Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier: iJRtMhEpFknbNZ6ZsXJnne8WrcjO+IpHls3RNIPBP4Q=
Subject key identifier: C1:53:7D:99:7B:F0:26:0E:F9:15:13:08:04:1F:04:F1:33:2A:B5:8E
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial: 019D3A1C672AA7DFE2BB78933BDC0388323C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 15:00:33 +0000
Manifest this update: Sun 29 Mar 2026 15:00:33 +0000
Manifest next update: Mon 30 Mar 2026 15:00:33 +0000
Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: hxgWeqlS975T8C1R5wyoV8LtNnP5zSKk7oyvw5OEWag=)
2: 955C7AtZAhtfMCkNkF_V4r29zNs.roa (hash: BzjiJ1i4x8f0IF+YLTcXKg5V1DmhNLRMYe5guMs7CHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:67:2a:a7:df:e2:bb:78:93:3b:dc:03:88:32:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Validity
Not Before: Mar 29 15:00:33 2026 GMT
Not After : Mar 30 15:00:33 2026 GMT
Subject: CN=c1537d997bf0260ef9151308041f04f1332ab58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:9c:c7:04:f2:b5:30:d8:e0:19:44:e4:d8:
0f:72:f7:4e:f3:63:07:92:fa:a4:da:cb:05:1e:0e:
76:07:12:09:d5:da:87:b4:1c:54:8a:47:68:3d:14:
01:2d:05:b9:9b:e7:2d:99:89:62:b9:62:63:6d:b6:
e5:90:94:b0:57:77:0f:3a:78:29:39:6d:8d:07:e2:
6a:24:05:f1:a3:cc:14:ef:c7:b0:df:ad:cd:64:68:
6b:ad:49:9b:01:4b:41:8f:cc:83:e1:62:14:bd:f5:
fa:e9:33:b4:b3:ba:67:64:e9:7a:4d:74:83:68:9d:
ee:7f:17:24:38:30:e7:d1:ef:21:8a:f0:f1:7d:0e:
f5:52:33:ac:50:d5:4c:d8:77:ba:74:03:60:cb:c5:
12:78:8a:9c:21:76:8c:20:12:ba:ac:dd:7e:39:fb:
57:00:e8:e4:a6:48:c9:de:8e:ac:6f:b8:6d:eb:e4:
65:73:f0:12:1e:a6:4b:12:81:bd:ad:26:45:c7:66:
d5:a7:cd:43:5b:e8:bc:3e:40:22:5b:45:e9:1e:9b:
25:ae:94:2a:77:e3:62:9d:68:26:6b:9d:d8:28:b5:
ea:9b:b4:a1:4b:6e:51:7d:3e:e5:ff:eb:22:ce:8c:
b3:28:82:9c:6d:23:d0:12:d7:6f:c4:15:f6:9c:d5:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:53:7D:99:7B:F0:26:0E:F9:15:13:08:04:1F:04:F1:33:2A:B5:8E
X509v3 Authority Key Identifier:
keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1b:d9:fc:c0:6d:38:65:cc:8d:3b:ed:1b:f3:9b:e7:48:1e:
9b:6b:37:66:68:da:91:38:99:9d:c0:18:16:a0:8d:8f:3d:ae:
87:8d:49:97:17:61:dc:e0:1e:34:c5:49:00:82:1d:bc:14:6b:
2b:d5:32:8b:58:47:bb:ae:af:0e:84:6f:93:44:6b:67:e5:3b:
5f:fe:ea:e1:53:85:38:3a:d8:32:6e:0a:31:fe:b2:da:27:fc:
b0:96:29:bb:71:06:49:b3:2e:3d:bd:ad:e7:c3:09:e0:97:0a:
a1:41:26:ce:07:14:a5:40:e6:16:83:58:17:d5:cb:16:b1:c6:
c4:ff:f4:0e:08:2f:f5:ed:9c:fe:cb:8f:40:31:35:cd:de:74:
81:c6:51:0e:17:ec:22:cf:78:28:b8:c8:12:45:36:73:c3:7f:
42:3d:5d:71:af:e0:8b:b0:91:a4:7b:6b:2a:ca:62:3b:51:b6:
6c:02:87:5f:37:56:69:6f:b0:06:c7:01:0b:28:4f:23:5e:96:
e4:22:a4:d0:44:20:23:7e:b7:60:0b:55:21:17:e3:ae:fd:d2:
51:7d:33:d5:54:4e:9c:07:36:40:20:16:4c:e9:96:83:c8:45:
a6:87:df:55:6f:fa:c0:35:89:81:78:67:e8:82:2e:d6:bb:b1:
53:68:40:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:41 2026 by rpki-client