Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
File: 7LYS4fa02D-KXVUs87YO3SO_6fQ.mft (raw, json)
Hash identifier: DvPCaVPXR5f49TlxTdZveIUUfTVG/UsiiCvDbXkx4cg=
Subject key identifier: D0:1E:1C:9D:9D:BB:E8:E1:A1:9C:F2:94:80:B2:BE:25:01:CE:C1:2E
Authority key identifier: EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
Certificate issuer: /CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Certificate serial: 019D37890DD2E8E36E9493AEEF1A872DD077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
Manifest number: 17EE
Signing time: Sun 29 Mar 2026 03:00:21 +0000
Manifest this update: Sun 29 Mar 2026 03:00:21 +0000
Manifest next update: Mon 30 Mar 2026 03:00:21 +0000
Files and hashes: 1: 7LYS4fa02D-KXVUs87YO3SO_6fQ.crl (hash: NCnvseDB9+oGVYpO2RVA+gTUOvvhJveGNeVvfFonkJA=)
2: AzpD5noA_nHoDgI_aTNxHke-Xy0.roa (hash: Ni6jQZi/gwDWwXk6njK0ZbQvtstq3uIhzJI0DBeKzJU=)
3: D18iaweY7IkhqqR5zq6vLrvj0Pg.roa (hash: Hhn3FeMGETnYd99FxqKSu0nN+d4EwdOOJOCVfjvw0Rk=)
4: jV1asnbrgXM90QKjihAxsNR9PQk.asa (hash: NDHbMMlJvqqB1nB6nGndGJ85UIp/jb8KVazD5X83jRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0d:d2:e8:e3:6e:94:93:ae:ef:1a:87:2d:d0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Validity
Not Before: Mar 29 03:00:21 2026 GMT
Not After : Mar 30 03:00:21 2026 GMT
Subject: CN=d01e1c9d9dbbe8e1a19cf29480b2be2501cec12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:28:c7:18:62:c6:7f:bd:b8:8c:cb:31:8e:
9d:14:52:72:e9:72:cb:9f:0a:8c:48:23:10:f0:92:
f1:80:9a:9d:39:dc:6b:ff:86:ea:db:ea:bc:12:e6:
72:04:ea:b6:ec:39:b8:83:04:a3:5f:eb:77:05:cc:
8c:7e:99:95:b0:a4:1e:b6:26:56:66:35:65:fd:3b:
f2:06:6d:cd:ec:48:2f:56:ab:5e:3b:eb:c7:94:9f:
aa:bd:dd:e2:6a:1c:a9:3d:2a:98:1c:3e:82:7c:04:
ee:6c:8a:e4:cb:f7:a7:1f:11:a3:5b:b4:d2:28:90:
b8:44:1e:f4:3a:41:ff:d4:2c:fd:bb:64:fb:6f:83:
a1:2b:3d:1c:cd:fd:e0:26:ae:69:ae:23:b5:f2:90:
cf:ce:b7:f7:6e:e5:f0:0e:a1:1d:3f:60:51:f0:df:
68:38:9d:e1:7b:c9:3f:97:09:28:2c:e9:6a:fa:53:
20:bd:da:bb:cd:d4:2e:a3:ea:e7:c1:9a:2b:65:9f:
75:6b:26:1c:d1:0e:87:47:07:17:d2:13:85:4c:02:
4d:32:8f:0e:a7:41:e7:b8:4a:1c:97:00:ce:77:2c:
73:83:6e:91:b5:87:4e:cd:ce:8b:c4:d9:34:88:11:
72:03:1b:b0:f4:ac:37:64:e5:e4:51:65:c5:0e:88:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:1C:9D:9D:BB:E8:E1:A1:9C:F2:94:80:B2:BE:25:01:CE:C1:2E
X509v3 Authority Key Identifier:
keyid:EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:06:23:48:54:e8:9c:6c:53:e7:1a:9a:6d:58:42:b9:bc:86:
15:06:18:82:21:8c:56:23:fc:fd:df:82:06:22:74:a2:24:8b:
47:9a:66:a5:da:3e:41:01:20:6a:e0:26:0b:55:8b:78:6c:73:
44:cc:80:a8:04:bc:90:aa:90:9d:17:2b:48:97:0e:20:6d:5f:
96:5d:5e:8e:ec:62:72:b6:54:4f:5e:76:15:7d:4b:94:0c:75:
7d:1b:04:cb:9d:de:8f:f5:60:e4:e0:d5:1d:72:c9:2a:86:9b:
4c:cf:47:4a:b6:f2:69:37:e0:de:55:a1:ee:01:36:8c:ca:c6:
b6:29:08:1e:49:ec:a7:c8:b8:87:71:73:fb:e0:24:82:e6:eb:
76:52:af:a1:80:4d:aa:47:31:ab:29:38:b8:df:c0:66:06:ab:
26:40:ac:2c:35:40:e2:29:a3:af:c0:7d:52:41:63:c1:ef:8d:
06:24:02:90:bb:d5:4b:2a:44:ec:f8:06:f7:74:48:cc:8b:32:
07:d6:bb:ab:55:7f:7e:fe:24:3f:ca:ca:9b:4f:52:d1:08:93:
74:ae:d4:fe:2a:14:70:fe:02:c3:39:86:82:35:82:3c:0d:4b:
ce:96:d0:8c:a5:eb:93:a2:ae:fa:46:f4:04:64:1b:e2:4c:38:
6c:bd:b9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:31 2026 by rpki-client