Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
File: p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft (raw, json)
Hash identifier: lu9hyHbcawDLs1JE7Ijmpsb1igB9v7nXWAjmxgtW+6E=
Subject key identifier: 10:F1:D2:87:EA:1F:D2:AF:53:FA:DA:14:88:72:1D:19:7D:16:FD:0E
Authority key identifier: A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
Certificate issuer: /CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Certificate serial: 019D2696030F7F33D126C94BC40E693BAA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
Manifest number: 07F2
Signing time: Wed 25 Mar 2026 20:00:58 +0000
Manifest this update: Wed 25 Mar 2026 20:00:58 +0000
Manifest next update: Thu 26 Mar 2026 20:00:58 +0000
Files and hashes: 1: FgHH8Xt1f7VzQSoTVAC27ghf-rE.roa (hash: YVFe19iE2Xwhz35hkGQLqqB10MJOqZddrQvOlNebwwQ=)
2: p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl (hash: RF0bmaodsVyLOfQA1o0c53TB1A/vixKGfao/XB4Ijwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:03:0f:7f:33:d1:26:c9:4b:c4:0e:69:3b:aa:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Validity
Not Before: Mar 25 20:00:58 2026 GMT
Not After : Mar 26 20:00:58 2026 GMT
Subject: CN=10f1d287ea1fd2af53fada1488721d197d16fd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:7b:be:57:5e:dc:02:43:d1:f7:e1:6a:5b:
2f:fd:f8:bd:db:a7:4c:66:95:5c:53:99:66:10:20:
9f:50:9a:9b:86:2f:03:44:a3:e2:3f:81:15:11:1a:
16:cb:e4:e1:5e:97:d5:9e:d9:21:6d:b0:df:17:ee:
22:58:be:a9:d2:35:fa:c8:ff:a8:69:ca:be:b6:94:
c4:91:b3:39:81:64:bf:0d:9c:af:2e:80:3f:75:f9:
dc:7f:3c:a7:bf:d0:15:14:32:1b:9a:a8:c4:05:ad:
77:dd:2d:62:f5:dc:1c:e5:6d:d5:bc:27:1a:4f:86:
51:49:af:2a:c1:7d:a1:37:83:fc:20:b0:58:c2:1f:
4d:7f:19:a3:e5:9a:38:32:28:4f:02:7a:12:6a:44:
96:38:5f:42:69:20:c3:55:5d:ba:87:1b:7f:a8:85:
4b:f6:e8:b5:c6:fa:7c:62:c4:59:39:81:3a:32:af:
c7:11:b9:22:64:72:0e:58:9b:fb:aa:14:ae:ac:09:
60:e0:41:9f:4f:6b:71:c9:83:17:11:fc:df:76:e7:
a4:ed:ec:d1:3b:6d:be:89:d2:8b:e9:b1:ac:b5:11:
80:0a:96:8e:2a:8c:da:c6:07:b0:43:a5:a8:66:91:
8a:b4:2b:6c:16:3b:a6:3a:44:8e:06:00:9e:d8:10:
f4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F1:D2:87:EA:1F:D2:AF:53:FA:DA:14:88:72:1D:19:7D:16:FD:0E
X509v3 Authority Key Identifier:
keyid:A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fd:ad:34:2f:a2:de:22:87:85:84:05:f9:56:53:b8:7d:12:
b3:33:58:7c:ab:d0:a0:32:5a:bb:66:b6:fe:e0:08:cb:0b:f1:
57:ec:d8:bf:1f:39:52:b4:dc:85:17:34:5f:c2:e3:95:18:c3:
4b:14:12:03:6c:c8:6d:99:53:e7:88:79:a5:3b:cb:0b:41:96:
7e:b8:d5:2c:86:74:95:2b:16:66:48:8c:f5:2b:31:9d:ea:ef:
e6:d2:09:98:ac:29:97:16:10:0a:2a:56:79:30:c8:77:c3:0b:
c9:89:2e:79:9e:04:76:e6:05:db:48:f1:c6:09:73:c7:cb:a4:
35:02:db:ed:b3:bb:c4:f6:a6:5e:1a:b8:67:4c:7f:46:c1:78:
69:c8:5b:2a:14:a9:aa:d7:df:22:21:c6:1b:d9:54:31:0b:b3:
0f:ed:4f:a3:76:fd:f4:60:f2:3f:6d:a2:2f:85:33:c3:c2:47:
58:25:34:a7:20:6e:5f:3a:c6:a5:96:34:ac:d4:60:d1:58:5a:
e3:a9:3a:cc:1f:07:3c:50:de:08:32:33:ce:b4:fb:32:aa:bd:
99:30:67:fe:01:1c:06:1a:d6:6e:38:53:b0:7b:95:d5:bf:d7:
9c:1f:7f:db:88:41:be:1e:0d:2e:65:43:6a:a2:ab:ec:57:d9:
69:8b:7b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:43 2026 by rpki-client