Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
File: 7SGj8xKknz6djGxEyd4TOp7Yd-o.mft (raw, json)
Hash identifier: raVanJgqZne+pOc2udzCUkZq+OgQXrtuMtyYGiklGzg=
Subject key identifier: 7F:31:73:5D:D2:08:41:5D:DE:23:0D:BA:64:DB:4B:EA:8E:45:72:60
Authority key identifier: ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA
Certificate issuer: /CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea
Certificate serial: 019D27DFFE7A462B7F0C6E80631C2D229B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
Manifest number: 012C
Signing time: Thu 26 Mar 2026 02:01:24 +0000
Manifest this update: Thu 26 Mar 2026 02:01:24 +0000
Manifest next update: Fri 27 Mar 2026 02:01:24 +0000
Files and hashes: 1: 7SGj8xKknz6djGxEyd4TOp7Yd-o.crl (hash: XpeypiwrmVgNogOfuCQ+jB7E2ZCHy1dMPQRpIbW5sho=)
2: QBDeh8-FvDO0AkQLiktV9k-NtVM.roa (hash: tI3DlxFpE7QxnE4bKmU+VTwjoA3hd05ITjU2EuSCJxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:fe:7a:46:2b:7f:0c:6e:80:63:1c:2d:22:9b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea
Validity
Not Before: Mar 26 02:01:24 2026 GMT
Not After : Mar 27 02:01:24 2026 GMT
Subject: CN=7f31735dd208415dde230dba64db4bea8e457260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:51:d5:a9:e2:34:7a:04:f4:3d:8d:e1:53:84:
09:a4:8e:44:bb:71:95:f5:73:91:be:6e:6d:a0:68:
ca:58:e9:6a:0d:8f:48:b0:97:0e:cc:28:b8:bb:39:
56:d2:fc:d2:7c:be:a2:1d:8e:50:d3:d3:f7:8f:49:
47:05:5e:91:95:a0:98:b0:f5:dd:b8:82:8f:cf:d5:
13:af:29:5c:e5:0f:80:d4:96:f5:d5:30:36:3a:e6:
28:d2:2c:1c:44:16:3e:41:a0:a2:09:97:bf:f6:f1:
ed:96:94:69:0e:b8:8f:7e:c2:58:f8:66:5d:79:6a:
27:23:7e:03:f2:8e:2b:d6:59:32:7a:83:4e:f8:97:
76:7f:85:ba:fa:ff:d7:a3:da:f8:e7:31:51:69:21:
1a:32:0b:a2:ed:64:d9:d3:5d:7b:d5:e7:54:ca:a6:
b8:4a:9a:1b:62:35:21:f1:c6:4e:35:c3:82:5a:dd:
a1:c8:74:ec:81:b2:da:9a:18:7a:15:96:24:39:2c:
65:69:85:78:c8:1e:23:44:89:77:b9:05:98:9f:b6:
41:92:3f:35:12:9d:5d:d5:ff:66:ef:af:13:54:9c:
0a:03:8a:72:d2:ce:b3:3a:1e:1b:18:16:a4:e0:ad:
74:66:06:cf:75:cb:ea:c3:ca:fd:c7:1a:55:98:74:
22:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:31:73:5D:D2:08:41:5D:DE:23:0D:BA:64:DB:4B:EA:8E:45:72:60
X509v3 Authority Key Identifier:
keyid:ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:13:72:88:a0:87:02:da:1f:67:12:6b:32:43:6a:a8:28:43:
59:7b:b9:5d:d9:c5:11:22:51:83:56:22:04:23:99:ff:14:96:
24:07:37:74:6c:df:41:bf:e6:ad:ed:84:e9:cb:39:85:e8:e2:
96:26:7b:06:34:6d:21:da:7e:b2:25:60:a5:00:15:83:74:3f:
94:c2:af:05:79:9c:d1:e3:e1:f1:d8:c4:ae:da:51:fe:aa:b2:
17:c1:10:fd:e0:ba:55:49:31:98:91:6b:e7:2f:c4:65:b5:ec:
b7:b3:2b:b3:29:c8:4d:56:c5:3f:73:8f:67:2b:a8:fa:fa:03:
e7:3a:79:58:82:46:aa:32:0c:dc:26:f5:34:a6:30:b4:85:ae:
50:f6:3c:3f:5d:5d:d2:dc:06:c4:ec:a8:0e:44:40:3c:60:b4:
73:d0:90:22:8a:0f:be:8e:28:18:de:71:f7:3f:4b:b0:27:21:
49:62:69:b3:63:5a:36:2b:56:55:5d:cc:29:d0:dc:9e:e5:73:
f0:b2:f2:58:ed:d9:6c:5e:f4:4b:69:4b:5e:22:d2:15:69:b1:
c7:9b:1d:9a:29:f0:55:e1:55:fa:4a:be:04:0f:f4:e1:63:9b:
c7:87:e1:c0:c6:0f:ad:ea:f5:0a:78:ae:42:ff:ce:11:3e:51:
76:6f:e0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:31 2026 by rpki-client