Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
File: 670ir7gN-togA9QOVG2v03_4af0.mft (raw, json)
Hash identifier: A3wHaaM3SwkyfKe+QziRaNJtIiwEYXWDmc4Q+kkMZEg=
Subject key identifier: D3:75:8E:A2:B2:5D:3D:D9:59:F7:A7:18:65:65:F0:6E:08:2E:E6:11
Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Certificate issuer: /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Certificate serial: 019D25F20E65AE25A9ECDCDF208F5A42E314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
Manifest number: 077A
Signing time: Wed 25 Mar 2026 17:01:53 +0000
Manifest this update: Wed 25 Mar 2026 17:01:53 +0000
Manifest next update: Thu 26 Mar 2026 17:01:53 +0000
Files and hashes: 1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: 3i0SiXgRRPszXQkvYFYQe1boADyXs8BJVjcCJ9RnASs=)
2: euUp3-ezlCpILlf7qWV0a93H1yQ.roa (hash: kzeXchF7R0DCrCVUSaQcyQotUqQoTUlPfhRZvehXMko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:0e:65:ae:25:a9:ec:dc:df:20:8f:5a:42:e3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Validity
Not Before: Mar 25 17:01:53 2026 GMT
Not After : Mar 26 17:01:53 2026 GMT
Subject: CN=d3758ea2b25d3dd959f7a7186565f06e082ee611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:31:f0:dd:28:25:fd:59:3f:e0:56:52:32:
3d:bd:6f:63:13:31:c6:44:37:72:59:b1:a8:12:7f:
e3:c2:5e:0b:02:3a:02:e9:67:2f:14:35:fa:89:85:
b2:fc:6c:e4:38:bb:2e:33:61:63:4e:07:b3:07:da:
1d:13:8d:11:1e:b7:8f:60:03:ff:59:1c:ae:68:f6:
aa:4f:ce:55:50:7c:7a:fb:2a:18:d7:aa:11:d6:2b:
f4:41:03:20:db:cb:7b:2d:b9:48:85:3f:da:c5:1f:
66:a3:a1:9f:46:84:71:a4:88:87:a1:f3:0a:be:23:
1c:7a:4f:42:6e:89:e4:0e:31:cb:74:7c:4b:87:66:
c0:83:5a:21:42:92:2b:96:67:09:77:8d:c5:77:80:
c5:69:0d:ee:51:a5:f8:67:cf:2d:7e:3e:71:11:da:
22:b6:6c:bb:c5:e5:69:ea:43:33:d8:3e:eb:ab:0c:
5c:a5:ae:5b:f7:2a:b3:ac:b9:03:da:53:2a:b9:e2:
6c:3a:9e:2e:f6:8f:ab:a9:ba:d3:10:50:cf:db:89:
c3:47:21:75:dd:14:7f:c5:a2:9e:5b:79:1b:ba:9f:
8c:96:55:7f:62:a0:11:d9:95:fe:30:21:e9:ef:02:
e3:90:c6:40:0a:0f:be:3f:7f:be:91:7f:7a:08:0d:
cc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:75:8E:A2:B2:5D:3D:D9:59:F7:A7:18:65:65:F0:6E:08:2E:E6:11
X509v3 Authority Key Identifier:
keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:15:a4:b9:ca:d2:93:2f:61:0d:9d:3d:4f:28:8b:b7:7e:d5:
d3:15:50:5c:a6:4b:40:e3:52:89:77:05:45:30:5b:0c:d8:5c:
81:59:64:2c:91:51:2f:e7:45:78:7a:31:fc:a6:0e:c4:f5:4d:
7d:76:08:21:ff:63:69:79:78:b7:ed:d1:3e:2f:25:8e:23:b7:
a2:6c:04:df:a3:b0:cf:5b:e1:af:0b:55:b1:42:b3:45:69:cc:
78:56:26:35:f0:86:d1:55:b5:ff:61:cf:a5:6c:df:a8:f3:24:
e2:23:8d:28:8b:db:22:96:4a:37:eb:86:78:af:31:4e:21:f3:
4c:60:a8:f6:60:40:54:38:8b:4a:f9:bf:08:c5:d8:b0:38:56:
c9:39:ce:46:02:72:59:53:1d:ac:74:9b:f6:6e:4f:90:8f:d3:
cc:c4:1b:88:eb:6d:e7:ae:08:cb:62:8e:c0:f4:41:d4:25:fa:
c7:51:8d:c9:13:21:4b:37:ad:d6:b3:c9:41:1f:7f:71:8d:bd:
99:c9:a0:03:ee:d9:7f:40:96:6c:87:28:d3:ab:09:23:fc:96:
d2:98:53:cd:1b:8c:29:78:be:42:95:00:99:10:77:2e:27:c1:
e4:92:1e:75:5a:f9:e4:c5:65:3e:55:6e:32:54:1e:9e:63:fd:
02:4b:3d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:32 2026 by rpki-client