Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier: X5LYxDJ1ayJo1fbPCTooNVCF58YFtzAw0Ddbt/ucnGY=
Subject key identifier: D6:A3:72:4F:95:CD:77:05:92:39:90:6A:78:75:89:59:02:35:E3:DB
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer: /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial: 019D27E049E227751FC7ADA9FEFC248C14BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number: 0645
Signing time: Thu 26 Mar 2026 02:01:43 +0000
Manifest this update: Thu 26 Mar 2026 02:01:43 +0000
Manifest next update: Fri 27 Mar 2026 02:01:43 +0000
Files and hashes: 1: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: uMsvqhJutn9dMPg7UWg1G3bhFTAU19RFlBZ1nCrUMHY=)
2: DBz0WhaRA9wNrK9K1etEW30ajBM.roa (hash: TIvrus04yBKxsgpsBLzS8XeHM34FR+aAzVV81lSqNzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:49:e2:27:75:1f:c7:ad:a9:fe:fc:24:8c:14:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Validity
Not Before: Mar 26 02:01:43 2026 GMT
Not After : Mar 27 02:01:43 2026 GMT
Subject: CN=d6a3724f95cd77059239906a787589590235e3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:be:78:ed:39:74:66:9e:4e:5f:be:f8:23:
75:5f:e5:d6:6b:02:33:5c:8d:35:fa:b6:0c:99:0f:
9b:73:63:9e:48:02:1a:3a:0e:e7:29:8f:cc:c2:a5:
71:8f:f2:63:89:f2:bf:49:aa:b2:3c:88:75:7e:54:
35:cb:55:98:38:81:9f:03:c9:04:04:ac:49:ac:75:
2e:60:66:96:ef:4e:37:79:6f:fa:c8:1b:6a:50:7a:
71:bf:13:ed:38:33:42:44:8f:da:b6:90:aa:98:36:
57:8a:9d:46:a7:a9:08:1e:1e:d8:70:c1:6e:56:4f:
67:a8:0c:d5:75:d1:60:35:da:45:f5:d9:65:f1:60:
77:65:0d:82:96:08:bc:b2:d9:a4:cd:67:3b:ac:d8:
15:2b:df:c2:63:33:5a:f7:ba:85:a5:01:08:63:0a:
63:24:a5:56:a2:c3:1b:8a:71:88:0e:61:0e:fc:3f:
f2:df:c2:28:4d:21:f0:84:d9:18:28:85:82:66:e1:
95:42:a7:14:73:d1:2b:e5:fc:ca:bf:80:6d:7e:25:
f8:3c:0d:c3:d6:a4:bf:b1:00:67:3a:64:ed:14:33:
23:94:6d:e4:9e:bd:13:d3:8d:f3:70:39:37:f0:9c:
c0:1b:aa:d8:28:34:19:49:3d:d9:76:fd:4e:31:cd:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A3:72:4F:95:CD:77:05:92:39:90:6A:78:75:89:59:02:35:E3:DB
X509v3 Authority Key Identifier:
keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:80:39:03:c0:37:61:c2:63:8b:52:0c:75:cf:cc:bb:99:31:
0d:17:a0:01:1f:2b:30:a6:0e:3f:1f:40:d8:9f:06:fd:c4:97:
15:0a:1c:f9:bf:1d:4d:dc:4b:57:e6:9c:ea:87:16:25:bc:c9:
78:f9:d7:65:02:66:ff:c8:22:17:7d:96:4a:53:d9:3a:78:75:
b8:84:ec:d7:27:70:ff:06:23:d0:33:e6:1d:a9:5c:f9:93:0e:
3e:0a:be:ec:7f:cd:e9:3e:ba:d6:0d:79:a4:6c:dd:3d:40:05:
1d:7b:c6:0a:89:ab:9a:a7:1c:3b:c1:ab:07:ee:3a:53:0b:77:
e0:a4:0b:d7:db:76:7e:76:e6:c0:8b:ce:71:0c:a6:54:3b:59:
03:5e:72:6c:9c:19:7b:88:9a:9b:15:71:79:9d:6a:97:4c:30:
42:19:a5:01:7c:df:40:fb:4c:0d:12:2f:7b:00:d0:c9:13:ff:
9a:a8:a8:b2:09:a0:60:65:80:71:e6:5e:13:5d:09:37:6d:f6:
aa:a1:2d:c0:c2:32:f5:c8:30:d1:9d:c2:ae:d3:3a:41:c8:9c:
23:b6:44:56:56:c6:53:72:dd:e6:d0:a3:a6:13:55:61:27:4a:
5a:90:52:d0:7a:90:f3:19:6b:9c:86:c6:e9:91:e9:9c:1c:77:
9d:cd:d0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:50 2026 by rpki-client