Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File: 7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier: o+eT5pDhCL2dIIFQFlTedepmhO61cS0VOGFCn2uA2KU=
Subject key identifier: DC:4D:C0:5A:F6:06:6B:89:10:4B:40:21:D6:6F:1A:F5:52:61:74:51
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 019D37F7543BFF826CDD1EC3C665F5AA298E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number: 158C
Signing time: Sun 29 Mar 2026 05:00:49 +0000
Manifest this update: Sun 29 Mar 2026 05:00:49 +0000
Manifest next update: Mon 30 Mar 2026 05:00:49 +0000
Files and hashes: 1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: D7isTQk7FpQ8t9vc21gatPUj7y4hrTaKJnVjqek7jQs=)
2: 80dI9feXzE2T2t1bf2lPrI9UTCM.roa (hash: Q8e0O49tibA3BkTmL30HyVvrm1M+ka9VvoTMNCf2EJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:54:3b:ff:82:6c:dd:1e:c3:c6:65:f5:aa:29:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: Mar 29 05:00:49 2026 GMT
Not After : Mar 30 05:00:49 2026 GMT
Subject: CN=dc4dc05af6066b89104b4021d66f1af552617451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:2d:9f:31:b4:b2:cb:6a:f9:20:1b:6f:5f:
aa:c3:41:3a:82:ed:cf:7e:9a:9a:4d:66:e0:3a:e1:
81:92:a7:25:b9:bf:de:ce:e0:6b:e7:e6:b3:a3:dc:
b4:30:73:08:40:7c:2e:34:33:79:8d:02:a8:1f:4f:
14:41:5b:ee:cf:19:6c:b3:f6:d9:e3:43:24:68:53:
bf:c0:91:d2:04:00:08:a2:8c:1e:36:87:9c:6a:ac:
86:3b:69:6b:64:4d:d7:af:99:74:92:d1:cf:39:73:
03:e5:15:63:4a:cf:95:ef:49:b5:00:f1:15:a0:76:
b5:2c:3e:f9:0e:11:28:58:a1:51:6b:9d:91:a6:7e:
be:b9:59:e9:3f:09:ce:76:a9:68:4c:ba:d6:a9:f7:
71:f9:6a:ad:14:9f:09:ab:d1:7d:b4:b6:92:38:c3:
77:c0:54:d0:88:bb:10:cf:b2:ed:0a:97:8a:f5:b2:
8a:0a:c0:6b:61:c5:1b:6a:9a:71:ad:f3:48:11:56:
bb:43:e9:69:13:01:e0:33:71:53:8b:c0:89:95:05:
4d:05:e8:4e:a2:27:23:3a:a3:5d:14:42:20:7a:94:
48:d3:c5:61:a3:d4:73:b9:cf:01:d4:ba:a6:a7:66:
47:17:63:2f:16:34:81:ed:21:4a:96:a4:61:98:7a:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4D:C0:5A:F6:06:6B:89:10:4B:40:21:D6:6F:1A:F5:52:61:74:51
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:48:95:19:0e:f5:40:b4:b2:9c:17:cd:0c:12:85:9b:19:36:
47:12:82:db:99:0d:2b:83:b0:7a:81:77:94:3f:a3:aa:0b:80:
83:58:ac:f4:35:97:b0:5a:86:a6:4c:07:68:d0:68:10:a8:56:
83:eb:d3:7e:51:c5:cf:59:be:69:5e:10:2c:5b:55:b6:8c:a2:
f9:58:c3:2d:61:b8:bb:a1:cd:48:68:34:84:28:05:4c:52:90:
0e:53:62:7f:86:8c:bb:4a:85:dc:19:51:1b:52:23:c9:76:10:
70:0e:07:39:c6:56:ea:9e:1a:f7:0b:67:fd:ff:c1:7c:97:90:
25:18:e1:c1:74:bb:cf:0b:28:a1:1f:81:c5:41:a0:16:f5:76:
b2:37:f0:4e:45:b6:40:c5:11:77:c3:43:0e:0e:00:9e:94:88:
86:ff:ee:d4:83:53:48:6b:09:86:bc:f9:b5:24:66:95:ff:3c:
e8:0a:a4:74:75:7c:7a:62:fc:19:19:d6:22:a4:fd:54:d1:dd:
09:84:b9:70:71:a1:2b:90:0c:ec:49:32:e8:fa:85:82:02:47:
01:38:dc:e4:81:4f:8a:c8:5c:7b:71:f0:72:91:55:4b:ef:ef:
79:cf:cd:88:ea:aa:3b:62:f4:74:b0:80:a2:65:9d:c6:2c:4b:
a8:f7:2a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:26 2026 by rpki-client