Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
File: wE7eHnv2cZnnq29e0ASelggxc2I.mft (raw, json)
Hash identifier: P4zFA8l63LsYi2lTOMLMzi7X8coYx4DqDgvJKScD+nI=
Subject key identifier: 75:FC:6E:7D:65:EB:0A:E3:DE:9F:03:06:6A:7C:4C:3D:18:13:3B:E1
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 019D3865A287D5A56609B13DC72F43ECE0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
Manifest number: 1812
Signing time: Sun 29 Mar 2026 07:01:17 +0000
Manifest this update: Sun 29 Mar 2026 07:01:17 +0000
Manifest next update: Mon 30 Mar 2026 07:01:17 +0000
Files and hashes: 1: I3IHAQxug4_1HmrgrU3KXo2mQRg.roa (hash: tVJzGCypdjSGtH0l+tgmxq2DhN32eao9EGkffOxQoKo=)
2: j7onYVKyg1iqOkhgPIlBhO1dKV4.roa (hash: khaXvMQHEBCcdY8/F/quXstwIlSJT3LdiRt0dJ8Ljrw=)
3: wE7eHnv2cZnnq29e0ASelggxc2I.crl (hash: QNQNf8Q3/m0ggosCGshxn5+9tAqLt9gzQ86NTkHNCQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a2:87:d5:a5:66:09:b1:3d:c7:2f:43:ec:e0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: Mar 29 07:01:17 2026 GMT
Not After : Mar 30 07:01:17 2026 GMT
Subject: CN=75fc6e7d65eb0ae3de9f03066a7c4c3d18133be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:28:b4:5d:a3:2f:f6:7a:88:3e:46:fe:c0:
7a:0c:f7:d7:12:c7:e9:7e:29:4a:eb:14:60:90:1f:
d2:03:50:de:ed:ff:91:4e:94:df:52:6d:c8:98:98:
21:7e:4b:9f:60:c9:63:33:53:de:1c:6a:d9:32:bb:
9d:47:8b:38:cd:c2:63:61:d0:b0:66:f3:12:b5:5b:
b2:33:e8:ef:bf:cd:b7:b1:8a:ac:13:c3:1b:eb:38:
23:7e:1d:d3:97:06:bb:05:85:65:54:55:01:84:b3:
24:0f:03:06:12:9c:ed:a1:6d:a1:f4:96:d9:f9:01:
9b:44:e3:6a:fa:ae:8d:4a:be:b9:ec:9b:d4:5f:b5:
67:a9:fa:77:fd:c2:17:68:68:f9:58:13:98:78:a9:
54:4b:81:c3:c4:1e:51:dd:b1:97:78:ac:a7:d8:5d:
f4:fd:b3:fb:32:1f:95:54:e3:c0:5f:2d:e9:5a:11:
8c:b0:10:43:53:da:83:0a:55:c4:0d:12:8d:f0:13:
f5:e7:34:83:03:01:a4:d9:77:a7:6c:0b:3e:af:cc:
85:63:40:f1:ec:51:57:7b:f4:c3:0f:4e:5e:58:ad:
75:53:bb:44:e0:8d:ad:1f:4f:1e:83:cb:1c:92:27:
f2:bc:40:0b:9c:7f:d6:16:7c:31:9a:30:a7:28:cb:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FC:6E:7D:65:EB:0A:E3:DE:9F:03:06:6A:7C:4C:3D:18:13:3B:E1
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:92:bd:84:0f:6d:21:bf:54:4b:7b:c2:83:98:56:31:16:1e:
4b:ce:e8:6b:b4:4a:0d:b8:2e:43:c1:3e:0b:b5:b7:86:ec:b8:
4f:fa:47:80:a5:04:70:8d:d5:3f:ae:24:7f:a8:f9:0d:81:10:
ef:c1:fc:2b:12:0c:50:b9:e8:80:c8:13:20:1c:e5:0c:ad:dc:
b4:82:17:2a:40:76:11:22:77:3d:7a:6d:27:63:d0:1d:97:fe:
94:f5:a4:ef:89:40:4c:2f:dc:f9:3d:80:08:f2:2b:5e:0f:87:
01:7a:9b:68:6b:8d:53:e4:7a:d3:a4:bc:ab:e4:e1:48:15:74:
fe:d7:76:39:21:d6:e6:ab:a6:65:04:9d:01:b6:ec:ee:0d:c1:
81:ca:09:4e:b3:33:ec:a9:40:d2:16:a3:9a:2e:51:0e:2b:fa:
04:43:5c:bd:f9:a6:4e:c1:a4:c2:79:8e:f6:9b:07:e4:61:f6:
fb:77:b0:48:89:62:53:8e:2f:a8:db:b8:57:4f:18:e5:bc:37:
42:7c:de:fc:cb:6b:bf:94:53:7d:fd:c3:e5:ff:3e:66:2c:3d:
e9:f3:a7:e1:f8:4b:4d:9b:35:1e:be:c9:22:08:58:c5:57:3b:
b8:df:7e:49:92:6c:e1:8f:cc:ed:0f:81:6b:1b:51:ac:24:cc:
72:f1:f1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:31 2026 by rpki-client