Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier: 85q95plhXKU+r0TN4MjynE7yrndzz2kvmfuBrTmhPeM=
Subject key identifier: 5F:73:0B:54:C3:CB:2E:2D:6A:69:9A:73:66:8E:79:28:FC:53:27:95
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial: 019D386553BF33F4602F6937D34E80E1D3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number: 06FD
Signing time: Sun 29 Mar 2026 07:00:57 +0000
Manifest this update: Sun 29 Mar 2026 07:00:57 +0000
Manifest next update: Mon 30 Mar 2026 07:00:57 +0000
Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: JVIIPC+GoYjvD7r6pT2oTGa8QtfmTyWR+mIYfI8Makg=)
2: JU735praQ5D7ZouW4n12dU9bM-4.roa (hash: dXXp6fBpmMfrGgRgIwTGPcESSVbHsTgXLylCNhPpDJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:53:bf:33:f4:60:2f:69:37:d3:4e:80:e1:d3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
Validity
Not Before: Mar 29 07:00:57 2026 GMT
Not After : Mar 30 07:00:57 2026 GMT
Subject: CN=5f730b54c3cb2e2d6a699a73668e7928fc532795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:77:78:85:a1:03:36:36:c5:a1:5e:c4:d4:
9b:13:e1:1c:b4:d6:d4:21:26:94:d6:4c:aa:99:c9:
c2:d6:0a:14:72:f7:cf:ca:e5:85:6d:98:2b:ed:b3:
b6:4a:de:68:cf:71:09:e1:6c:a0:63:62:1e:fa:64:
46:f4:6e:41:6c:92:28:1a:90:5a:12:a5:6c:73:15:
c4:d7:56:d7:98:13:01:ee:20:56:c1:0d:59:db:c8:
ce:ce:47:16:dd:be:a4:00:59:50:eb:f4:22:2b:e5:
3e:fd:a1:83:c4:08:9a:56:5e:0f:28:ed:94:21:9f:
5f:d5:c8:be:4d:56:f8:d7:5c:26:5d:52:22:00:46:
13:35:47:e3:7b:4b:b6:bf:57:18:bb:db:1e:21:f7:
0f:2a:8e:81:bd:b8:37:0e:dc:90:1f:91:ff:94:6c:
08:62:f7:b4:de:ae:c1:2b:fb:75:68:7c:f5:01:4a:
d7:50:ea:a8:1b:48:47:27:44:b8:bb:8a:2f:ff:ef:
06:fc:dc:9d:a2:d8:08:62:10:eb:0f:38:22:ca:f6:
29:2d:df:21:4c:9d:48:72:91:fa:cd:ed:33:58:95:
b3:0c:3a:94:ee:37:04:1f:93:29:e5:32:a9:da:be:
33:44:dd:65:cc:68:81:a3:59:e5:f0:a6:1a:1e:76:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:73:0B:54:C3:CB:2E:2D:6A:69:9A:73:66:8E:79:28:FC:53:27:95
X509v3 Authority Key Identifier:
keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7f:2a:80:af:23:6c:03:28:9f:57:47:4e:33:50:e9:b0:a7:
3d:c4:35:3f:6c:f3:3e:dd:5e:37:3a:83:c3:d0:49:90:01:62:
01:4c:5c:eb:ba:ba:f0:50:3b:8f:d8:d0:28:09:82:a7:5d:aa:
8c:56:86:a9:2f:04:fe:09:09:90:7a:64:21:9d:6d:21:09:da:
99:f8:1a:dc:d3:80:6b:4d:11:94:ea:ff:37:2c:37:8e:3b:10:
7b:88:15:05:6b:c9:62:f3:c0:d2:f3:57:dc:74:73:86:51:fe:
22:89:7a:9a:f2:72:ee:67:d0:0d:ab:e3:42:91:fb:3d:7c:b2:
5a:0a:28:1c:65:11:e4:39:33:ea:24:95:85:0a:ba:9a:d0:94:
27:1d:14:f1:07:5a:62:1d:55:05:2e:36:f7:c0:70:30:25:b1:
37:dc:13:6b:e1:cd:11:74:99:fd:04:83:20:bc:1e:79:28:c1:
76:4a:65:df:00:33:43:c8:da:62:30:5b:82:37:06:80:0c:51:
aa:5c:6f:3b:19:58:1e:50:b2:b5:84:ab:b1:d1:1d:95:06:57:
aa:14:76:22:9b:be:32:ed:4a:98:96:9c:3f:e6:bd:e5:98:fc:
78:63:32:fa:4f:af:80:13:af:2f:9d:01:d1:e9:a3:01:81:6f:
2b:6b:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:47 2026 by rpki-client