Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File: 7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier: b4vNw6/Z5LxwcNNn61v9OOM3fJWgoLyDq/IwZ9m0EzI=
Subject key identifier: 0E:1E:1E:C0:3A:B2:17:DD:13:6C:87:F5:AF:56:8C:A1:21:5C:CA:5A
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial: 019D37528661BC91D3C91E4D522B85758669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number: 11F9
Signing time: Sun 29 Mar 2026 02:00:48 +0000
Manifest this update: Sun 29 Mar 2026 02:00:48 +0000
Manifest next update: Mon 30 Mar 2026 02:00:48 +0000
Files and hashes: 1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: Hc71kP9bvw8Fd2JaeMhhyS1EEcB7lH1Vq/0zITpovO0=)
2: ROD76SwfYB6C6gAmh6ocy7RmvzY.roa (hash: 8kz9BVZL6aAIte+oXvcJlqrJDsa6yWdXpOPNdQQYCKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:86:61:bc:91:d3:c9:1e:4d:52:2b:85:75:86:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Validity
Not Before: Mar 29 02:00:48 2026 GMT
Not After : Mar 30 02:00:48 2026 GMT
Subject: CN=0e1e1ec03ab217dd136c87f5af568ca1215cca5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:01:e1:b1:f5:d4:3b:76:4c:95:99:d8:a6:b4:
e3:ac:1d:7d:f7:98:ee:26:9a:e3:e6:eb:99:0d:07:
b7:e5:cb:e7:6a:1d:a9:ee:2c:e3:29:d8:5c:15:45:
13:1c:b7:72:c3:0f:70:d3:2e:36:28:08:8e:40:ba:
81:7e:88:ff:2c:eb:57:c4:cb:3d:54:bd:93:0e:6d:
da:4d:8f:4f:b7:ee:2d:12:18:b1:99:33:76:38:cf:
68:0a:16:c5:63:21:27:66:73:bf:96:b5:32:39:30:
4f:f5:84:72:8a:09:98:e9:56:c5:96:41:a9:4a:95:
a4:65:8b:3d:16:92:11:de:9b:2d:40:f0:ca:91:a3:
f3:ce:7d:d7:5d:58:cb:a3:6b:1f:90:1a:10:a1:3b:
eb:8a:31:c9:f8:6a:4d:77:9e:3e:6a:8e:5f:28:33:
d1:27:06:7d:5f:a5:f8:1b:f2:dc:df:54:93:b2:a0:
57:5c:37:5f:1d:8c:1f:1d:d9:75:ef:10:98:d0:25:
a6:ba:c8:19:e3:7a:f0:f2:73:3e:2d:4c:03:8f:79:
09:69:d9:78:1e:6d:bd:1d:ba:a0:73:f6:f5:5f:c1:
ad:38:78:c2:0d:c7:62:0b:37:cf:f2:e5:d3:ed:33:
12:12:a1:80:1a:e8:0e:33:54:7b:66:ef:7a:e7:f5:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1E:1E:C0:3A:B2:17:DD:13:6C:87:F5:AF:56:8C:A1:21:5C:CA:5A
X509v3 Authority Key Identifier:
keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5f:d9:d2:0c:fe:5e:64:03:27:72:cc:54:0e:68:e8:ca:a3:
49:e2:47:2d:7b:42:b7:b0:d6:09:e8:15:1a:c3:17:1b:d5:d6:
f2:04:f7:8a:d0:c0:a7:97:33:56:f0:0e:33:d2:0a:74:a4:6c:
c5:e6:0f:80:38:58:88:27:5f:01:8b:08:0d:e2:28:08:7e:b5:
bb:ee:f9:27:a9:3e:98:2a:e1:34:ed:ab:df:e6:a9:a4:aa:4f:
33:a1:a0:46:20:10:d0:65:a7:0e:f3:2c:c1:0b:0c:66:8b:68:
5d:58:e0:32:8d:34:02:ce:4a:6d:8c:d1:a6:78:9f:56:4a:87:
cb:c2:01:6b:bf:3e:d8:ce:ca:32:85:84:4f:4e:ea:01:a6:dc:
cc:6f:90:b9:ab:a5:8f:d3:89:3b:35:3e:d7:57:1a:9b:0d:59:
3a:3c:6d:47:5f:46:06:b5:58:91:8e:fe:86:c9:2c:17:e8:f3:
9a:0b:cb:b7:72:24:94:91:a7:80:25:1f:da:6f:f9:05:6d:69:
c9:7c:71:5c:79:05:d5:d0:ce:c9:4c:3f:e0:49:55:e1:38:17:
35:9b:9e:51:11:18:b0:2a:9b:1c:3e:0d:17:e2:71:92:1c:cb:
f6:07:3b:c3:a2:3d:e2:92:d4:12:6b:cc:2c:34:ac:53:d8:92:
98:2b:c6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:32 2026 by rpki-client