Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
File: _7WFJ4AULkE_nxWyTVmRMxGhDsI.mft (raw, json)
Hash identifier: +gyrSk4UkJZr63dfauOkTLCUss0uaG1aKq0ZNbv4HDo=
Subject key identifier: F4:CE:64:E5:06:D5:51:C8:22:F2:3D:8D:59:8F:C4:EB:D4:2F:A9:9A
Authority key identifier: FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
Certificate issuer: /CN=ffb5852780142e413f9f15b24d59913311a10ec2
Certificate serial: 019D38D296DB68CEDDF6ED097BFA2243AF2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
Manifest number: 0345
Signing time: Sun 29 Mar 2026 09:00:18 +0000
Manifest this update: Sun 29 Mar 2026 09:00:18 +0000
Manifest next update: Mon 30 Mar 2026 09:00:18 +0000
Files and hashes: 1: Onkw20J3Jeq06l3BhcttsXGB3d0.roa (hash: Ot3mUR6mror5TcUgnoDKZwfM/GJizJrnhX1MdvXwCEI=)
2: _7WFJ4AULkE_nxWyTVmRMxGhDsI.crl (hash: N37gjTlbe2xWm7yJBPKhjXXGaYk0SqQwzqV83mIrUC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:96:db:68:ce:dd:f6:ed:09:7b:fa:22:43:af:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb5852780142e413f9f15b24d59913311a10ec2
Validity
Not Before: Mar 29 09:00:18 2026 GMT
Not After : Mar 30 09:00:18 2026 GMT
Subject: CN=f4ce64e506d551c822f23d8d598fc4ebd42fa99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:85:5a:0b:13:41:8c:10:29:02:0a:44:41:
4e:e0:47:f6:44:e9:68:c1:1f:b4:41:09:ad:7b:26:
0c:63:dd:d9:9d:87:0c:91:09:87:d6:dc:46:7b:1d:
23:0c:77:4c:75:9b:cf:6c:df:e9:cb:6e:f0:b7:bc:
a0:e1:ea:0c:6e:a7:44:60:22:c3:40:34:e2:23:4d:
a5:a8:d2:74:e5:86:53:7c:e5:36:16:a0:ba:27:ed:
3e:89:c1:14:29:07:d2:7f:9b:84:b6:93:26:ed:2c:
e6:3e:59:fa:20:f8:84:c3:59:5a:e5:3d:0f:52:79:
d7:43:d8:e8:f3:21:7c:fe:0d:8e:5e:fb:b1:3f:7a:
85:06:dc:75:15:f8:91:b8:43:84:54:00:3e:7d:3d:
31:1b:08:8a:6a:c0:e2:80:5e:80:54:a1:7f:31:db:
e7:e7:8e:cb:34:b5:d6:42:67:14:37:8b:ed:30:8f:
1f:ef:14:e2:f8:d1:ff:2a:0f:71:74:13:49:b3:63:
a0:28:e2:1e:fc:b8:dc:61:aa:0a:61:9c:4a:2b:20:
55:f2:80:04:f9:1e:6c:e9:5a:b0:bd:eb:3c:48:37:
17:a3:a9:50:1b:45:41:1d:c9:1c:c5:fd:f9:2e:dc:
c8:cb:34:5e:b3:5a:ea:5d:e7:9f:09:c2:88:80:19:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CE:64:E5:06:D5:51:C8:22:F2:3D:8D:59:8F:C4:EB:D4:2F:A9:9A
X509v3 Authority Key Identifier:
keyid:FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:25:36:36:9e:7d:b8:49:3f:77:27:90:84:01:56:ef:6a:fd:
8e:fb:1a:af:79:cc:73:d9:9b:7f:ba:4c:41:f1:12:73:ba:9b:
35:6e:b2:79:d3:7c:ff:4a:e5:a0:d1:ac:39:2e:a6:43:92:28:
6a:3d:0d:1b:62:0e:4a:27:44:bd:56:51:f3:0d:ec:db:1c:b7:
73:b8:54:ec:75:8f:03:f3:9c:ba:6a:1c:dc:e7:04:ca:4d:94:
8e:86:64:3c:6b:d9:f0:49:ec:27:2e:6a:42:1e:76:50:81:7e:
7f:52:b5:c8:a2:23:bd:bd:56:4d:54:02:1d:fb:2e:02:56:d8:
73:03:fb:0a:f2:5f:4d:0f:9d:b6:6e:00:24:45:62:6c:ca:cc:
fb:33:e4:89:0d:55:e2:ec:eb:cd:3d:9e:96:ba:77:c3:4b:ce:
e8:19:1b:21:87:39:10:75:95:ba:c0:5c:45:67:79:a7:bb:c0:
41:c3:ef:8f:2c:d7:70:5f:b8:15:53:05:67:a8:ed:ba:bd:12:
ee:d6:9b:86:b7:00:f8:0a:70:b3:40:78:42:68:a6:af:bc:49:
d7:df:ee:73:6c:78:0c:1d:2e:1a:87:e8:96:fe:8e:c6:c0:9e:
eb:c3:1e:9e:a1:54:2d:ea:75:cc:cc:6d:3b:f8:3d:22:a5:55:
8b:90:17:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:39 2026 by rpki-client