Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: 6l28JeiCXH/lU9+V1O1RF/jONKyVCeIDgpCiu4SpFyU=
Subject key identifier: D2:94:C7:97:39:5C:EA:96:11:24:F9:66:65:F4:DF:99:57:73:1F:ED
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 019D25F1C0CA2FC0E3FD66311A88F85944F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 173C
Signing time: Wed 25 Mar 2026 17:01:33 +0000
Manifest this update: Wed 25 Mar 2026 17:01:33 +0000
Manifest next update: Thu 26 Mar 2026 17:01:33 +0000
Files and hashes: 1: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: lopp/wDsAUHsZvzLFO96yL3EYSuq/hF9CXpuTRizHeY=)
2: m5yvHicFnXm_Esifvf9nJ43HYjM.roa (hash: 2UG9meAu50+1K4RYnFNAIuouwlkL5D4Ox6KRSauQKrc=)
3: rI-1eY7TtxFeY70hEXPRG9r4SUU.roa (hash: 3yzUSLFgFbapDsLKTnHWd+eZDAnjuQ4IsvzD3dpVDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c0:ca:2f:c0:e3:fd:66:31:1a:88:f8:59:44:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Mar 25 17:01:33 2026 GMT
Not After : Mar 26 17:01:33 2026 GMT
Subject: CN=d294c797395cea961124f96665f4df9957731fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:1e:9e:48:ed:d6:40:a2:d4:00:2a:c6:dd:
bd:fc:a5:75:25:23:f9:92:aa:c0:4e:ee:97:a5:d0:
5d:74:95:89:fc:dc:c8:09:49:0d:1a:0a:8a:27:6a:
21:ae:b0:c4:0c:e6:0b:53:d1:62:55:58:e1:28:e8:
22:5b:5d:d8:71:b4:35:fe:6f:65:7a:bd:f0:f9:f8:
01:ad:99:6d:86:11:86:11:3d:53:4e:59:10:e7:72:
a2:d2:a8:29:02:3f:fa:25:26:c0:60:f1:47:f8:79:
7a:59:a0:99:be:26:33:47:cd:c5:d6:2f:3a:65:8e:
e1:66:27:40:b1:7a:3a:60:c9:99:5b:bc:7d:f4:eb:
16:96:31:ad:64:ca:06:25:c2:8d:24:f4:74:af:a3:
10:9c:40:58:da:31:e3:e4:f4:6c:d2:5d:56:af:79:
b7:c4:7c:7c:15:13:08:d4:5a:35:ec:d3:16:76:83:
35:9d:92:fa:19:da:05:e4:2d:18:9e:47:d7:01:82:
78:f9:9b:51:47:32:fc:c1:9d:c0:a3:a0:29:38:e4:
4c:c7:2b:d0:ef:9b:74:8a:95:29:7f:f5:48:6f:a7:
f2:6a:34:d1:3d:1f:c7:10:93:cc:90:11:10:39:dd:
96:2a:09:83:86:67:41:2a:40:0f:ec:c8:f5:57:e3:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:94:C7:97:39:5C:EA:96:11:24:F9:66:65:F4:DF:99:57:73:1F:ED
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c7:f5:5d:37:f4:3c:4f:0c:1a:60:45:f1:b8:a9:d2:67:ad:
cb:69:05:3a:e0:0a:35:3c:da:2a:0c:88:ab:9a:5a:58:22:72:
58:7a:cd:ca:e6:ee:09:74:26:c8:c9:e9:5d:c5:e0:2a:bc:54:
d6:6e:5f:7e:84:24:63:88:52:e9:b4:c9:72:38:f8:ff:e9:b0:
e6:d9:f0:dc:01:4c:4e:33:eb:a5:a1:44:28:e1:5a:c5:dd:13:
ed:b2:1e:2f:31:b4:76:92:ec:c0:ae:dd:43:7e:65:6c:f0:2a:
91:29:60:c6:aa:40:b8:45:40:9d:3c:87:f4:27:3a:c0:ab:62:
1c:77:ab:bf:b6:cf:27:49:e1:6b:f7:48:c0:93:85:2e:6e:01:
89:47:99:17:be:87:0d:b2:14:e3:44:9c:86:94:f5:5f:47:be:
00:87:0f:2b:fd:c6:39:b6:6b:d3:98:75:92:dc:0a:b0:25:aa:
2c:e9:e6:9c:12:be:24:0a:72:de:81:1d:b5:f2:df:ae:76:ea:
62:65:9d:dd:29:70:37:88:cf:21:b2:6f:b3:ea:b3:9c:f3:8e:
5a:2f:83:ef:bd:39:c2:92:45:03:95:4d:24:62:0f:39:08:63:
c1:23:4b:cd:5f:58:c0:e3:d8:bd:d2:6b:9d:37:bc:be:ae:ba:
97:05:7d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:41 2026 by rpki-client