Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
File: _7yuKykMgB1X0J0CWpNI4WcG8YI.mft (raw, json)
Hash identifier: ntsB3AuCGkZ1ORVKPxEO/AuP1Ql4LN3xvFDd5tpXl5U=
Subject key identifier: F1:CE:DA:8F:EC:DD:3E:D3:3E:01:1C:E0:78:14:BA:1A:95:34:3C:4C
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 019D38D3ABA5A91E8E2ABE854E75D1495FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
Manifest number: 17F1
Signing time: Sun 29 Mar 2026 09:01:29 +0000
Manifest this update: Sun 29 Mar 2026 09:01:29 +0000
Manifest next update: Mon 30 Mar 2026 09:01:29 +0000
Files and hashes: 1: Rw7bO49wARtLW7cvAr1hGR-8Dgs.roa (hash: PLBVzKzfY6V8bQMUJREfJf+D4bMzTqr7tyLzjpGHOPk=)
2: _7yuKykMgB1X0J0CWpNI4WcG8YI.crl (hash: c+0vGd4lawK/Ys0LZh1hCRyZHFdEFRYDyWRMn4m3UeI=)
3: dj2slW3vOttM2lqgWk6ocAGgDC0.roa (hash: +gmMzsdCL+TQ11aBaKus+EwBw7GGlK23QYqU5eoC/TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ab:a5:a9:1e:8e:2a:be:85:4e:75:d1:49:5f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: Mar 29 09:01:29 2026 GMT
Not After : Mar 30 09:01:29 2026 GMT
Subject: CN=f1ceda8fecdd3ed33e011ce07814ba1a95343c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:62:1d:53:4c:38:f6:67:9d:1b:79:e3:9f:c2:
30:8d:41:ef:a8:4a:d8:7d:e6:af:89:04:18:b3:a7:
46:52:88:96:6f:5d:25:98:f0:01:c8:e7:05:21:68:
74:e0:f4:4d:51:79:28:98:a6:e0:55:f6:f7:0a:2d:
f8:b6:06:24:03:54:c1:00:c3:65:a4:f2:fe:22:0c:
14:d9:9f:82:49:a2:91:ac:38:45:f0:4c:a7:5d:09:
35:9c:6a:e7:a7:a8:62:1a:83:b9:96:26:44:90:da:
ca:8d:b4:b8:1b:09:4d:a5:88:4d:2b:18:f1:b9:b5:
6a:1e:a1:37:58:75:10:e6:0e:64:d9:13:45:1e:9d:
c4:e8:8d:9b:26:42:27:f2:54:0e:f6:a6:06:7b:07:
9b:2e:d0:ce:95:6e:f2:ba:58:bd:24:6f:fa:f0:0d:
bb:3b:82:a5:fc:8a:f2:b7:cc:4a:0b:fb:c9:b8:0d:
89:39:9d:a9:ae:30:03:62:7c:7d:e8:02:4d:bf:bb:
30:8f:e4:15:97:0f:c1:50:f5:81:e3:5f:f9:2d:50:
70:ba:ee:85:5d:60:6f:a7:d5:df:f9:e2:eb:66:7b:
2d:a7:17:d7:b6:c7:5d:2a:ec:8b:89:45:82:71:65:
c4:cb:9f:96:ee:7f:44:22:64:7e:79:6c:17:1d:2a:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:DA:8F:EC:DD:3E:D3:3E:01:1C:E0:78:14:BA:1A:95:34:3C:4C
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a9:08:a3:62:ec:67:81:82:bf:ef:22:71:03:8e:d6:83:66:
8a:11:dd:22:17:94:19:97:d4:4a:32:6d:1f:ab:86:16:6c:6e:
c1:a5:1e:fb:c0:72:3a:5a:d0:20:f4:7c:ce:4e:a6:5b:fc:40:
8a:ed:9c:62:41:e1:a8:cc:eb:50:dc:2a:57:a9:48:88:56:7d:
d1:f1:11:da:40:29:0d:10:01:f7:65:7e:f8:8e:5c:ca:e9:68:
94:1a:55:0c:50:97:f0:36:3f:6e:53:55:df:ba:a3:0d:99:04:
12:a9:47:7a:e2:5f:ff:b4:3c:1c:d0:21:82:e1:21:ed:50:9b:
13:26:d6:ad:e8:f3:e3:f2:11:50:8d:83:40:de:d5:a6:c9:69:
51:53:28:92:44:fb:aa:3e:bf:36:53:d4:05:5f:11:2b:2a:f1:
93:ff:d0:dd:30:94:6d:59:9c:93:58:86:2c:bc:4b:96:b2:34:
c2:7a:1d:16:41:70:03:6c:da:c7:f6:f3:8a:07:51:e3:51:7d:
55:ec:dd:73:8e:fb:4f:78:12:2d:69:37:35:30:d2:61:78:26:
8e:0d:c5:8f:05:d4:81:32:4f:91:fa:7a:a5:a6:62:86:6d:f4:
b8:86:ae:f9:4d:9b:f0:59:dc:25:94:f5:b6:a0:cb:b9:e7:9c:
0b:4c:3a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:29 2026 by rpki-client