Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
File: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json)
Hash identifier: A5xBRcopFr+KRI9uqKi/kivcy/R0Qk+tQFqTUPt85e0=
Subject key identifier: 0F:48:46:A2:DD:42:E0:40:1A:2F:46:C0:0D:21:8A:F6:33:5B:4E:4B
Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
Certificate issuer: /CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Certificate serial: 019D28169D58F09DE215216A36AF27ED927A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:01:03 +0000
Manifest this update: Thu 26 Mar 2026 03:01:03 +0000
Manifest next update: Fri 27 Mar 2026 03:01:03 +0000
Files and hashes: 1: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: Mu054JgJKIKrGhgi93R/Sq/mj5mjz7Wb6WgyalvHE8w=)
2: ice_LDnA6TShJ0tbBNY5iT0MS20.roa (hash: Ne/xr7FxI4PoMf09Z/160yY/95SJ/bfXY5TJhx10TCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9d:58:f0:9d:e2:15:21:6a:36:af:27:ed:92:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Validity
Not Before: Mar 26 03:01:03 2026 GMT
Not After : Mar 27 03:01:03 2026 GMT
Subject: CN=0f4846a2dd42e0401a2f46c00d218af6335b4e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:2a:ee:2e:0a:5e:f0:50:c1:cb:20:4a:14:
e4:41:8e:42:5e:fc:a8:c8:c6:8b:7e:c8:fe:4b:4b:
94:44:8f:8c:3f:bc:2d:8d:17:db:49:f6:c8:ea:e5:
59:dc:62:80:e4:9c:c7:84:64:2a:8a:77:89:6a:c7:
45:ce:72:6b:bc:e1:a4:be:fe:2f:04:ed:04:66:33:
0a:a0:e3:6f:dd:c6:2b:60:ea:55:59:21:81:ca:37:
f0:2a:36:89:51:5f:f6:7a:5b:4e:c3:83:c0:fc:fa:
39:ca:3a:6d:f0:16:e9:48:0c:54:c1:6c:e8:1f:6d:
bb:a1:8c:7a:3f:6f:11:9e:e2:c8:de:de:c1:12:59:
1e:b0:58:fe:c3:de:f5:b4:61:f6:d0:56:7b:69:af:
f3:03:0f:88:a1:ff:43:cb:7c:a1:e5:21:8c:c4:01:
c6:85:07:ad:5e:3c:c7:8f:3e:a8:b5:ca:cd:97:df:
7e:8f:fe:f4:90:03:b1:a1:f6:02:8c:37:2f:1b:7d:
70:a5:89:36:e0:3b:fc:9d:79:ad:32:95:51:be:9d:
35:09:48:ce:e5:05:f4:69:91:9f:60:bd:32:3b:b1:
52:45:23:a5:eb:24:93:50:6a:0e:87:4b:c5:ba:e8:
8d:05:30:13:b3:cc:d9:4a:a6:a4:0c:f8:b8:fc:ba:
3f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:48:46:A2:DD:42:E0:40:1A:2F:46:C0:0D:21:8A:F6:33:5B:4E:4B
X509v3 Authority Key Identifier:
keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:94:ee:19:4e:d2:10:fd:43:1c:a5:64:22:25:92:22:59:9d:
54:a8:33:00:1b:c7:2a:53:95:a5:d4:31:95:e7:e0:3a:9b:93:
a4:06:6c:79:77:59:48:14:9a:04:66:d7:d4:ad:df:1e:a2:27:
3e:58:0e:20:5e:57:1b:f7:b9:30:4f:ff:b0:ab:2a:91:5c:ec:
e4:f5:84:ce:3e:d4:de:66:3b:9b:0d:c5:33:e0:08:c4:2d:50:
b6:b1:b9:6b:7e:12:d2:e9:17:24:71:d1:94:7b:2f:6f:fd:8c:
52:13:8d:d1:61:20:c3:23:1a:93:e7:61:ca:66:55:27:35:66:
15:96:4b:c7:d0:a1:ac:1f:4a:b4:1d:3c:86:0e:3f:e3:d2:e5:
36:b5:d0:b1:3a:eb:a6:17:81:70:8f:12:ab:f3:0b:95:48:b1:
e9:f8:c3:7f:f7:3b:f7:5c:fe:e7:2c:da:e4:7f:41:17:c7:66:
13:fd:fe:44:d7:e3:c4:2b:15:0d:4a:74:20:eb:3d:5c:eb:ed:
4d:55:20:a1:ca:ea:8b:38:c1:ba:71:e5:d5:ca:4d:58:97:34:
95:13:b2:8f:f0:f1:0b:79:2a:f0:c3:1b:72:e9:18:21:5a:71:
c4:6b:20:59:ec:bf:dc:f7:70:58:27:37:e3:a8:e2:10:46:42:
20:fe:85:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:22 2026 by rpki-client