Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier: gvq5tlNU2lv75oPE20nxsbEEHjO3jrGO4kLnEM+mDwU=
Subject key identifier: 61:C3:7D:22:0D:B9:B9:9C:AE:4B:46:E8:07:EB:50:74:E4:7A:61:8E
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial: 019D270497A4FFF957A4FDDF399DC8D83DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number: 0FEC
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: YlVMnycEtNaT1Sk7zVHTD5hmqJVd3qgV7ewGiNy9QsI=)
2: xWJAqfrPXr4KnkU7Qd4lSzlkp8o.roa (hash: ceeD+cwy4G4/W2RDlhQiQMMWpwCMIwxk/08X/W6eMjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:97:a4:ff:f9:57:a4:fd:df:39:9d:c8:d8:3d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=61c37d220db9b99cae4b46e807eb5074e47a618e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:47:a9:f7:03:a1:12:86:21:c6:7a:93:29:
62:a3:5a:1a:99:e1:46:95:d7:0e:4a:07:f3:9c:e3:
8a:22:fd:2a:3b:12:6a:23:11:af:fe:f2:19:84:81:
26:b4:e5:b9:af:7a:1c:ef:d0:b0:4c:71:4a:94:4b:
8a:5a:c3:7f:9c:38:99:e4:7b:6a:3f:e8:74:0c:7e:
8e:41:d2:40:6d:dc:99:5f:9b:a8:6b:99:91:95:f4:
b5:18:b6:e3:bd:e1:d0:02:b2:01:54:78:8b:b6:75:
56:71:63:f2:aa:3c:f9:d7:72:fc:fd:fa:7f:4a:8f:
47:96:6c:49:c5:5c:c5:38:30:64:2a:8e:56:ec:92:
68:f1:09:ea:74:01:06:79:bf:38:8c:72:c2:9c:33:
79:e9:54:a6:a0:e3:96:a5:c1:28:6a:a8:7b:13:6c:
1f:9d:ae:24:f8:ad:66:eb:85:7f:a7:6e:13:49:e5:
ad:04:67:68:d9:7c:94:a4:2d:6e:ca:79:a7:5c:34:
d3:0e:9f:b8:e4:ac:a5:5e:44:5b:a9:a0:db:93:1d:
1a:8c:36:92:ee:62:ac:24:9b:50:c7:79:bf:3a:14:
7b:63:96:ba:64:15:eb:6e:5b:62:12:95:61:3b:8f:
5a:a5:5f:64:b7:1e:dc:aa:2c:81:75:13:dc:06:76:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C3:7D:22:0D:B9:B9:9C:AE:4B:46:E8:07:EB:50:74:E4:7A:61:8E
X509v3 Authority Key Identifier:
keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d0:d4:99:8c:ac:7e:d4:ac:e6:b1:ee:f1:5c:d7:61:73:60:
47:ae:ae:24:2d:df:6d:0f:a1:3c:6c:1f:f3:9f:9a:35:45:1b:
20:4f:e5:58:60:d6:ce:86:41:92:75:ca:fa:68:77:25:3c:78:
3e:dd:19:f8:bf:07:90:4e:79:9b:a1:70:55:64:a4:48:c9:94:
b6:78:56:a6:fa:90:a8:42:50:53:5b:4e:94:61:85:53:06:89:
fc:3e:cb:95:89:4e:ca:6f:c7:8f:04:57:df:20:24:11:32:89:
bd:eb:db:51:49:15:26:78:3a:5c:52:55:04:cb:97:19:f8:83:
28:92:61:2c:98:74:91:96:75:0e:7c:13:37:b7:d3:5a:db:d2:
34:c0:02:3a:76:2a:be:4a:33:b1:08:51:a7:e7:79:a1:32:01:
97:5a:58:a1:80:68:f7:1a:5c:57:8c:cf:1f:e0:fd:32:39:26:
30:2d:49:72:6e:29:7b:03:e8:4c:b6:ae:d4:b9:46:23:60:45:
f1:ba:d1:91:ce:2e:9a:f1:5c:ab:9f:4e:ec:eb:16:bd:30:05:
0c:b1:87:37:c5:2d:28:81:9d:b6:c1:a5:54:75:49:8e:42:f6:
55:5a:19:9d:94:46:a5:27:a2:0b:1e:b8:56:78:ec:f6:66:47:
e8:d6:1c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:44:02 2026 by rpki-client