Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: uzlvnGhOgpfxsn7nQwJhn668wwUBc6/Rl0tqxKHyMzM=
Subject key identifier: DC:E2:DD:F9:E7:33:78:D1:A0:57:83:E4:49:E3:A0:02:FF:3F:C6:26
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 019D3752DC91F1A0AB59359FC002C073B958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:01:10 +0000
Manifest this update: Sun 29 Mar 2026 02:01:10 +0000
Manifest next update: Mon 30 Mar 2026 02:01:10 +0000
Files and hashes: 1: 0HZFumgyvQaDDTRTrqWFDMHfuo8.roa (hash: 99s+y069IP+8cLI0Fct7Tuh7Nr9yOVSbyI/w/nS1ohM=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: KPEIhHv8svCRCAhX5AcYK5YSdrImgr9/SF1GaLesmk8=)
3: JfyoN48fk_c9ic3qKJlpVrYlm4U.roa (hash: YO7Xai4MFWdK4ki2bUDwA4JpC3JpucBc+HE0rjiH0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:dc:91:f1:a0:ab:59:35:9f:c0:02:c0:73:b9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Mar 29 02:01:10 2026 GMT
Not After : Mar 30 02:01:10 2026 GMT
Subject: CN=dce2ddf9e73378d1a05783e449e3a002ff3fc626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cc:3e:1a:68:64:11:f0:fd:8b:0f:8d:2e:af:
8a:dd:8f:30:8b:f4:ba:58:3e:e2:6d:5d:5f:9d:76:
aa:82:b2:60:15:24:9f:c6:7d:51:5a:16:01:c8:8b:
61:76:7d:30:64:2c:f8:a2:36:e3:5e:31:88:c9:ac:
e7:a4:5e:1e:0f:ff:e7:5f:07:f8:25:18:13:14:e7:
2d:0f:7b:c6:5f:4c:d4:97:03:3c:94:a5:77:be:42:
65:a9:73:06:21:71:25:71:4f:ee:72:27:08:a3:ee:
0c:56:5a:55:d6:26:de:a7:8a:c4:54:65:fa:40:a4:
f7:40:b6:9f:ba:6c:02:93:08:1d:3c:1b:6e:ee:83:
b1:12:3f:0a:93:96:ce:cd:b4:76:fc:d3:b7:28:03:
85:91:74:9d:1e:15:d2:ec:95:75:7f:26:92:19:aa:
8a:dd:e4:1c:df:23:b6:53:c1:e5:f4:57:ec:fe:3d:
c1:8d:ea:b4:20:6d:29:5c:7b:76:8f:15:f1:82:f8:
4f:8a:12:2a:97:3b:27:7f:0f:06:e3:c0:26:eb:d2:
25:a8:71:ef:c8:6d:b5:6c:f5:25:15:8d:c4:be:70:
00:dd:ad:f7:e8:a4:19:8e:f9:72:04:c9:31:c3:25:
22:5f:19:fd:34:8c:66:55:c1:93:31:66:ca:74:bb:
5f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E2:DD:F9:E7:33:78:D1:A0:57:83:E4:49:E3:A0:02:FF:3F:C6:26
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:10:d0:cf:13:dc:9b:90:48:01:ad:76:6f:8f:7f:1b:5f:3d:
be:15:0b:bd:b2:e1:6d:a0:20:73:d6:22:a7:0f:e1:8c:7f:f1:
5f:93:c5:3d:2d:d2:ab:72:53:a6:89:7c:67:5f:c5:a7:be:87:
ca:00:22:eb:f8:64:be:cd:a0:69:02:57:4b:10:25:89:fe:a6:
d9:c3:a2:eb:8e:1f:04:0a:37:1f:2c:35:52:6e:4a:93:ee:85:
7f:06:0b:43:cf:57:9f:2f:82:35:0c:0d:c5:d3:5d:5a:8d:8d:
ca:24:ba:67:e1:14:4e:14:3e:b2:7f:14:8b:7b:57:b6:95:dc:
dd:a5:5f:65:18:84:72:10:0f:ad:c6:cf:81:63:6c:fb:f4:1b:
91:25:cf:f3:5b:42:26:8a:1c:21:99:32:bd:10:f2:0f:ff:3a:
53:67:cb:e0:74:78:42:64:31:d9:e3:83:33:05:9a:ca:a2:f0:
ba:cd:af:c9:b1:cf:e2:e6:c3:a2:87:ca:6e:83:68:aa:41:b0:
e2:62:66:1e:59:96:40:fe:39:ef:44:1d:9b:08:7e:2b:ae:bc:
93:73:65:87:8f:1b:93:51:7c:d2:94:af:95:77:7f:72:fe:41:
e9:cc:1c:60:ae:cb:c5:de:36:7e:49:63:cb:df:1d:da:6d:b4:
44:19:78:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:42 2026 by rpki-client