Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier: M+MXwCPj7r55yHinfDiS+KlDinCWLYbzsCCQOnLcYLE=
Subject key identifier: 01:2B:86:F0:77:06:F1:68:67:3C:D1:1B:98:D5:63:6F:A2:91:47:93
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 019D38D295E78C291B8611076905E4EDD04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:00:18 +0000
Manifest this update: Sun 29 Mar 2026 09:00:18 +0000
Manifest next update: Mon 30 Mar 2026 09:00:18 +0000
Files and hashes: 1: 16IES9haatKMkP-HejVSazJdMkY.roa (hash: mQPtnV+K2FeabOm74g9Ubv3nHZo4wLPT4wK0cMDSkes=)
2: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: xXX2j2prByhRKrUJBIlpu0HP2ONArv/tidhFnpNOcaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:95:e7:8c:29:1b:86:11:07:69:05:e4:ed:d0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Mar 29 09:00:18 2026 GMT
Not After : Mar 30 09:00:18 2026 GMT
Subject: CN=012b86f07706f168673cd11b98d5636fa2914793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:4f:22:f8:06:eb:cb:13:f1:00:df:d1:3e:
dd:bb:6c:6d:61:b4:09:32:4b:c9:2f:b9:65:53:f1:
49:ca:53:1f:59:d2:bc:91:59:70:2d:46:a4:5d:7a:
5e:0e:83:93:71:56:d7:1f:f9:bf:b3:3d:f7:4b:7a:
e9:2d:a1:7c:63:32:1f:86:c6:aa:c0:35:31:69:46:
78:bd:8b:02:38:38:54:5a:ce:87:6f:c9:af:8b:f9:
37:96:93:2d:a4:60:c2:ca:18:8d:4d:6b:88:f3:f7:
9e:02:51:e0:8b:78:b3:1a:d2:b4:95:84:61:01:84:
f2:b4:df:93:7f:fb:7a:43:db:d8:dc:cc:40:5f:c4:
e0:88:1e:e5:61:11:5a:9a:0d:34:0f:e9:db:b5:b5:
00:7a:75:57:de:dc:ea:33:fb:58:18:ea:78:d7:4b:
c0:77:b6:e6:fd:be:db:9c:00:d3:78:95:73:f7:19:
41:f2:9b:3b:ec:36:5e:ca:27:55:bc:09:87:d1:15:
25:ac:50:c2:11:65:09:cc:ac:9c:a6:61:21:fe:19:
f3:87:46:ae:2e:8e:7f:58:b0:60:b1:6c:5b:b8:0b:
ab:c7:26:3b:46:2e:e5:2b:22:ea:41:cc:04:63:fd:
40:60:47:70:d1:5c:fd:6f:70:e8:3e:d6:32:a1:f9:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2B:86:F0:77:06:F1:68:67:3C:D1:1B:98:D5:63:6F:A2:91:47:93
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:de:b8:57:10:d5:31:2b:ca:c3:10:7d:7e:e1:4a:c7:5c:9b:
11:10:ff:9c:81:e3:bc:85:88:c5:e3:80:83:3a:45:fe:7c:26:
ba:c0:c4:e2:32:42:9f:1e:f1:15:03:69:f7:ad:fa:f2:d9:39:
51:d9:0d:9e:6d:81:4b:54:df:5a:03:59:27:c8:be:25:15:26:
84:a3:71:48:19:e8:89:b1:4e:f4:ee:36:10:09:9f:38:74:a5:
69:ae:f7:e7:06:e8:92:14:77:1d:7d:8b:db:71:ab:f5:b5:ad:
93:84:5b:a4:5f:da:eb:f2:e6:c9:57:5a:b9:9e:6d:9e:82:f3:
2e:80:91:7c:12:71:de:a9:de:67:74:33:18:40:58:a3:51:ec:
59:cb:db:9b:c8:7f:ad:87:e5:d6:eb:e3:f8:d8:d0:54:b4:67:
4a:e5:13:35:1a:35:92:68:81:6e:bb:da:9d:6d:ae:d4:34:ea:
08:01:b3:3b:53:9b:9b:0e:2a:f6:6c:e8:c4:22:c0:c1:9b:ea:
e9:75:20:31:83:68:8e:72:78:1d:18:39:8d:24:50:01:71:34:
0e:89:a0:f5:71:98:6e:07:45:35:9c:0c:1b:ae:d3:b8:0a:18:
69:82:19:a3:bf:b5:b2:52:a7:60:0c:6e:e5:de:f8:5b:66:f0:
b1:58:40:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:18 2026 by rpki-client