Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
File: 1EdMHAbL_elGFNZcfQX2FKbiOZg.mft (raw, json)
Hash identifier: xhBsi2B5z7UdRHfFPiI6PGXOYun9qnkE1komp8HMaOY=
Subject key identifier: C7:FE:B4:08:FB:13:6C:5A:25:51:23:9E:13:E2:C3:8C:9B:F1:BE:F1
Authority key identifier: D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98
Certificate issuer: /CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
Certificate serial: 019D3789AA8CF68E748BC77B0A6BE6973895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:01:01 +0000
Manifest this update: Sun 29 Mar 2026 03:01:01 +0000
Manifest next update: Mon 30 Mar 2026 03:01:01 +0000
Files and hashes: 1: 1EdMHAbL_elGFNZcfQX2FKbiOZg.crl (hash: uZ9qqMqqgxRohdqDr8d0YEJShJNAsv6pVTuVw2XvjbQ=)
2: W6Y3idz-0ZKwDYNSRKjUJfW8Ww0.roa (hash: 1WR2Uw1GdUwynyPsOGJjutQPMS2E5J6S8kJ56yegvbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:aa:8c:f6:8e:74:8b:c7:7b:0a:6b:e6:97:38:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
Validity
Not Before: Mar 29 03:01:01 2026 GMT
Not After : Mar 30 03:01:01 2026 GMT
Subject: CN=c7feb408fb136c5a2551239e13e2c38c9bf1bef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f0:83:21:79:45:d1:07:6e:f2:13:a0:04:d1:
c1:27:48:f2:78:cc:ac:9b:1c:0f:42:01:95:a7:ce:
29:bc:65:e2:61:0a:63:2d:da:73:7a:d7:1a:80:b7:
b8:95:71:16:87:a5:02:7d:34:36:68:5b:fb:07:e5:
7a:da:5e:63:42:ff:13:1c:51:7a:0c:8c:da:83:4b:
d8:d5:37:14:77:f1:e2:fc:33:48:cd:25:fa:44:15:
53:bd:9d:b8:c3:63:0f:5b:bd:02:a6:c3:ec:d3:6c:
40:86:49:a5:d9:63:ac:33:b5:45:f4:ab:36:3b:6b:
44:14:91:45:5c:b0:a7:b4:f7:ad:9f:73:bb:26:96:
17:c6:47:90:90:ea:20:f0:aa:0e:ee:d8:56:8f:1b:
10:3e:59:72:bd:82:9d:aa:95:4a:f7:19:4a:d0:37:
e6:90:a8:75:07:73:79:30:d5:a6:93:36:55:e0:c6:
09:ae:36:50:dd:f6:bf:52:04:aa:eb:3e:bb:70:97:
58:06:5a:39:7c:56:1b:50:37:69:7d:18:4b:fe:1f:
c8:e5:60:06:2c:cb:e2:96:a5:e4:2c:b7:b9:ed:d2:
f5:04:e7:b4:6b:bb:b3:17:44:9f:4a:68:3b:93:c5:
dd:bc:02:c2:44:68:c2:40:2e:b5:09:f2:b6:07:d1:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FE:B4:08:FB:13:6C:5A:25:51:23:9E:13:E2:C3:8C:9B:F1:BE:F1
X509v3 Authority Key Identifier:
keyid:D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ae:de:1c:54:54:03:23:b6:36:c4:28:42:be:a7:c5:c2:51:
6f:1b:1b:00:a0:7f:de:36:60:a3:bc:21:30:59:ee:a5:e5:8d:
a6:61:07:5c:1c:b6:1a:a6:94:5c:a4:b5:e3:7a:d7:dc:50:5c:
e1:84:e3:d0:50:86:45:b3:f0:7c:9d:ed:32:11:b9:90:be:72:
f9:69:19:65:2d:fc:26:d1:9c:e5:a3:a9:b8:21:32:a7:d3:cd:
5a:ac:63:a6:2e:39:db:b8:00:26:35:5c:f4:1d:32:2b:f7:80:
15:e0:53:12:15:85:20:a1:d4:b8:d8:88:fb:1b:88:7a:75:42:
e6:09:21:47:92:6e:b3:73:9c:5a:12:08:1b:12:2d:25:d5:29:
37:8c:06:33:74:e7:78:50:50:60:dd:3c:17:7f:ae:46:6a:17:
ab:dd:93:4b:59:e6:fd:f7:15:24:1d:b1:b8:09:ee:3c:dc:36:
fb:80:a9:a1:4e:82:0a:44:58:99:67:86:6e:49:a7:e3:6b:b5:
a6:c3:20:f2:aa:21:41:a9:aa:84:83:df:ab:d6:6f:9d:19:1a:
db:b0:ac:86:ea:41:22:69:94:dd:de:36:a2:a8:25:44:97:54:
61:e6:7e:87:9d:cf:25:10:54:45:48:76:3a:4a:45:bb:48:27:
08:dd:f4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:46 2026 by rpki-client