
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: m3gu9a7CZqLhPzChjTxWecLoHCoWyl67VXqgxekzFSY=
Subject key identifier: F9:EA:D2:C3:57:0E:65:0E:FB:64:5F:F5:9A:32:3A:45:7E:E6:EF:5E
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 019CE4485AC700580CB2C42FEDF7CBF84C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 1862
Signing time: Thu 12 Mar 2026 23:01:12 +0000
Manifest this update: Thu 12 Mar 2026 23:01:12 +0000
Manifest next update: Fri 13 Mar 2026 23:01:12 +0000
Files and hashes: 1: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (hash: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: eldGo4Ywgjm5g9EPpDMegXUWZVM2runradNXaL9mKQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:5a:c7:00:58:0c:b2:c4:2f:ed:f7:cb:f8:4c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Mar 12 23:01:12 2026 GMT
Not After : Mar 13 23:01:12 2026 GMT
Subject: CN=f9ead2c3570e650efb645ff59a323a457ee6ef5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:e3:84:88:08:6b:4a:b3:2c:90:36:dd:13:
0f:22:73:c5:53:2d:db:9d:1f:cb:05:66:38:c7:f9:
f5:fb:54:5a:a2:0f:a8:40:d6:ee:e7:24:a5:c0:95:
ab:3d:74:e4:69:8e:7f:1d:b4:77:0a:b9:10:b7:b8:
84:85:97:a2:07:a3:16:81:94:4f:57:36:5e:23:f2:
bf:c2:89:df:9a:4b:80:59:a8:18:1c:a9:08:0c:68:
48:3e:7a:6c:92:62:bc:70:e2:20:09:af:2d:03:bb:
ec:2b:2b:b0:b4:2f:8a:5f:5f:15:13:48:ce:97:e8:
6a:1a:a7:5d:4e:84:40:9f:a9:f4:6d:f5:cf:51:3e:
10:d2:01:f6:ba:41:82:e8:70:a4:d8:f5:19:a4:4f:
dd:15:98:16:56:32:5b:a6:c2:11:2c:bd:89:cb:85:
d6:d2:c4:45:63:bd:03:31:e7:a3:c4:6b:c2:68:45:
32:27:7b:1a:5f:19:57:3e:fa:ca:91:9b:7b:98:7b:
7d:50:6d:95:7f:70:1f:5c:d2:1c:72:43:73:6f:fd:
d7:7d:0c:24:49:06:f0:c8:78:8a:03:a8:f2:d5:53:
a2:41:70:83:38:88:ce:24:96:26:5b:42:27:cc:e8:
f0:16:47:13:12:9f:5a:d6:6a:b9:03:cc:36:ef:c9:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EA:D2:C3:57:0E:65:0E:FB:64:5F:F5:9A:32:3A:45:7E:E6:EF:5E
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:34:8c:e1:16:09:25:cb:76:6b:d7:d4:38:29:9f:08:c3:57:
11:4f:ea:63:70:e4:f1:56:79:40:71:83:b6:85:75:45:88:8a:
95:02:73:73:64:43:21:4d:db:21:b4:e0:19:be:22:37:dd:47:
91:a0:35:7e:9e:d5:94:4f:34:42:0d:c8:c3:12:e3:2f:ee:74:
36:24:d7:fb:77:e1:aa:5d:8a:dc:18:e3:30:cc:f1:67:17:cb:
21:56:5d:37:16:40:fa:cf:d7:31:05:3d:1c:2b:42:39:e6:92:
33:56:13:6a:14:28:f9:0f:da:75:b5:e4:38:05:86:9b:dc:3f:
85:03:68:f6:56:93:f2:ae:31:20:15:27:34:ad:11:27:ee:c4:
95:c1:0e:61:aa:92:03:f2:a4:e4:35:6f:f1:54:99:97:aa:46:
86:0a:5b:16:ce:46:7d:ef:fc:06:90:59:a6:93:02:76:f8:5e:
75:00:1f:b4:e5:4d:ea:e3:a6:2f:ac:b0:6d:3c:d9:91:2f:55:
49:0e:2f:df:82:37:3e:12:bb:ee:d9:a5:3f:0c:2a:30:58:4f:
b6:a1:6d:68:04:55:27:c5:40:89:01:52:fc:68:b5:52:03:09:
8a:a5:4c:b1:db:1c:e5:dd:97:c0:4b:f5:ff:7d:aa:13:28:a4:
03:4f:5c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:47:50 2026 by rpki-client