Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: SkqwubJt0+onScQSCQ0E1ydTI9kY1urjA6dVpt75h0c=
Subject key identifier: 9A:7F:77:F3:61:A8:D6:23:49:DE:57:44:1A:11:1A:1E:A2:D7:60:85
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 019D3977907FF0F1E06F2D2A988880BC82FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 105D
Signing time: Sun 29 Mar 2026 12:00:30 +0000
Manifest this update: Sun 29 Mar 2026 12:00:30 +0000
Manifest next update: Mon 30 Mar 2026 12:00:30 +0000
Files and hashes: 1: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: SJ61emF58ShkRYe8iMIZOwuAq0FlKAJJURLK5rNBUoQ=)
2: GJC0hK61YfoTGiu4_BgSpKpEET8.roa (hash: WwyFHk/cwNc1twKhKndoqjGYh79zgc/kHaQHCW2vww4=)
3: XmgvodIVZlwmFpJZFx9OEb_S0YI.roa (hash: U77Nh8N61bX2SG2LWG51QmpxAadiZWSFMU1pOMYXXLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:90:7f:f0:f1:e0:6f:2d:2a:98:88:80:bc:82:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Mar 29 12:00:30 2026 GMT
Not After : Mar 30 12:00:30 2026 GMT
Subject: CN=9a7f77f361a8d62349de57441a111a1ea2d76085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:8d:f9:28:9a:84:d6:bc:4e:fa:64:25:65:
36:89:07:33:bb:40:d1:25:1c:8b:2f:e4:ef:09:0a:
9d:68:11:aa:d0:15:2c:fb:71:63:01:e2:c0:42:8d:
68:28:49:38:d0:17:0d:2d:5f:b1:a3:82:59:dd:6e:
34:99:b8:8d:e5:13:a7:c3:21:17:46:ee:25:f1:f5:
17:37:e0:a0:5f:54:d1:e0:ea:0b:89:04:22:ec:76:
23:5d:b0:01:8e:d1:ce:8d:e4:a7:1c:50:ed:0c:da:
61:c3:0d:20:2a:78:94:10:1e:94:99:9c:76:f5:d5:
25:78:71:b6:da:59:a8:90:b1:18:57:bc:29:ac:cc:
0b:bf:be:53:0b:37:7b:92:03:46:16:d7:66:2f:18:
26:19:64:b7:34:b1:c3:dd:2b:3d:c2:b5:33:3b:c6:
c6:2d:b9:6d:d4:3e:29:2c:9d:2d:06:96:f6:0a:2c:
a3:49:5a:4e:0c:89:6e:47:f6:bb:53:81:cd:9a:e1:
a5:2d:5e:ec:b3:8a:9d:e1:33:c7:f9:d7:54:ec:58:
6f:b8:53:d4:de:6a:52:57:93:31:64:35:7a:54:dc:
17:45:8d:58:c1:9f:16:d3:f1:0b:33:96:3e:14:66:
c2:35:bf:d4:15:aa:43:46:15:45:b4:6f:f8:51:40:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7F:77:F3:61:A8:D6:23:49:DE:57:44:1A:11:1A:1E:A2:D7:60:85
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7a:e6:e0:9d:a0:ce:ff:fd:52:85:5c:83:b8:a7:1b:86:86:
f8:d1:53:8f:bc:d3:a9:82:5c:6b:8c:93:53:53:b0:95:e7:4c:
bd:ec:51:ed:d1:40:e4:45:55:03:c7:79:a2:9b:21:7f:23:0b:
01:29:a8:00:18:ce:14:0a:1c:9a:5d:e8:ad:c6:f6:41:9b:15:
df:3f:5d:f5:2d:a8:e4:0a:d8:18:06:66:87:05:ad:c9:40:de:
30:b2:24:81:09:76:1a:af:a4:54:92:77:79:67:ff:1d:93:da:
8d:59:f7:fd:a8:7a:04:7e:08:9a:93:c0:81:fb:bb:72:39:e1:
6d:7b:62:47:05:38:95:ed:7d:ea:19:a5:45:47:4b:5a:7a:30:
63:29:a8:19:24:66:17:18:2b:8a:ba:ea:11:13:cd:d0:d8:a4:
97:1b:41:0e:52:00:29:5c:67:29:b9:34:c3:41:54:3b:f8:16:
63:83:ae:32:93:70:be:bb:55:2f:64:63:fd:2c:16:82:48:02:
97:75:24:ed:58:31:c7:ae:65:09:f4:74:52:f3:45:f5:fd:16:
f8:f3:ea:53:7e:b9:c0:59:05:e7:b1:37:6b:bc:5b:2d:28:2c:
c7:c6:21:4b:b9:f3:5b:6b:d7:83:08:ab:14:4c:04:29:aa:a6:
52:34:90:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:07 2026 by rpki-client