Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
File: R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft (raw, json)
Hash identifier: gIHG/EsvccprKq/egdKD6sxVzUl3FZh4EK+IOTcIoNM=
Subject key identifier: 5A:E4:B5:A5:23:19:0B:8C:8C:8C:0F:C1:FD:24:1E:46:CB:79:80:AD
Authority key identifier: 47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96
Certificate issuer: /CN=47b7c458271ec953c9f0b89c2070b8459aaa6b96
Certificate serial: 019D3977B12BCE318E60144CC162CEE49100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
Manifest number: 74
Signing time: Sun 29 Mar 2026 12:00:38 +0000
Manifest this update: Sun 29 Mar 2026 12:00:38 +0000
Manifest next update: Mon 30 Mar 2026 12:00:38 +0000
Files and hashes: 1: 1-TqiAazLK9RAar2iXroZHFof6YM.roa (hash: WVVq8CYPuWlLC3tvTr+h2SKeyS4SEjc0OCpY8ivnCV8=)
2: R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl (hash: 4+1H4tE5GhbPXvMTVSr3/Ip+bIIb2VMF6TyLvNrx6+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b1:2b:ce:31:8e:60:14:4c:c1:62:ce:e4:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b7c458271ec953c9f0b89c2070b8459aaa6b96
Validity
Not Before: Mar 29 12:00:38 2026 GMT
Not After : Mar 30 12:00:38 2026 GMT
Subject: CN=5ae4b5a523190b8c8c8c0fc1fd241e46cb7980ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:cb:5f:d0:0e:ad:61:44:8e:aa:93:ec:2e:
77:eb:0a:b1:05:e1:d0:d2:da:9f:b1:59:20:1b:b7:
d9:fc:60:17:04:b2:50:27:f5:30:b1:f2:96:68:e4:
9b:81:00:27:75:fe:1d:28:ee:a4:14:8c:09:c0:2d:
7d:f3:0b:29:c6:e4:e2:47:2c:58:0e:7a:6f:17:51:
a6:27:1f:b0:da:5c:f1:77:6a:c0:ff:90:32:c2:c6:
28:07:53:4e:02:40:b2:ed:f4:a3:71:d1:7f:09:64:
c3:11:06:c7:64:d9:71:4a:d1:80:b7:62:27:3b:5d:
59:1d:09:bc:dd:e3:e4:47:2f:5b:ce:d2:63:8b:f1:
0a:5a:4b:b0:61:9a:e1:6c:b8:1b:4f:ea:58:f2:72:
66:96:5b:53:69:88:58:46:f3:4f:1a:aa:bd:ba:00:
51:fb:a2:51:7e:f5:6d:ee:4c:a0:c2:dd:a0:4b:ce:
89:0f:70:50:df:35:85:5d:19:e9:8d:60:8c:db:89:
ab:b5:72:2d:fa:a4:75:a9:7b:b8:36:d5:59:ab:0b:
37:b1:26:a3:21:22:e8:a6:8f:64:1f:65:8e:5d:04:
79:58:f9:8e:df:ca:ea:13:4f:0d:31:08:ce:0d:08:
b8:1f:87:ab:83:9e:78:6d:69:c4:85:b0:f6:20:24:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E4:B5:A5:23:19:0B:8C:8C:8C:0F:C1:FD:24:1E:46:CB:79:80:AD
X509v3 Authority Key Identifier:
keyid:47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bc:ea:a6:36:23:4f:8a:ec:92:d0:03:3a:43:35:51:14:ce:
d7:01:d6:bd:8a:d4:5c:2a:6b:d4:b7:c1:48:b4:da:90:a1:a5:
1b:5b:bb:6b:fe:8e:65:9d:22:6e:3b:3b:da:35:4d:e5:f9:1e:
35:e2:67:73:2d:b4:d7:5b:13:30:54:62:de:78:39:74:19:c7:
7f:2a:24:41:07:9e:30:78:e8:a3:9f:53:1d:2e:e7:35:d9:5d:
1c:a1:77:53:e2:2a:d0:e3:98:53:fd:bb:97:58:1c:5c:e6:7c:
5c:ee:43:66:9c:32:1c:f9:bb:14:89:38:18:5e:e9:49:b2:64:
2c:a4:0c:88:3f:60:9e:3b:16:1e:f7:b6:8c:e3:e5:9b:0a:e2:
65:91:31:73:38:6f:ff:c8:fa:d4:a1:a3:f0:8e:1c:8b:c4:d6:
66:86:0c:b6:e3:b8:9f:73:6a:fe:c2:f6:ec:fc:94:d4:ab:d3:
ac:37:33:b7:2c:d2:a8:59:1f:f3:3a:dc:a7:d1:d6:3a:d6:38:
c1:f5:86:f9:38:75:9c:26:6d:dc:20:4e:79:ff:2d:b5:88:92:
e0:39:f4:8a:7a:87:c7:df:75:32:d3:40:aa:df:d5:f8:e0:23:
03:17:1a:6c:02:d1:1b:e9:0d:89:bc:5c:15:c4:f7:ce:04:fc:
94:3e:2d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:41 2026 by rpki-client