Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
File: _7ml8yjMMGUnzExHS9xLE6dGoag.mft (raw, json)
Hash identifier: xwxs6RYv5+foaF2//grFgNCVyLjUES7BSboH35hbvvs=
Subject key identifier: FB:69:51:74:53:E9:D0:79:D6:8D:CF:3F:EA:58:83:51:24:D2:1C:FF
Authority key identifier: FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
Certificate issuer: /CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Certificate serial: 019D2CCF83C11664A5B1F2EE8C9E8BC4C59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
Manifest number: 8E
Signing time: Fri 27 Mar 2026 01:01:30 +0000
Manifest this update: Fri 27 Mar 2026 01:01:30 +0000
Manifest next update: Sat 28 Mar 2026 01:01:30 +0000
Files and hashes: 1: TjUAHrNX6D8KKFwZiePYTV0m3bk.roa (hash: 61/mGPF5yOHT2ppU4Jvr6b/vuT6FmCh4sw4OsDecTfo=)
2: _7ml8yjMMGUnzExHS9xLE6dGoag.crl (hash: 1ETbUi9Ru/nSM8+6/ins6uGnnp16XmCr7bJwmD5Q9hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:cf:83:c1:16:64:a5:b1:f2:ee:8c:9e:8b:c4:c5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Validity
Not Before: Mar 27 01:01:30 2026 GMT
Not After : Mar 28 01:01:30 2026 GMT
Subject: CN=fb69517453e9d079d68dcf3fea58835124d21cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:d2:e3:1d:3e:a0:d0:3a:06:85:55:25:aa:
03:a0:73:c5:0a:7a:c3:e1:7d:31:94:be:a4:bf:9d:
7d:9b:14:26:6b:21:a3:f1:e4:a3:32:b3:e0:e9:fc:
6b:7c:31:d9:d9:68:6b:18:4e:d9:f1:81:e1:fa:7f:
14:a7:3e:bf:fd:39:18:fd:21:27:6d:b5:36:cb:a7:
de:84:e8:46:52:ca:13:b9:39:15:d8:95:76:fb:2e:
e8:ce:55:55:f6:23:37:ae:29:4b:9a:00:ce:41:33:
8b:93:e2:6e:95:ef:93:9b:37:64:1b:29:41:c1:a3:
22:0a:c4:dc:c3:54:39:b6:e4:fb:be:11:cf:65:1e:
c6:b5:30:d6:72:a7:87:bc:03:e7:d2:b7:a7:6b:ea:
b3:dd:0d:7a:8e:32:6a:43:48:f6:1e:83:a7:8f:3a:
e2:b9:85:35:52:e3:14:86:c3:70:a7:58:a3:02:af:
90:85:d3:31:5c:be:9e:58:35:02:9b:a0:44:96:bb:
26:ee:8c:23:c1:ed:67:7c:a8:6e:57:d0:b8:31:86:
a8:4c:0d:8d:d1:cd:d0:d1:f0:59:aa:86:52:b1:5e:
c1:a5:d5:94:6d:37:7e:15:62:a4:28:0a:57:14:37:
6e:11:88:b2:39:b0:a0:f9:53:42:9c:3b:13:08:bd:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:69:51:74:53:E9:D0:79:D6:8D:CF:3F:EA:58:83:51:24:D2:1C:FF
X509v3 Authority Key Identifier:
keyid:FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:e4:57:9c:4a:58:79:6a:53:8f:5f:13:8f:cb:a3:a8:2f:0a:
37:d5:f4:3b:e7:43:9c:23:2a:0a:18:d0:1e:fd:60:e9:a4:63:
7a:46:c6:8b:5c:6a:1e:a3:46:6a:f5:3c:cd:e6:03:52:44:73:
68:b8:b7:80:7f:0a:63:56:1b:94:a5:c4:54:22:47:27:90:f6:
91:ed:7b:c8:70:94:13:78:7b:c4:34:55:c3:3c:b6:a4:80:48:
56:90:58:f0:25:0c:db:b9:25:b8:97:92:1d:d3:54:e6:61:7c:
de:da:6b:62:9d:73:dc:88:4c:72:c1:ce:bf:05:2f:a0:af:43:
f2:af:90:8a:7f:60:c6:48:a8:0f:68:e6:d3:b4:68:c0:e8:fc:
78:24:dd:0f:87:02:a3:d7:13:ab:3a:3d:77:ef:b5:f3:e6:1e:
f4:9b:84:63:a7:b6:71:9e:a1:cb:b3:2a:7b:b6:f2:3f:84:b3:
02:3b:ea:9c:00:0a:cb:a3:1b:5f:66:b4:f0:6b:98:8f:5a:ca:
95:12:55:69:5c:2f:f7:1b:ce:e0:ac:16:ca:4d:8c:5c:ca:c9:
85:c4:32:1e:59:43:d0:7c:1a:b6:ad:1b:f1:f3:37:5a:bf:3c:
38:3e:37:fe:0e:0e:f7:f9:7d:4c:6c:74:4b:aa:b2:cb:30:0c:
7e:7d:88:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 11:29:43 2026 by rpki-client