Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
File: 7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json)
Hash identifier: 1K20R5pLVibOEYV9MG1u5iEYNi8c/kSBdkPYVfmBW48=
Subject key identifier: D1:0C:FD:09:E0:FF:CD:EB:D2:A3:80:21:C5:CD:DC:24:A4:03:3E:27
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial: 019D2AA933F3219F86E27EA7A20EAC65DCE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
Manifest number: 0628
Signing time: Thu 26 Mar 2026 15:00:25 +0000
Manifest this update: Thu 26 Mar 2026 15:00:25 +0000
Manifest next update: Fri 27 Mar 2026 15:00:25 +0000
Files and hashes: 1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: JRa9i6viMas+FOdu6tHT+pv+SLMipBD4dheyaJgA5aY=)
2: t5LOWwENqQioKciGyoMxLyNCNN8.roa (hash: zlv1UWEx5L67DFS1Ff+3kq6sBK6VPzVmabPisFcvJBk=)
3: wiLmfdGgzijMr6H7FRSYjpbRctE.roa (hash: Z51vNTE/VSPJwzjerq5rKZBcW7aBhn2nt4GaxW27CY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:33:f3:21:9f:86:e2:7e:a7:a2:0e:ac:65:dc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Validity
Not Before: Mar 26 15:00:25 2026 GMT
Not After : Mar 27 15:00:25 2026 GMT
Subject: CN=d10cfd09e0ffcdebd2a38021c5cddc24a4033e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:17:0c:70:e1:76:ae:b8:e5:83:fc:eb:ef:
e5:84:c4:eb:56:14:55:6f:a9:aa:c2:46:f0:2e:cc:
11:11:10:a1:f9:f6:d5:e8:f6:a2:8d:20:a5:d0:de:
6a:c4:3a:44:1c:37:c5:92:ea:34:04:62:ed:aa:66:
be:c7:99:a9:9f:10:d7:f1:02:91:f5:89:7f:84:4d:
25:a4:e7:ab:25:17:d0:64:0f:c1:60:eb:b3:a9:90:
53:a0:8b:a2:32:61:06:e3:69:b5:2b:27:44:08:7b:
b0:56:5d:6e:66:92:1a:39:91:e9:38:eb:ab:37:d6:
2a:ba:40:b1:b7:a4:bf:c3:9b:9f:65:23:8a:1a:83:
93:cf:e1:a4:8a:0c:f8:b3:d0:99:d9:cf:bf:6f:a4:
b9:ba:61:a0:40:c0:0d:c8:3c:49:ca:f2:cd:2a:84:
15:42:7e:5f:3e:87:e9:5e:2f:3d:54:92:90:ae:63:
6f:bb:58:a2:e6:57:f9:10:9b:70:96:90:c8:07:e1:
45:4b:71:bc:6f:bd:60:24:70:68:17:8b:3a:c1:4a:
f5:4b:82:2e:aa:aa:85:c5:b7:8d:76:b0:66:54:87:
bf:48:c5:42:61:aa:b4:a1:63:d9:b9:b0:cf:c5:ce:
31:ae:ca:8d:22:d5:c8:67:7b:f2:8b:1d:d9:03:13:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0C:FD:09:E0:FF:CD:EB:D2:A3:80:21:C5:CD:DC:24:A4:03:3E:27
X509v3 Authority Key Identifier:
keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6f:90:4b:97:04:19:5a:cd:ad:14:e9:3e:8b:a4:30:e9:f3:
32:1f:a4:11:e2:e3:12:8f:04:4f:42:af:ce:c8:7a:9b:24:e4:
b8:f8:23:d9:15:8c:7f:fb:1a:bb:00:1d:36:4f:44:0f:5c:db:
33:98:db:9b:58:80:5a:68:95:ac:45:0e:ef:92:fc:ea:3a:a5:
c8:00:83:b9:dd:6d:dd:24:a2:55:fd:57:82:25:84:df:47:b8:
cc:b0:29:ad:a7:37:0c:9b:95:ec:d1:bd:f0:e4:29:48:85:f6:
06:4a:7f:83:fe:ad:39:c6:a6:d8:76:f9:cf:b1:d6:9b:da:0e:
59:7f:f0:cb:d3:1a:28:f9:70:41:4e:be:75:c5:f0:dc:03:8d:
7c:63:cf:79:33:e0:19:ae:17:b7:85:35:1f:12:b5:0a:d4:ff:
68:86:0a:2b:61:67:01:29:b8:e1:f1:80:21:70:2d:26:fe:4e:
11:34:11:bc:97:3a:15:60:98:3f:80:37:b9:c3:bb:aa:1e:4e:
9f:07:03:96:3c:5b:9e:92:11:ff:96:b5:6a:50:6f:13:6a:63:
f3:9e:ed:f0:21:cf:87:6d:da:a0:5c:8c:15:b0:a9:e5:82:a3:
cc:03:b4:b0:5b:f5:f3:a9:27:8a:7a:f3:dd:c1:0b:ac:90:7c:
8e:11:5d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:15:40 2026 by rpki-client