Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: juXmlj8eYSAbl4cFEapm5Y2HZnEPPPGTGidnzE1SwHU=
Subject key identifier: A0:DD:E0:12:62:4C:52:84:68:10:1E:BB:33:42:88:E8:73:CE:77:F7
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 019D37F6DE19C6E51A4EC5B3A2CAFBFE3771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 1696
Signing time: Sun 29 Mar 2026 05:00:18 +0000
Manifest this update: Sun 29 Mar 2026 05:00:18 +0000
Manifest next update: Mon 30 Mar 2026 05:00:18 +0000
Files and hashes: 1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: Od8FnN73rN7J78cy+7Nm5xcPC1/QfRzZVwrk//BBZ+U=)
2: CM5yTRt39UsRzQIWzuT7HO7bzSE.roa (hash: RH4eRmyLdVDmBQ+RCsFz+zVNIdYG+Aj2Xj1CkOhS/oI=)
3: LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa (hash: bMz5HXK6775JKPVW+G1i9ymi7O9XK+msuKRHy3NE0Qk=)
4: psWOMQeMbdYZeEJwNKNEAJmZbBU.roa (hash: Kwf/BATNuOaMCMQQKCC+7fI7j3/5LLVOOW7HAw/+s1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:de:19:c6:e5:1a:4e:c5:b3:a2:ca:fb:fe:37:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Mar 29 05:00:18 2026 GMT
Not After : Mar 30 05:00:18 2026 GMT
Subject: CN=a0dde012624c528468101ebb334288e873ce77f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4c:37:46:ac:08:0d:52:02:c0:5d:28:d1:73:
d5:90:2c:a8:d5:17:8c:e9:61:41:85:19:27:eb:25:
19:d8:5b:d3:21:4a:22:8c:94:5b:a4:4c:6e:df:2c:
9d:ad:39:af:9d:f3:19:af:4e:85:bd:4b:6e:cc:18:
32:f8:f7:07:42:2c:68:dd:aa:36:b3:cc:af:86:7f:
5d:4e:68:88:02:07:c7:86:5f:67:1f:90:16:d3:13:
08:25:ad:c4:73:b3:a9:1d:ab:77:c2:4d:2b:bc:c5:
84:2c:33:d3:72:16:5b:9c:9b:22:fc:db:bc:99:33:
df:58:4e:39:c9:c6:54:54:2c:80:3d:bd:98:1a:58:
47:d3:4f:cf:42:bd:ae:71:b3:d8:0f:b1:85:a1:bf:
e2:f2:da:78:3f:c4:a1:18:4c:af:92:69:fa:4d:d2:
cf:32:3e:9f:c0:8a:72:5a:cd:80:cc:d5:28:47:81:
3e:61:72:93:8f:70:4b:db:14:a8:2e:d5:72:70:41:
17:13:3e:02:72:7c:79:17:f8:e8:fc:36:bd:44:a7:
70:77:9f:f8:ed:b6:38:25:eb:a3:53:71:86:70:14:
9b:f5:be:45:cb:5b:03:44:99:b3:72:48:c6:70:b2:
67:a4:4a:6f:b0:60:db:7a:35:07:da:23:fb:57:df:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DD:E0:12:62:4C:52:84:68:10:1E:BB:33:42:88:E8:73:CE:77:F7
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fd:6f:21:f8:28:2a:62:ac:95:bd:b2:21:5c:ee:48:13:6c:
1a:33:cb:6a:dc:a3:cc:ae:d0:aa:ce:f3:a8:50:e8:a9:3c:d1:
7f:88:e5:47:87:01:a1:3b:50:a7:0d:65:4d:ca:64:63:f7:55:
eb:74:e9:40:24:cb:52:91:4d:b3:0a:05:63:53:5e:12:6d:97:
01:4d:f5:1b:11:3e:06:b4:1d:15:fd:85:cd:02:77:e9:b6:24:
9d:a0:db:e7:0f:a7:3a:ab:2b:4e:70:83:11:7e:84:73:b8:60:
2d:da:7c:03:91:bb:f2:4c:8e:a0:57:26:4b:15:d7:d4:b2:e1:
da:47:68:0b:2e:bd:c6:3d:be:88:43:f9:e9:3c:6b:98:b7:cb:
33:88:b8:13:a0:22:fa:0d:c1:b9:ab:1b:6e:3a:9f:ea:19:5c:
82:ce:48:17:c0:d7:30:77:21:f6:05:1b:b1:8a:7b:77:2e:1c:
01:c3:68:2f:db:32:84:f2:2d:b3:42:04:7d:6b:a0:14:41:5a:
b3:08:24:79:d1:92:5e:52:f4:79:8b:e4:50:85:08:29:8f:d1:
4c:81:ad:77:21:08:d7:62:7d:66:0d:d5:b2:f5:40:4c:61:c7:
bf:a3:89:96:ac:8d:b1:fd:01:f9:a4:0b:82:1c:d3:4a:7a:1c:
de:12:fd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:58:08 2026 by rpki-client