Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
File: 7CSoJiAgkayDGfDwbreW_YJCKw8.mft (raw, json)
Hash identifier: S5sYu2cLTb95+sOZK2u8ON4pEw+eLX2jUi5XcH1fVv0=
Subject key identifier: 06:6D:B3:4A:C1:88:B8:81:BA:A9:A6:4A:EF:C2:97:F4:FB:5B:A2:E0
Authority key identifier: EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
Certificate issuer: /CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Certificate serial: 019D29CEA90012DA48A0D3917C3840B91A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
Manifest number: 0228
Signing time: Thu 26 Mar 2026 11:01:42 +0000
Manifest this update: Thu 26 Mar 2026 11:01:42 +0000
Manifest next update: Fri 27 Mar 2026 11:01:42 +0000
Files and hashes: 1: 7CSoJiAgkayDGfDwbreW_YJCKw8.crl (hash: r93xFvMEBRPoCpkHoz/vLLE4MDk1fXvQ5/UzQS/eZro=)
2: NV3f3XuOFAsDnfAaCg6nF83CLX0.roa (hash: gLitDvaGVXpGQdqcXcYcXVG4iAgjgIJ9u8eaDv8Xduc=)
3: XHsv6tidd9i-2RRz-dH5aTG8xDM.roa (hash: mc5VNfZqvrFRMc92AfbsJY+NZvDvOSGlYFhOV1FglZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:a9:00:12:da:48:a0:d3:91:7c:38:40:b9:1a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Validity
Not Before: Mar 26 11:01:42 2026 GMT
Not After : Mar 27 11:01:42 2026 GMT
Subject: CN=066db34ac188b881baa9a64aefc297f4fb5ba2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:18:ee:8a:21:da:e5:d9:18:1b:c2:76:bf:
ad:4d:d4:eb:88:8c:5a:ad:31:fb:e9:fd:4c:c9:53:
72:f8:3b:87:bd:bd:64:63:d3:8f:da:f3:a2:7a:ef:
61:68:78:56:70:fa:30:99:d8:f3:a1:9a:da:c1:cb:
32:a0:67:14:ac:31:6c:98:89:39:3d:64:63:44:60:
e3:01:6e:e3:f4:d0:2b:3a:08:fb:26:44:d8:d0:d3:
8f:54:19:5e:e3:73:b6:ec:5a:37:4f:3a:c2:aa:8a:
98:17:67:ce:5e:46:01:e8:67:e1:ff:6a:49:ce:ce:
00:be:c6:ce:19:72:8d:16:29:6f:77:1d:cb:ab:82:
0f:45:ae:37:ea:df:78:67:15:57:d7:c1:72:2c:b2:
4e:38:c9:e2:01:86:1f:1a:c8:c0:07:10:7e:7c:37:
62:94:a0:64:c0:80:9d:6c:75:9b:11:0b:68:b0:6b:
4f:e7:80:b0:ae:e6:2a:ba:4a:cb:88:1a:ff:71:42:
1d:8d:ae:c1:06:6a:3b:c7:ec:53:22:32:81:42:cc:
89:4f:b8:0c:b4:8c:4f:d8:d3:66:60:23:2b:13:d0:
c4:4e:21:64:95:84:fb:66:8f:ab:ca:7c:76:fe:3f:
9d:1e:b2:11:26:5b:c9:7c:01:7d:de:34:83:58:98:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6D:B3:4A:C1:88:B8:81:BA:A9:A6:4A:EF:C2:97:F4:FB:5B:A2:E0
X509v3 Authority Key Identifier:
keyid:EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ec:31:8c:fe:10:ac:5a:f0:1b:f0:10:90:64:cf:20:d0:73:
5a:59:52:83:74:11:a0:bf:d1:69:6d:d1:09:51:40:99:53:21:
16:23:6d:d8:87:2e:a8:f7:7a:ee:f9:0e:a8:30:16:13:ae:b1:
29:29:e3:c0:15:ef:ee:bc:ef:cc:ff:f8:df:2b:8a:3b:8e:d6:
1e:ad:0d:78:a1:60:df:e2:8d:93:e9:f4:08:70:d5:0e:1f:aa:
0e:41:35:84:01:c7:f2:b9:e1:fd:f0:26:02:f1:8f:45:be:5b:
15:16:88:a5:dd:59:b5:0e:ab:c0:ba:59:88:69:82:53:6c:c1:
f8:81:30:74:50:53:fb:aa:ac:89:a9:b9:03:fa:fd:3a:9a:14:
29:45:99:df:14:e2:12:89:31:75:d1:20:6c:eb:c7:37:1e:bd:
72:32:0d:4c:ae:1b:ea:5e:2b:6a:a5:84:d0:7e:94:d4:0d:a8:
04:72:ef:42:77:65:7c:7e:b1:b5:00:35:ad:79:e0:6d:2b:91:
4e:91:ca:91:9f:22:31:90:83:bd:0a:94:3e:fb:5b:cd:a0:8c:
02:ca:b9:8d:c8:35:13:45:6e:63:29:fc:1a:04:40:97:52:5e:
9a:f5:cf:59:64:fa:f7:e9:0b:0a:5f:90:8d:69:7f:9b:51:9d:
d3:f3:aa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:55:01 2026 by rpki-client