1c:8e:4b:
74:b6:de:6d:a7:3f:fa:80:27:ec:65:43:c3:ec:12:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B4:AE:BA:D1:9D:49:59:0E:83:8F:37:40:BB:3F:17:3A:79:C1:8B
X509v3 Authority Key Identifier:
keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a1:63:bc:c8:db:5a:69:95:18:34:33:37:4c:92:c2:85:9b:
ca:77:3f:25:43:92:61:37:ba:ee:70:7b:3a:70:18:a5:48:f1:
e7:67:23:ae:db:e1:ec:92:fa:33:66:5d:8e:3b:cd:b3:f6:74:
54:e1:44:59:00:2e:1f:18:c6:72:a6:af:bb:32:bb:1b:a0:83:
d1:f6:ca:7e:ab:01:a7:cf:08:48:8a:81:91:0b:8e:b3:17:2b:
99:3d:c9:c0:0b:f4:38:f4:6e:f3:c6:54:00:87:00:8a:83:1c:
37:8c:45:64:9f:f0:b3:2b:58:72:47:b2:86:de:6d:2a:8d:2f:
1b:f8:d4:ad:a9:02:ce:3f:62:d5:e0:c8:a3:2e:a8:aa:57:eb:
71:89:34:de:91:60:ac:84:00:ca:db:0c:68:5f:0b:7d:54:08:
5e:3b:fe:b5:29:65:ff:1b:27:b8:92:7e:d1:cd:ff:ca:41:02:
1d:57:0c:6a:f3:3d:30:bf:f4:ac:e0:e1:89:11:9e:4a:52:c0:
61:11:19:a0:b4:b4:3f:04:a3:0d:63:19:cb:49:3c:f6:a3:ff:
4e:f2:b2:2b:22:d0:56:50:d7:56:36:f0:63:82:76:e7:1e:c5:
63:cd:fc:68:79:b2:26:e1:c0:7a:f7:f1:3c:a7:2b:14:50:d4:
7b:b0:46:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:42 2026 by rpki-client