Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier: ODx8R7h+DtJy6M5Q2H/XnAXp5Jj8TY1dT8ovDNHk/IQ=
Subject key identifier: C0:CF:E5:27:A7:D0:9C:4E:B3:4B:33:C6:A8:0F:D6:87:74:13:91:11
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial: 019D382DDCFDA5FF61CAD334946D1F7D1502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number: 0813
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: QniKZdh3ECFLV0Wy2Z79u0iJHBgGB25m2nYJmXX9nKc=)
2: ci8f7Y86uB9atamo1D3e8sszzV0.roa (hash: JE0+am3liaO3am6zHqUi0SmfiCv9crbc5X4aX8Cwg8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:dc:fd:a5:ff:61:ca:d3:34:94:6d:1f:7d:15:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=c0cfe527a7d09c4eb34b33c6a80fd68774139111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:06:93:27:0e:84:d9:45:79:0c:a7:a0:71:
7a:29:7c:dd:dc:99:ac:37:ea:82:d0:c6:49:e2:59:
c2:eb:54:42:9e:73:bc:81:ef:f2:b2:83:29:b4:48:
19:64:cc:7c:61:e1:e4:49:90:3d:4e:96:34:66:d5:
57:5a:ba:2e:bc:06:69:c8:e0:3d:4e:71:b5:84:e0:
1b:68:75:62:7c:12:69:9b:cf:9c:4a:35:df:bf:d5:
bd:c3:6b:3f:61:67:67:45:4f:97:4a:4d:dd:f4:3b:
3c:83:57:bb:ae:68:b7:0d:a7:e5:5b:f5:38:4e:0e:
5a:c2:cf:36:c4:4f:e5:da:11:7a:19:ed:26:b3:8a:
0b:cc:4b:dc:9c:53:bb:e9:1c:ea:3c:0a:eb:11:03:
cf:b9:0f:47:88:a6:5a:98:83:33:17:af:c5:38:31:
c1:1d:d4:c8:5c:41:3c:09:2e:80:b7:af:bf:27:d6:
03:5a:26:95:cb:a4:a5:20:32:d6:f0:b7:58:6c:f4:
a7:44:79:29:25:dc:1d:71:da:ff:e2:3d:a6:fe:24:
e6:94:ec:3d:85:26:1b:b5:8e:96:83:00:fb:fc:9a:
a0:fc:e3:16:4f:e7:1f:63:11:7b:72:1d:1e:b1:b9:
fb:d0:45:38:b1:cd:2f:89:af:0c:a3:f0:5a:10:9d:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CF:E5:27:A7:D0:9C:4E:B3:4B:33:C6:A8:0F:D6:87:74:13:91:11
X509v3 Authority Key Identifier:
keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2e:fe:f3:d2:45:6c:ab:2c:9f:bf:63:b3:d2:09:7a:11:62:
ac:69:ff:5b:a2:63:52:ed:f1:a8:a4:aa:ea:44:f3:32:00:08:
8d:50:0b:5e:2d:d9:3c:b8:ac:f1:24:ff:aa:c7:b5:4c:0b:15:
70:fd:06:ca:95:da:60:d8:a0:97:bf:90:a1:10:b0:9c:f1:9d:
ec:a1:74:e9:fc:ce:d9:1c:73:05:d4:39:dd:5a:e2:0c:13:32:
54:17:d8:f6:86:9c:0b:17:37:0e:d4:81:44:5f:d7:76:d6:8c:
9d:73:a5:b8:e9:85:c6:28:1e:47:7d:ad:b4:ce:0d:ee:ad:98:
fa:c4:22:3d:97:bd:7c:8f:9c:23:f6:93:04:39:fa:5d:65:aa:
37:6a:07:e1:31:2f:65:8f:3d:d3:c1:b5:e9:99:ef:b4:e9:f9:
f9:f4:03:ec:61:09:0a:39:e6:ce:aa:48:06:12:5c:77:5e:2a:
99:0b:50:db:d1:6a:d4:81:a6:bc:61:46:01:54:4b:20:17:ae:
d6:88:50:f6:85:a1:1a:f0:49:d3:e1:86:07:bb:83:58:ce:72:
0d:83:73:8a:3c:21:89:14:a3:96:ce:ea:79:64:b9:58:33:36:
3f:9a:23:06:87:57:ff:b6:b3:a0:e6:82:1c:36:2b:9e:51:f8:
b0:ec:0a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:17 2026 by rpki-client