Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier: Y+wAw6i5TOcXSNlwO30sKQF02lnCQo2stg0825qYFkg=
Subject key identifier: C2:B1:48:2E:F1:2A:92:51:DF:1A:FC:0C:D6:D2:4C:D1:86:71:FE:86
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial: 019D3752CB66F5CC6D91589F3BC7D33DB0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number: 0AB4
Signing time: Sun 29 Mar 2026 02:01:05 +0000
Manifest this update: Sun 29 Mar 2026 02:01:05 +0000
Manifest next update: Mon 30 Mar 2026 02:01:05 +0000
Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: AW7ClgwjsE919q0QxemKxIiLwT0EUNGSemm7g+Cl3pI=)
2: prj-gjU2FJGtEVAkFqN1UEoiuck.roa (hash: MBD1FKmACbSwTw7FTssOYwGdssDUFI7ku4bKYJP3LtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:cb:66:f5:cc:6d:91:58:9f:3b:c7:d3:3d:b0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Validity
Not Before: Mar 29 02:01:05 2026 GMT
Not After : Mar 30 02:01:05 2026 GMT
Subject: CN=c2b1482ef12a9251df1afc0cd6d24cd18671fe86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:d0:45:25:12:61:80:fa:2b:9e:29:c1:75:
a3:cc:c5:91:2c:28:74:11:66:29:73:1b:91:22:bc:
50:51:6a:3e:30:64:a0:76:bb:6f:cd:26:c1:8d:27:
93:df:fc:5e:05:76:4d:33:3b:c7:6b:c1:f3:60:39:
2d:36:23:75:36:51:cf:46:36:01:17:1d:b8:33:c6:
bd:fc:13:86:f3:ec:26:8a:4b:c2:f8:c3:58:40:fd:
ca:f2:3b:84:66:21:ab:37:bf:6b:63:22:03:3f:5d:
83:3d:4e:7d:77:64:42:77:8f:fd:dc:58:a2:0e:24:
bb:32:51:65:e2:b9:16:1d:d6:c2:91:97:46:c9:a5:
79:9b:83:cd:f8:00:d1:89:a2:0c:83:c4:25:e0:a8:
ff:df:d8:f9:d6:f1:8a:3a:df:42:99:54:0a:5f:7a:
b2:93:e3:ac:3c:c7:36:f8:c9:7b:b7:1d:d4:27:55:
f0:28:82:6a:a9:2f:fb:18:d0:b6:86:85:d5:d7:5f:
47:2c:e6:aa:b3:c7:08:49:94:64:6e:f4:0f:c5:00:
7d:59:dc:e5:17:23:12:03:2e:d8:73:08:a6:3b:52:
17:d7:e7:19:bc:26:00:6b:b1:07:6f:b7:00:1f:06:
cf:ce:e6:c2:92:28:f5:43:79:af:83:9b:d2:bf:c5:
89:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:48:2E:F1:2A:92:51:DF:1A:FC:0C:D6:D2:4C:D1:86:71:FE:86
X509v3 Authority Key Identifier:
keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:52:5f:b0:05:13:40:1d:a5:de:46:bc:05:18:1e:a6:22:59:
ea:55:45:04:3b:24:a4:32:cf:e6:42:a4:42:0d:74:d8:ab:bf:
51:99:e0:5a:2a:57:ce:1d:e7:c9:1b:be:78:63:0e:03:b7:fc:
fe:3b:ec:82:b8:70:30:58:b0:85:34:a6:f0:58:13:9e:0a:db:
4b:1d:8b:38:f7:f8:26:e6:a4:e8:c5:fc:04:cc:9e:69:03:bb:
14:59:1c:c5:b9:05:73:c2:44:2b:50:54:e7:5e:2e:0c:b0:a7:
7a:7e:86:f7:a6:85:f3:19:73:2a:fc:24:8a:ce:3e:59:c0:6a:
ee:4a:0a:3d:9b:39:09:d0:bb:02:c2:5c:e4:71:5b:69:ee:2d:
63:a8:80:55:8a:33:5d:43:8b:e7:51:b2:2c:cc:9d:a6:2a:e8:
02:46:f4:5c:d8:5e:4d:19:ed:eb:e5:c2:f4:e8:f5:14:19:5b:
0d:32:d6:3a:a9:34:60:5b:3a:b7:bf:d4:d1:c9:45:6a:2b:64:
72:a0:4f:a8:83:50:39:cd:61:0e:ad:62:7d:d8:e9:87:d6:6d:
c2:eb:5a:6e:dd:9e:92:0c:93:11:cf:08:9d:bf:84:94:dc:2f:
2c:2e:5d:a6:a5:51:59:54:a5:29:2a:2e:0b:a6:32:ea:fa:f3:
97:aa:fa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:18 2026 by rpki-client