Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: avfMMjyf3U4NNNwrOuQWDYNKq7kLVIwK5wnTzTlqrtU=
Subject key identifier: 36:AB:B0:45:88:DC:8B:DF:F4:E8:A2:F0:3E:F6:4C:1C:14:45:97:A4
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 019D284DE4F335671EAFD711999E5A762EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:26 +0000
Manifest this update: Thu 26 Mar 2026 04:01:26 +0000
Manifest next update: Fri 27 Mar 2026 04:01:26 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: an43dwVckU7ZTR0hbiIgXIFU8JmteN+/Kyx19qeVyps=)
2: x6n822Rpr9x_ujzRReAoyI3uWJE.roa (hash: xHlOIj9K0jyV1cDKqnDaDCInd6n4ZibqQVDDfE1qwao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e4:f3:35:67:1e:af:d7:11:99:9e:5a:76:2e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Mar 26 04:01:26 2026 GMT
Not After : Mar 27 04:01:26 2026 GMT
Subject: CN=36abb04588dc8bdff4e8a2f03ef64c1c144597a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:66:3a:26:4c:ba:74:d4:1c:49:8b:2f:b5:
3f:b6:b6:03:d6:04:7f:73:6a:c0:1c:d9:f6:64:2a:
a8:3a:34:13:64:00:7a:b9:c0:e4:7a:b2:a5:e4:97:
e9:09:a6:11:3e:43:88:4e:1d:38:ff:3d:b4:09:73:
9f:ee:fa:6b:0d:a7:d4:9d:e8:fb:70:2c:16:06:fd:
60:40:dd:cb:9b:30:bc:e1:f1:91:3a:45:31:76:b3:
c6:c1:31:cb:84:2b:e4:26:ed:1b:45:a3:b2:a0:d9:
cb:7e:d7:f5:88:5a:7b:67:d8:ae:2a:75:fc:8c:7d:
73:0c:92:2d:9a:13:d4:43:ed:f9:29:51:4c:eb:0b:
7f:83:e9:44:71:01:82:f7:e8:ff:cb:c5:d0:a2:0c:
40:98:fc:a1:45:d9:d6:fc:8e:72:84:f4:55:c7:46:
70:a4:64:37:78:e1:f3:5c:84:69:dd:d9:5f:86:3e:
54:bc:2e:bd:3f:d8:d0:8b:3b:a5:bc:73:60:5b:e7:
ee:b5:8f:2b:23:4d:61:71:40:e7:26:8c:e2:39:be:
7f:c5:85:e1:d9:d1:c5:1b:a3:0e:05:17:65:30:5a:
d4:91:e3:06:4c:c4:54:5a:9b:6d:ea:89:db:aa:23:
19:4e:ad:eb:fe:c7:2d:b6:d2:73:87:e4:cc:6f:89:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AB:B0:45:88:DC:8B:DF:F4:E8:A2:F0:3E:F6:4C:1C:14:45:97:A4
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:da:aa:e6:83:fa:12:bb:3d:cc:f2:e7:b5:8a:66:c6:8c:68:
22:46:42:9e:a0:c2:80:e8:b7:48:e6:f0:d5:34:33:5f:ca:00:
86:a4:dd:31:43:43:41:d3:48:ae:a5:ea:4b:a8:fa:78:91:8f:
9d:10:d8:8c:31:4a:e8:c6:1b:ee:ac:62:6a:e1:f2:ec:86:af:
39:86:ea:5b:b7:7b:63:b6:aa:f3:78:50:10:34:47:d5:69:6f:
4f:5e:8a:4a:2d:16:b3:80:81:c6:6f:fc:21:f2:83:ab:42:f2:
c0:1e:e1:43:77:16:d3:13:c3:ce:8a:d5:70:18:6d:7c:8e:54:
e5:45:4f:d3:70:cd:60:ca:4e:58:1c:2c:6d:fc:59:48:ef:52:
ae:64:0f:fe:64:6f:bf:2e:5a:b6:7e:8d:0d:66:e1:24:95:b4:
ac:2f:f9:6c:72:6a:95:de:d8:e4:b0:30:03:62:cc:c6:d4:4f:
50:a8:f9:6c:88:e7:6a:77:f1:cf:90:fc:7b:eb:99:1f:c1:89:
35:3d:4b:2e:5c:90:7c:95:8d:3b:79:4d:b0:34:82:58:dc:1e:
39:83:9c:5f:fa:c4:30:b4:c0:64:12:de:6e:f1:58:6c:fd:b8:
33:b6:bd:dd:79:53:e7:a0:c0:f8:94:34:34:71:a0:82:1b:3d:
bd:84:a9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:56:21 2026 by rpki-client