Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
File: 7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json)
Hash identifier: jt5Z5ygm0DNnOU1fTQJq9XpcbbGryPnMXM5mbT/MeC0=
Subject key identifier: F3:25:3E:1F:99:9E:AC:8E:68:04:EB:AF:CF:91:79:5D:59:63:F8:08
Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
Certificate issuer: /CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Certificate serial: 019D38657E6C619EE64D0738CB51ED003764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: 2TShiZ4zznwKdZwyCNwbm1AAk2T1VxLKRHbgqumekyo=)
2: pIgvzLjixs4_sf2VopagAU-SJ2k.roa (hash: 8W+ULMj0Umqs1HGvdH4mGs4tGpsjhjBCqHgwP2+9Xgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7e:6c:61:9e:e6:4d:07:38:cb:51:ed:00:37:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=f3253e1f999eac8e6804ebafcf91795d5963f808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:da:72:4a:91:54:4d:94:9b:4e:9b:02:fb:
99:d9:8c:92:57:a8:78:1d:5b:74:2e:9f:30:7a:d1:
9b:87:57:19:03:ea:d8:2c:69:a7:d0:93:a4:cb:d0:
54:cb:8e:1e:2c:5a:10:da:f8:e4:d6:d2:8d:c7:20:
41:ed:34:ec:39:7b:55:c6:57:0d:b3:d9:f5:d7:dd:
b4:8d:33:9f:37:73:85:67:b8:c5:e8:14:62:0c:ef:
e5:16:db:8d:a4:f3:9d:ba:d6:dc:19:6b:aa:bb:07:
ac:12:4a:c2:6c:04:60:72:2e:36:a6:60:93:04:52:
d0:ea:81:95:1f:36:2b:a8:95:b3:93:95:64:78:57:
9a:00:3f:06:d9:71:2d:e6:5f:42:0a:49:fe:24:b7:
ff:5c:e1:a8:0f:6f:ff:9c:75:37:17:d1:dd:b6:f1:
d4:0e:f6:6c:a6:2a:17:a2:44:cf:a8:f3:02:ca:67:
7f:72:1f:1f:67:15:9e:e2:a5:fd:9e:f4:74:81:0d:
aa:4b:c8:fa:07:e3:6d:e7:58:b6:76:82:47:f8:1b:
d8:df:0e:6c:81:1d:bd:8c:cc:68:46:c6:fc:f3:9e:
33:47:3f:e4:2a:6b:e5:57:9e:65:02:54:91:db:3b:
00:a7:d0:8a:91:87:d1:13:e0:3d:79:f7:31:73:99:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:25:3E:1F:99:9E:AC:8E:68:04:EB:AF:CF:91:79:5D:59:63:F8:08
X509v3 Authority Key Identifier:
keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e1:79:ca:33:89:63:00:0d:ab:10:4c:e8:c6:80:52:86:82:
ff:dd:ac:b7:db:fc:63:85:7c:dc:34:ec:0a:1f:bf:bd:d0:7a:
91:4e:95:1a:35:b0:99:dc:2e:4c:b0:70:0c:c6:86:b4:d5:15:
db:97:fd:8b:f5:9f:25:69:8d:a3:89:7c:db:56:ab:71:bb:fb:
0d:60:0d:b1:70:a6:b6:2d:a1:2c:f8:f8:5b:ec:8a:23:d8:ab:
a9:03:a3:48:0f:69:a4:d3:e1:b8:ef:9e:47:26:2f:e0:0f:4f:
3f:9e:44:0e:5e:8e:41:74:0d:80:5a:5a:27:54:8d:61:96:56:
fa:3d:b5:ab:a5:3e:39:aa:d3:9b:87:e4:b7:4e:06:a4:d2:81:
28:92:bb:eb:09:a1:1a:1b:67:15:14:05:90:49:c6:df:fa:44:
9b:95:19:c1:ef:e2:19:6c:ba:25:87:8f:70:89:62:a0:05:c8:
d2:d3:c3:7c:40:e3:4d:23:5a:5c:19:f9:ce:64:20:43:b3:db:
ba:4a:bd:58:9f:5e:bd:f7:d5:bf:6d:a0:fe:79:bd:51:98:75:
4c:1f:b5:f6:16:67:64:35:cb:58:2c:58:1e:17:6c:3d:76:e7:
25:51:46:6e:bf:68:2c:d8:55:35:f4:42:44:0b:c9:a8:0f:35:
4f:4f:2f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:15 2026 by rpki-client