Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
File: 7sxM83JBztFGfJGKonbTiLCoLtU.mft (raw, json)
Hash identifier: 9dgrFxpxXen1Ud9WrEkT9G95jnxai3w9yt63sLkCmio=
Subject key identifier: 14:0B:FA:0E:0E:57:E7:C5:A1:57:F1:C1:FD:87:E3:38:65:63:12:11
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial: 019D39098F27EE120402E33B3E4AFF5A25AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 10:00:20 +0000
Manifest this update: Sun 29 Mar 2026 10:00:20 +0000
Manifest next update: Mon 30 Mar 2026 10:00:20 +0000
Files and hashes: 1: 7sxM83JBztFGfJGKonbTiLCoLtU.crl (hash: R/lJxPRspDHHCD6SU+IDTk3CE595GLBrJ+SLKwngbzM=)
2: QxCjxkjtj8M1Cw8s1SanJKG1uKw.roa (hash: yUeAAf/exzaMVpONZcSdDF3y2oSzL/ioLlZZZr6Czjg=)
3: hYf0wiSt5UOQBZRTWRiBOS988RY.roa (hash: 4jDomdS9bAQ98ArIxK0xlDy/5jdmzb5p/if3uxmbpbI=)
4: jXTSk0KpzmwKGlT8c0WjRwEGGZY.roa (hash: NnQHdGOV+Y72Fq5VRgEhZrBnuzQZy/8YU6VukVFGbMo=)
5: yaUBqNTaQMWqSltcjWLwAbI6Dic.roa (hash: sOTKYTUCmoiXCQC706JaxDQN8FM9bOIQlniRkh/J3lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:8f:27:ee:12:04:02:e3:3b:3e:4a:ff:5a:25:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Validity
Not Before: Mar 29 10:00:20 2026 GMT
Not After : Mar 30 10:00:20 2026 GMT
Subject: CN=140bfa0e0e57e7c5a157f1c1fd87e33865631211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:85:56:6c:49:ee:dc:21:2f:cc:ce:7a:ba:
d7:f5:7a:eb:de:83:32:45:55:49:47:5d:16:3d:13:
66:fa:57:54:58:67:c1:89:e4:ff:a4:16:3b:8a:93:
f6:a6:7c:19:a0:23:42:6f:9f:f7:15:bb:12:5a:2b:
19:4d:a4:f0:fc:87:0b:a7:27:40:ca:8c:e5:b1:f3:
12:ac:01:57:90:05:89:83:d1:42:e1:78:8f:ca:28:
5d:9c:e6:8c:f4:20:58:4c:82:a6:fa:f8:f3:e6:bd:
28:9f:f6:30:92:22:60:e8:67:d9:e8:41:46:1f:36:
dc:76:48:2e:19:9d:e4:60:c9:56:83:34:7e:67:26:
8a:70:15:3d:93:af:e6:5a:f4:87:50:16:80:87:69:
c7:2f:49:97:ed:91:73:f8:f4:7f:ae:c3:5b:71:2b:
cf:27:fd:6e:62:14:0e:42:65:e7:04:c5:85:03:ab:
7c:c0:3f:6f:c9:ac:f6:b1:aa:8d:26:f4:a8:52:81:
40:ea:ea:94:4f:8e:04:bf:a1:5c:8b:75:f7:78:93:
3c:28:a9:fe:2c:ee:70:4a:a8:a5:4c:d7:0e:54:a1:
e2:c3:af:f4:61:19:47:5b:de:97:ab:3a:e3:47:ee:
ce:82:5c:fa:e0:8a:5d:d5:0d:44:4d:5d:4a:7b:2d:
31:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0B:FA:0E:0E:57:E7:C5:A1:57:F1:C1:FD:87:E3:38:65:63:12:11
X509v3 Authority Key Identifier:
keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:34:eb:e4:94:5b:b2:18:07:ce:46:7b:ce:7e:5d:e0:b6:e2:
89:b8:42:0c:1a:82:08:d2:7e:63:f5:aa:0b:b8:ad:bd:94:63:
84:c0:dd:b0:c9:ad:c1:12:e1:de:14:b2:07:25:6f:34:9a:b2:
f9:3c:3c:6f:69:fb:a9:c6:97:29:50:88:0e:ba:d8:d5:d6:1e:
d9:9d:49:7d:9b:61:c5:3e:d8:7a:5d:e4:83:32:c0:af:32:77:
ac:39:4f:7e:c2:e8:60:bc:77:3c:7b:1c:15:07:04:83:57:f3:
a0:e3:30:2d:25:c9:14:0b:5c:0f:d4:e9:ae:be:f8:5f:30:1d:
07:d0:81:83:d8:58:02:6d:5b:eb:f7:21:61:2d:4b:f2:1c:9c:
a5:d8:15:a0:3a:e8:14:0b:f0:d9:91:f2:5d:2b:77:f8:3c:a3:
7a:76:58:ea:64:dc:00:5c:9e:35:aa:91:98:99:4b:c2:63:66:
f3:5f:e1:5a:59:8e:40:62:88:b3:e7:ef:d3:1d:49:5c:ef:0f:
9e:72:a7:be:1c:0b:5b:f8:45:c0:11:da:e2:7b:9c:e4:27:30:
8a:5b:69:e7:c8:cd:aa:8a:53:c4:51:5a:92:6d:1a:9a:6f:c6:
6a:20:fe:2f:d9:7b:a9:9d:84:2e:68:31:96:26:22:54:54:8d:
f5:c9:b2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:17 2026 by rpki-client