Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
File: 7WoxJ-11rNJGANs1qPIw4vMkug4.mft (raw, json)
Hash identifier: ZnWgv7pVGXG0mW1UEVUG/FJGO0yiXYRkvRfEQx1BV1w=
Subject key identifier: 68:32:F7:DD:54:ED:22:92:53:FA:25:7E:E3:FB:28:2A:68:7E:60:FD
Authority key identifier: ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E
Certificate issuer: /CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
Certificate serial: 019D39AECB908383C6A1A08E4E15A8EFC749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
Manifest number: 98
Signing time: Sun 29 Mar 2026 13:00:49 +0000
Manifest this update: Sun 29 Mar 2026 13:00:49 +0000
Manifest next update: Mon 30 Mar 2026 13:00:49 +0000
Files and hashes: 1: 7WoxJ-11rNJGANs1qPIw4vMkug4.crl (hash: 7z19xNqoNi8DbUXJ0qBLlYQWaB7LR24vogd4SOIvtTU=)
2: RQqhLPcGGSGX-Yx2wib2KDftxXQ.asa (hash: aHQ4ca8e5T8BDTfMZOey9jkGfKWYE/aGZxfTiuf/1Ro=)
3: pCAXnejbOOJp7m5yFPm8VPwf0Uw.roa (hash: N796Zom1skp7/3+RCtSYa/r7JVVy/XIYs8YxWI+wUD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:cb:90:83:83:c6:a1:a0:8e:4e:15:a8:ef:c7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
Validity
Not Before: Mar 29 13:00:49 2026 GMT
Not After : Mar 30 13:00:49 2026 GMT
Subject: CN=6832f7dd54ed229253fa257ee3fb282a687e60fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:fd:f0:54:f3:ed:0b:70:4a:7c:e8:a1:d5:
1a:50:e9:cb:81:bf:93:d0:6b:3c:49:3b:a6:b1:02:
8d:aa:ef:07:5d:d6:ec:5c:c1:6f:d2:6e:3f:c8:84:
c2:6d:2c:71:ec:93:88:b2:bb:c7:6e:40:78:26:18:
a5:41:e1:a0:b6:a0:57:55:af:5f:a1:23:3e:b2:a0:
46:0e:a4:7b:f7:bc:e7:23:98:0f:c7:92:ce:c0:77:
d2:61:d7:e9:e3:b1:5e:88:f1:5b:18:8a:8a:86:42:
9d:ac:ed:8f:80:65:ca:0c:8f:8f:7c:b2:c1:22:63:
30:5d:1b:57:5b:a0:d5:2e:38:a2:49:d2:75:ba:ca:
0a:01:14:c0:47:ee:a4:04:5f:e6:13:24:d0:53:89:
5c:42:db:7c:81:14:a4:4c:87:12:56:f4:7a:79:e0:
23:60:c9:e8:fb:4d:e3:df:dd:05:5f:ca:ab:5b:01:
03:99:a6:9b:ff:2e:5c:26:3a:a2:b6:90:9e:06:28:
e4:fb:8c:0a:e6:38:be:dd:17:58:f9:80:77:bc:78:
97:80:f4:3c:5c:a1:32:4b:f5:f5:e0:81:72:ac:e8:
2d:db:46:55:d0:4b:8d:9f:d0:70:b0:30:29:be:8e:
84:fd:b9:ed:79:14:af:dc:46:91:58:73:57:24:7e:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:32:F7:DD:54:ED:22:92:53:FA:25:7E:E3:FB:28:2A:68:7E:60:FD
X509v3 Authority Key Identifier:
keyid:ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:71:77:db:bc:f8:e0:0e:d0:28:f2:61:06:b3:96:2f:f1:1f:
e9:27:33:58:6d:70:44:5a:bb:73:3a:b7:01:ad:82:da:39:bc:
e9:49:5c:44:9a:b7:de:97:56:9d:7a:fb:ca:14:c9:5f:07:61:
fb:e7:f7:34:48:53:17:88:69:24:92:31:0d:c3:39:f6:c6:27:
a3:3a:46:e7:aa:5b:76:73:d1:95:5b:26:3d:82:39:45:56:4b:
a2:1a:8a:ba:4f:d0:42:b2:95:0f:13:81:2d:34:73:cf:3a:6e:
1b:ac:26:ac:2a:ba:de:1a:a8:fc:12:0c:0f:37:2b:14:fe:11:
ce:24:10:9a:86:85:2d:c1:8b:e2:5a:ac:aa:82:e1:9b:b8:65:
b6:97:04:71:28:5e:87:cf:eb:c7:e8:06:2b:37:00:20:c8:33:
c2:a1:4c:db:23:1c:60:38:69:3c:0e:c0:92:9c:dc:b3:58:b7:
f1:c5:38:25:e6:bd:9e:08:23:81:39:e6:a3:2a:9b:8a:e3:c7:
92:50:bf:b7:e8:e4:b3:b1:88:2e:03:86:83:32:0e:b5:3d:ed:
89:96:14:bf:11:65:e7:88:7c:36:f7:48:6b:52:46:b8:8a:ca:
e2:28:bd:44:d3:15:28:a6:0b:44:2d:e2:78:ed:40:3b:60:a3:
d3:13:85:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:11 2026 by rpki-client