Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File: 7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier: E2ZZzjyRB3iP6fpvDsujSrJtSvi0qm2/TLx/wvq7tGY=
Subject key identifier: 65:E0:35:ED:29:69:9F:47:DD:04:82:56:18:E2:4C:7B:7F:CD:4D:3C
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 019CE55AC0496CF797A5ECEA18C11116877D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 04:00:55 +0000
Manifest this update: Fri 13 Mar 2026 04:00:55 +0000
Manifest next update: Sat 14 Mar 2026 04:00:55 +0000
Files and hashes: 1: 0_75cziqkrd_avFDUZ9rg7qilxA.roa (hash: pSQt5ocfFcDKXdLoPRHR826k+pr8i3n1PKJhobyxS7Y=)
2: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: TblXBKY1COJQwi61Xycpfj+FUemPXpS5O5uVmGJLGX4=)
3: HkkRPwqU3p5aRopaf6XmKJHJOS0.roa (hash: rwteSwkgkB56v9QAYH409kxEVNO2s78pdzGxZ9J+cBI=)
4: OLd3XQLlCLw9LdNyxml8_t8xuEg.roa (hash: CeqIhEYWVzjJk4bpmS5ELgvmNglk0SZVe+OxNRFsLsg=)
5: YFvRu6poI8Ij__cAkw9ZXzn1ELA.roa (hash: TFdZLvuT5jh6qUmHTvzmxP9xeFFqlGN1y9JFOGD2i4E=)
6: YeiOtzdwnFZaRqUumW9LmExU9wM.roa (hash: MQxdsF/k+I/4Kf6o+ulDftRoc2iIVZbE/JYfdEq0Q2c=)
7: fXNtDKuxKl9PcIOvEE_JPpC6Emk.roa (hash: d9XcOkmKMoLj3DydzQnJz/zsoCrdK+ingQkEPwtmOSU=)
8: vKDDTdeKpC38SOoCmTQDNYKcN_A.roa (hash: 1c+RNvMiXqFMlXYtXBUL17aJsh89UBFVQ2ryMtknJE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:c0:49:6c:f7:97:a5:ec:ea:18:c1:11:16:87:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Mar 13 04:00:55 2026 GMT
Not After : Mar 14 04:00:55 2026 GMT
Subject: CN=65e035ed29699f47dd04825618e24c7b7fcd4d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:fc:37:86:20:72:47:52:e2:20:26:83:1a:
6a:55:ab:58:4e:9d:f0:a2:c2:2e:66:da:8a:82:a9:
30:16:93:50:5b:57:8d:d5:1c:a9:fc:98:0d:bf:d9:
b3:cc:dd:c6:98:d3:c0:08:30:2f:41:a0:d8:04:67:
d6:b3:6b:92:c9:81:5d:e4:11:40:da:7f:d5:25:cf:
59:d9:a6:fd:71:6a:2c:f4:7c:f5:fa:52:29:46:54:
d5:9b:d0:2a:7a:67:1e:91:86:42:3f:81:4b:93:4b:
17:7d:26:2c:a7:9d:df:ee:c5:e2:ac:61:9a:71:9b:
6c:21:dd:fb:2b:da:b1:f2:7e:cc:ec:05:2f:d7:d1:
f8:13:16:5b:a5:d0:8b:50:fe:81:d3:8a:dc:ad:9a:
a7:6a:90:77:f9:b7:df:99:12:79:10:43:a5:bb:2d:
ff:7d:fd:ab:72:87:64:da:9e:42:94:9a:e0:1b:b4:
62:54:5b:ab:56:32:6d:b1:80:b6:3a:c3:3c:02:42:
c8:f9:f0:42:a2:76:44:1e:46:d9:59:82:f2:b4:e8:
72:49:5a:28:f8:48:7f:2c:ad:f9:33:1a:0d:7e:b1:
e9:09:f2:91:56:9c:5a:11:fb:3a:63:bc:e1:b4:3f:
6b:da:ab:73:a4:20:51:84:37:16:27:aa:32:7b:99:
ab:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E0:35:ED:29:69:9F:47:DD:04:82:56:18:E2:4C:7B:7F:CD:4D:3C
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:37:c0:b2:41:70:6a:e8:39:36:f4:4e:d5:5c:c7:23:c3:d4:
ec:d0:1e:e9:eb:5d:22:99:ad:43:43:0c:32:b2:b2:cc:3b:9b:
13:7a:96:fd:43:77:7b:f2:8e:35:59:1a:fc:bb:5a:c3:52:c1:
c7:aa:eb:7e:34:6a:3c:3d:30:6f:c7:ff:a2:2a:4f:04:85:79:
db:07:21:57:be:0d:3a:cc:5a:7f:ac:d0:11:a4:d9:ab:f1:b9:
a1:22:05:c8:19:31:5a:cb:6c:d8:c4:89:5b:de:da:04:25:03:
d3:d3:bb:62:c1:d6:da:f9:6e:27:de:15:44:72:1c:29:8a:2e:
40:1c:41:e7:e1:d9:cf:d5:b0:f0:f8:b2:ee:15:02:1e:03:9b:
b3:fc:49:20:39:12:60:c2:47:b8:44:95:4f:e7:56:d2:16:b3:
0d:4c:89:fe:05:f3:1b:5a:14:a2:a1:cf:dd:73:96:a9:52:6d:
69:5a:fa:11:0f:3b:9c:d2:8a:aa:a2:38:b6:83:70:4c:14:c1:
e8:e3:93:68:a9:c0:7b:98:61:13:38:91:85:b9:9b:fb:3d:21:
44:40:dc:2b:50:b1:fb:dc:5a:70:ea:a6:01:02:8a:10:98:c8:
da:82:c0:2a:1e:e2:fb:23:2e:01:29:e6:72:68:75:12:3f:08:
99:44:46:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:55:22 2026 by rpki-client