Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
File: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft (raw, json)
Hash identifier: A6K/1WQGyW+5462lAyg1WBtzjlQ0fpqZhjRzycM+AlU=
Subject key identifier: 87:A4:43:78:E9:BD:CD:9E:C6:CF:5F:CC:77:C1:68:AE:76:F6:F8:F6
Authority key identifier: EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
Certificate issuer: /CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Certificate serial: 019CE3DA702C40E510BFBF2E6A46139642E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
Manifest number: 7B
Signing time: Thu 12 Mar 2026 21:01:09 +0000
Manifest this update: Thu 12 Mar 2026 21:01:09 +0000
Manifest next update: Fri 13 Mar 2026 21:01:09 +0000
Files and hashes: 1: 2gPdkQWW9jUCbizX1SsNX62y_98.roa (hash: VSRNfwKyTAYD9LB8Wv+fsBtowZBw7KWBvIp7E5dQ+Cg=)
2: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl (hash: MqnZ8YZW3e7EcijOsSe07XIWVbrLBDrL3yZ2WwMiPdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:70:2c:40:e5:10:bf:bf:2e:6a:46:13:96:42:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Validity
Not Before: Mar 12 21:01:09 2026 GMT
Not After : Mar 13 21:01:09 2026 GMT
Subject: CN=87a44378e9bdcd9ec6cf5fcc77c168ae76f6f8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:c2:87:b5:72:1a:12:50:50:36:40:e4:c5:
cb:38:98:81:00:f1:20:90:8b:a3:b2:eb:85:b5:9a:
ab:82:3b:f4:49:d3:52:c6:35:c7:d1:14:bd:9f:89:
af:87:58:a1:47:c9:cc:53:f7:6b:ba:18:5e:1b:71:
1f:c7:22:94:59:26:9e:44:94:ae:34:44:b4:9b:98:
b4:8a:7d:30:15:cb:91:d2:ce:88:30:e6:30:60:e6:
79:83:00:39:c6:50:4e:e4:69:13:3b:4b:10:42:fc:
42:b4:06:54:df:1f:ee:3d:b2:0e:91:d9:20:ee:29:
f0:3c:e5:78:96:47:51:f8:c4:ca:80:32:08:75:50:
1a:96:06:1f:a2:2b:9d:fd:b1:48:80:a9:61:6e:d4:
74:c1:69:23:69:d7:df:85:b3:60:e3:00:94:df:b5:
02:df:da:1f:78:2d:32:60:e9:62:db:5a:b7:19:93:
5b:8f:5c:e0:f6:40:a1:ed:64:5c:fc:d3:87:cc:0d:
21:cc:b0:85:cb:f3:68:aa:51:1e:40:d8:84:56:a6:
ba:2f:d4:48:ff:69:bf:29:2c:35:b3:e0:7a:c3:0b:
6e:f7:d2:63:a1:b7:d7:b3:89:b7:df:9f:94:b3:f6:
5c:69:6a:d7:06:65:d7:1b:44:e2:6b:07:fb:de:01:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A4:43:78:E9:BD:CD:9E:C6:CF:5F:CC:77:C1:68:AE:76:F6:F8:F6
X509v3 Authority Key Identifier:
keyid:EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f8:50:64:dc:e9:9f:6f:3f:bc:c3:3a:84:39:d9:e8:e5:95:
76:97:6a:76:0b:1d:29:f4:7d:3c:c7:de:9f:eb:cb:ba:89:fb:
8d:5c:16:6e:8b:cc:55:9e:e3:51:6a:17:f1:54:ea:29:97:d4:
9c:87:ba:18:ce:e1:a0:42:6b:88:46:57:74:96:a8:a8:07:12:
40:50:a4:3b:23:f1:29:86:e4:af:65:23:d4:25:07:66:a0:c2:
e9:61:89:ab:6f:03:6c:71:15:45:07:36:a8:99:c5:c6:7f:1a:
d6:29:3c:93:42:fb:71:d3:4f:00:81:1a:41:88:d5:6f:c8:e7:
8f:ff:ea:5d:17:57:2c:da:d4:94:ae:99:c7:4e:aa:5c:83:18:
27:65:22:d3:a7:51:da:a4:bf:ac:ae:2d:dd:b9:e5:47:06:b6:
37:f0:60:62:b8:42:8e:fd:4f:3e:f7:25:b1:c7:68:b9:79:73:
da:8c:1f:f1:04:8f:35:56:ad:3e:12:c8:e0:6a:7d:32:0e:26:
5b:43:64:6e:2c:8b:fd:1b:5f:8e:42:45:3d:3c:e6:04:9f:23:
75:b9:bd:53:b6:39:f5:16:66:bd:46:bc:6e:cc:2c:a4:7c:5e:
9a:7b:fe:80:97:ba:a4:8f:99:b8:4a:72:64:91:e2:8f:24:df:
ae:96:73:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:00:17 2026 by rpki-client