Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
File: 1N33M6X21zWr8n6JKuDlANVyffM.mft (raw, json)
Hash identifier: qOi8IVk0uxu1Kkuzztxk69jNAyVA2oYGjjci4S/TWHc=
Subject key identifier: EB:AE:10:E4:D3:99:DD:9F:02:7D:59:46:3F:51:76:F5:CB:F4:91:3F
Authority key identifier: D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
Certificate issuer: /CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Certificate serial: 019CE10FD22755E711B6A308EC4D313E8128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
Manifest number: 7A
Signing time: Thu 12 Mar 2026 08:00:36 +0000
Manifest this update: Thu 12 Mar 2026 08:00:36 +0000
Manifest next update: Fri 13 Mar 2026 08:00:36 +0000
Files and hashes: 1: 1N33M6X21zWr8n6JKuDlANVyffM.crl (hash: iJNy0UI3DgXinExtl6z0CJHTeARsjDFy/VJEkCgFl9A=)
2: iKbr2LK5J82gYuXSxnRiW9ytVSU.roa (hash: SB/v/t0GxNGoad1gEDHjAA4/1IulHpKzS+RYj669lVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:0f:d2:27:55:e7:11:b6:a3:08:ec:4d:31:3e:81:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Validity
Not Before: Mar 12 08:00:36 2026 GMT
Not After : Mar 13 08:00:36 2026 GMT
Subject: CN=ebae10e4d399dd9f027d59463f5176f5cbf4913f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:d4:62:18:be:07:92:8d:b4:b3:75:2d:85:
e2:85:4d:75:4a:9d:da:1a:d5:ba:f0:ea:38:58:1c:
be:68:12:fb:a6:9d:47:bf:d9:a9:50:53:96:d6:cf:
bf:e8:cf:46:c0:95:5c:4b:e7:d4:d0:16:e1:a6:a3:
52:67:55:61:18:bf:c8:6b:e7:06:4c:c2:d5:56:8f:
51:f7:db:e3:57:aa:f9:c7:28:eb:50:ee:41:e2:e4:
0a:91:6f:75:b1:8f:1e:9e:9b:0e:4d:59:3b:f9:64:
58:f4:4a:f3:bd:6b:a2:91:0e:60:e7:1c:b4:bf:84:
f8:32:23:c8:4f:c7:b5:94:b9:a1:a6:dc:1d:f6:03:
5d:e1:62:83:cb:ee:53:34:11:62:ae:40:ce:e9:fc:
f5:b8:00:e2:37:c2:94:16:1c:53:f4:04:78:3d:cb:
b8:d8:ef:20:22:3f:19:c5:d4:f3:8e:70:3b:b7:cd:
5b:0c:e4:99:84:9e:d2:6a:98:ed:5e:a3:f9:79:e1:
07:9a:46:80:0e:d8:71:40:2b:dd:58:8b:e3:16:ec:
2f:e8:f7:52:b2:b8:dd:6b:6e:be:1a:e0:14:30:23:
3a:4f:14:3d:21:ee:9a:c9:65:bf:fd:ed:7e:a4:91:
4d:fe:55:33:47:90:9f:10:88:89:cb:73:ae:ab:40:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AE:10:E4:D3:99:DD:9F:02:7D:59:46:3F:51:76:F5:CB:F4:91:3F
X509v3 Authority Key Identifier:
keyid:D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1c:50:74:a5:10:9f:a6:b7:2c:d7:98:e7:d7:a3:5e:11:18:
78:d0:8c:c1:b9:2f:94:28:b1:44:b4:cb:7b:af:b2:0f:a4:2f:
28:73:8b:6d:1f:72:13:a6:d1:78:c7:e6:cf:36:00:09:74:ed:
2e:25:7b:81:05:7d:a2:89:21:88:85:87:27:c9:78:25:0f:28:
6d:af:a3:4e:48:cf:4e:ca:d2:10:a6:26:a9:c8:4d:f1:00:e0:
b3:0c:df:7a:7c:a9:64:8d:d0:ab:03:c6:c8:4e:6e:4b:16:95:
16:52:db:b6:aa:79:fc:20:1f:8d:f2:18:dd:3b:9e:ca:7e:5b:
ba:d2:cd:54:54:ee:ce:c8:8d:08:12:d0:27:26:d6:5c:87:64:
12:fd:17:1d:ae:d2:d5:16:61:ba:02:fa:c5:ed:df:32:f8:8e:
be:7c:5e:56:25:82:30:d5:a3:17:d9:4d:20:a3:eb:76:ac:3d:
78:01:f4:f1:a6:0c:37:83:2b:ab:ef:5b:8a:9c:dc:a2:d4:f4:
6e:20:57:05:bc:09:7e:9f:e2:64:5e:c4:86:94:15:ac:33:e4:
98:bf:38:95:27:de:9b:d7:ed:2d:78:e7:4b:3f:83:7e:ee:35:
86:64:4d:0b:29:f8:ea:ff:82:02:ed:d4:4d:00:a2:fc:90:62:
5d:df:62:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:19:00 2026 by rpki-client