Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier: shjcidG/8HSS//rHZBelDyjuOZW+nIKNLB0SuyUUAhI=
Subject key identifier: 1A:48:E4:2D:D1:CD:0B:A5:A1:20:E3:0B:CB:EF:94:F3:BC:0F:43:62
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 019D3752AF37BC12D3A4399EEA3016C2135B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number: 18A4
Signing time: Sun 29 Mar 2026 02:00:58 +0000
Manifest this update: Sun 29 Mar 2026 02:00:58 +0000
Manifest next update: Mon 30 Mar 2026 02:00:58 +0000
Files and hashes: 1: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: PemFI1X6O9Xg9OQ58OG3cm4NnE0xfMqZL+ABtalM59k=)
2: JsIYFyLR74GQysEIqnGykpSJQUI.roa (hash: iaHnb3OAMXTWsBgbEKrwhuTvCOgUBCodv1kDk+4mavA=)
3: NKy6Tyf5RyRglBk0yV_ExDPmxuo.roa (hash: ebb1VqS7aGDzvUXqYNWhDAqOkeGUT55XR6ggJqYbSMU=)
4: OUVdt4o2LS_i-Gunl0nnzrdW_jI.roa (hash: LG7q3NWzE4G2vBN3PTFInwdMW/gtEeHrNbl3IVaBPnE=)
5: YH5NKMifzBmhf3nIG20jcgRcBU0.roa (hash: V5cTAFBzO7CMX8CCIxzqRfhGsna670gP9hgi/NVqRBc=)
6: mCt7UGq2s1qnA69MYZljhYxWiD4.roa (hash: qi5pYWU2cgvvhT1J3aGpMqhq1J2xvA8Deh0/Hh6j/Rg=)
7: sRMtAiiTomuNQjvyhVAd07KYQM0.roa (hash: 1ZDSFc07GgvbF2RmQMqVaUItzv9tv/zTWoNdPvDIoXs=)
8: sjgUHUj_TSMku2aB-f61amSIyCM.roa (hash: /+JjugGAK765zafXtIVOVPtipqmOZ3WaKKGK25tgoO4=)
9: zhcr9I3s3OVNgzaih7vQHJr6C0Y.roa (hash: nLQ289DooRLgqJOtJaVgt01KECd6y0NdXrqka7CO4Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:af:37:bc:12:d3:a4:39:9e:ea:30:16:c2:13:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Mar 29 02:00:58 2026 GMT
Not After : Mar 30 02:00:58 2026 GMT
Subject: CN=1a48e42dd1cd0ba5a120e30bcbef94f3bc0f4362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:88:0c:2c:f0:6f:62:5b:3a:93:64:4a:86:8c:
a4:5b:aa:f6:a8:23:fa:99:a4:f7:c6:24:68:10:44:
c7:55:e5:2b:87:da:e2:dc:ea:09:a1:ee:f7:b5:5d:
8f:38:e5:f9:9e:a6:f6:0c:fc:7c:ee:56:a6:17:d0:
0e:08:79:af:29:47:bb:a6:0b:38:7a:27:d5:02:40:
7f:ba:83:7b:5c:0a:96:83:ac:7a:cb:da:a9:9e:93:
47:5e:e8:d7:1f:5b:92:f9:81:8d:fc:07:2f:03:28:
81:66:0f:67:0e:a4:e9:2e:0d:7d:dc:02:f3:af:c7:
24:4b:c0:de:e7:5d:f4:b0:dd:3f:e7:0c:bc:e7:f8:
6c:1e:f9:81:2b:d2:d9:da:fb:93:eb:6e:85:1d:2b:
65:16:17:23:57:01:46:9e:77:09:93:cc:56:07:46:
d1:35:59:5f:29:85:f7:e5:37:1c:65:ee:a1:69:a2:
32:dd:27:86:59:3c:6c:f7:72:7b:11:44:4d:f0:8c:
ab:9c:c4:3e:92:9c:3d:e8:a2:9f:6f:5e:75:3f:a1:
dd:66:76:4c:b2:91:b3:b0:90:0f:be:cc:ab:1c:a4:
39:31:1a:56:81:74:00:86:9c:23:c6:45:8c:1b:d3:
0c:08:45:4b:87:ed:ec:0f:fa:cb:e7:02:8d:9c:d6:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:48:E4:2D:D1:CD:0B:A5:A1:20:E3:0B:CB:EF:94:F3:BC:0F:43:62
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:be:c4:5b:f3:36:b4:0d:05:5f:f6:0c:15:e3:e3:20:26:41:
e1:1d:66:55:4b:a8:2e:18:7b:f2:54:a1:ba:38:4c:cf:f0:71:
56:48:61:90:f0:df:f9:b4:a7:9d:a3:21:4b:2b:fc:05:de:b6:
95:90:72:5c:09:6a:e9:bf:f7:94:40:2a:ec:66:8b:37:28:01:
1b:59:58:82:c3:ec:db:4b:87:46:78:f0:4c:e6:7f:56:bd:8c:
f3:17:70:f1:b4:f7:cd:ba:22:29:61:cd:45:7f:e1:13:44:51:
da:b8:0d:08:d4:58:55:9c:c4:d5:f9:b2:a9:b8:78:f7:a9:67:
de:92:58:bd:5d:93:63:8d:02:88:4e:a6:bd:35:77:46:22:51:
6f:81:6b:49:da:fd:af:60:27:b7:98:60:be:c7:8c:7c:bb:cf:
15:91:d8:df:0f:92:5a:43:9e:f9:1a:db:d5:a4:b9:42:92:c6:
43:71:c2:ac:0b:e6:e8:8d:6d:bd:58:46:74:e8:fb:ab:45:b5:
91:77:64:c8:4b:86:dc:b6:9a:56:1b:2b:c4:a3:86:ac:95:1a:
9c:48:9d:0a:84:d5:5e:c4:7d:54:ad:c9:f5:ad:fc:24:0b:e2:
e5:f5:38:3c:39:1b:48:78:35:bf:9e:73:04:f1:34:0e:68:b4:
1b:26:15:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:31 2026 by rpki-client