Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
File: 7VSy51k1UxJ457rRV8SMiuxD7ug.mft (raw, json)
Hash identifier: 74QCuMPoq2+/skcDRHbOjoaMVkoozEHM+7tO4JCNA8U=
Subject key identifier: 03:21:FF:66:59:1B:E5:A1:FA:73:9F:29:60:85:7B:C4:4C:8A:5C:5E
Authority key identifier: ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8
Certificate issuer: /CN=ed54b2e75935531278e7bad157c48c8aec43eee8
Certificate serial: 019D39419DD4F72F304A26AE1DF51337667A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
Manifest number: 0870
Signing time: Sun 29 Mar 2026 11:01:34 +0000
Manifest this update: Sun 29 Mar 2026 11:01:34 +0000
Manifest next update: Mon 30 Mar 2026 11:01:34 +0000
Files and hashes: 1: 7VSy51k1UxJ457rRV8SMiuxD7ug.crl (hash: c5Otg/xFPdaVM7eHb5mBBkZuo8AqQq0i6yXheiSIQFk=)
2: 9jn6dsCG7zUKMoNLEB2Nq7yEmNo.roa (hash: ZpDThViKND8r1v13uLcKpK3wc0tcaMhUMIpaAAxcmHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:9d:d4:f7:2f:30:4a:26:ae:1d:f5:13:37:66:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed54b2e75935531278e7bad157c48c8aec43eee8
Validity
Not Before: Mar 29 11:01:34 2026 GMT
Not After : Mar 30 11:01:34 2026 GMT
Subject: CN=0321ff66591be5a1fa739f2960857bc44c8a5c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:68:82:08:ac:bf:48:d5:4a:a7:5c:20:0f:
5b:40:7b:d6:66:28:c0:ec:04:b9:bb:57:6b:47:72:
8d:7f:c4:e3:cb:f1:38:91:a1:f9:d0:9a:18:1f:4d:
b3:09:48:6e:df:54:63:6c:40:2d:eb:5c:69:9d:ad:
fb:70:59:1d:9c:b3:f9:cf:ef:8a:14:f6:39:66:b1:
9f:94:e4:72:22:3c:03:74:5a:ab:b7:9c:14:c6:e6:
b5:7e:82:15:52:ed:f5:e0:7c:36:fd:0a:9a:a3:3d:
dc:20:e5:e3:d9:fe:45:f4:5b:86:4a:0e:ef:26:b2:
67:3b:66:47:c9:c7:6f:90:a5:39:63:da:76:2c:f4:
b2:9d:0f:1d:06:4b:55:c5:a0:d8:39:50:6a:bc:c0:
15:ed:c3:be:de:bf:a5:4d:08:9c:d1:96:9f:ed:d3:
10:21:36:da:8e:01:b8:c3:a2:ad:8d:5d:6c:50:98:
d7:a4:d0:f7:49:9b:8a:70:dc:82:b2:f0:3a:59:95:
d2:21:43:e9:1a:dd:9f:22:d1:d1:5c:24:94:be:4c:
80:fe:99:2f:db:ba:f0:24:8d:05:52:7d:7e:a4:3a:
25:ec:fe:df:1c:14:d8:ff:c3:73:4b:8e:45:7a:99:
f9:72:55:95:c4:b1:0c:6a:09:98:07:f5:3b:e4:0d:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:21:FF:66:59:1B:E5:A1:FA:73:9F:29:60:85:7B:C4:4C:8A:5C:5E
X509v3 Authority Key Identifier:
keyid:ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c7:f3:ca:ea:89:a0:d5:22:15:02:76:69:52:20:47:c2:92:
6e:03:93:57:8d:5a:65:bb:8d:c7:ba:74:ef:60:83:55:38:f1:
9a:9e:1c:fe:bd:fa:08:81:fa:98:8b:fa:df:61:05:35:6b:bb:
d8:fa:b2:a5:45:25:7f:d9:7f:b1:c2:ea:62:3d:d7:d2:c8:ca:
04:9a:f0:f4:d3:3c:78:28:c9:33:c3:58:fb:2d:07:66:9d:6f:
fe:cb:a0:1d:1d:44:b2:32:4b:4b:71:15:03:42:ce:00:26:3c:
5e:9a:d7:94:32:12:fe:c7:40:85:cd:89:4b:49:25:4b:82:c1:
56:39:68:17:e0:ea:2e:d4:fa:70:e5:13:1e:41:8d:d5:65:9a:
57:42:e9:0c:64:eb:06:cb:ae:09:0a:b4:dd:ed:e0:64:e2:10:
86:21:87:a2:83:93:87:01:63:e6:92:f9:bc:b2:6b:b1:ea:e5:
c1:69:7d:4c:e0:1e:3b:89:53:06:d9:96:9c:3c:8a:9e:36:63:
45:29:20:c6:89:bb:81:f8:f7:06:22:ee:a9:cb:d8:d8:77:e6:
fc:ef:1f:e1:62:b4:07:06:b4:59:15:6e:0c:cf:36:79:64:c8:
37:d5:0b:71:c7:6e:63:51:70:e8:61:e5:ba:82:21:58:93:3c:
00:7f:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:05 2026 by rpki-client