Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
File: 07SieHIiWX8W0e5MQ1voaQ8QM9k.mft (raw, json)
Hash identifier: F/+8JBH0Ps59GSDxJRJjRKNHW5P13qfBvp/tBnEjDA8=
Subject key identifier: 2E:B4:4B:B0:0F:FF:04:8C:AD:BA:14:86:DD:11:DD:9B:2A:28:B9:BB
Authority key identifier: D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
Certificate issuer: /CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Certificate serial: 019D26CCBB8D1D23FCDDA1356E752C835556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
Manifest number: 0831
Signing time: Wed 25 Mar 2026 21:00:44 +0000
Manifest this update: Wed 25 Mar 2026 21:00:44 +0000
Manifest next update: Thu 26 Mar 2026 21:00:44 +0000
Files and hashes: 1: 07SieHIiWX8W0e5MQ1voaQ8QM9k.crl (hash: +PnK2ZwAzhoVem2gNpWA3rKfBXA7odj9lu/alyqsdaQ=)
2: cvsVj4Nxvo824NrKadr7CqxaETo.roa (hash: 6GdZp9tVQFM/JG4iIzlhh+KgWjJbdYXxpM8R/v3gqEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:bb:8d:1d:23:fc:dd:a1:35:6e:75:2c:83:55:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Validity
Not Before: Mar 25 21:00:44 2026 GMT
Not After : Mar 26 21:00:44 2026 GMT
Subject: CN=2eb44bb00fff048cadba1486dd11dd9b2a28b9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:af:bf:69:fa:79:c3:f5:67:37:cf:54:47:
0c:24:23:79:b4:e7:bd:6d:05:f8:d3:bf:80:73:e4:
43:8a:dd:02:b6:7b:4f:ba:ee:31:9a:ec:af:d0:13:
bc:77:bb:c5:fc:36:70:ad:55:e6:c8:26:8f:80:48:
6b:6e:a2:f1:3f:80:01:a8:7c:20:44:87:c5:63:34:
ee:10:51:bc:59:ea:0e:bd:a4:1a:b8:a6:85:f4:11:
e8:86:5c:c6:3d:1f:3d:4b:32:90:52:54:e9:c8:35:
af:f2:0d:a0:ea:3c:ce:ba:50:d0:02:31:de:11:9c:
0f:1b:c3:c3:44:d5:9d:9c:af:8f:19:9f:ac:de:21:
a0:7a:71:49:d8:39:c7:73:a9:65:a3:46:54:2b:06:
4a:d6:9e:44:16:52:a2:ce:df:c9:d2:20:af:64:42:
68:1f:eb:3b:e0:42:52:ef:5c:26:15:36:df:fa:e1:
d8:8f:54:51:fa:6e:f5:8f:c7:11:18:03:f0:dd:1f:
4e:ba:4c:cd:c0:1b:bb:fb:59:27:30:a4:d6:b7:08:
1f:4c:cf:03:09:f8:7f:e6:8b:19:e8:8c:99:e3:48:
00:9a:a9:dc:9b:af:40:97:25:25:c0:b7:c2:d5:71:
87:9b:c7:9c:bd:ba:e4:67:8d:64:50:bc:42:b3:33:
7a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B4:4B:B0:0F:FF:04:8C:AD:BA:14:86:DD:11:DD:9B:2A:28:B9:BB
X509v3 Authority Key Identifier:
keyid:D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:09:11:f7:b6:8f:7a:a7:2d:ad:d8:54:07:4a:4d:37:77:e2:
3f:6f:4a:60:a6:2d:20:0a:a5:1c:af:5c:02:19:1c:0f:6f:f2:
80:37:8e:1b:d8:4f:2f:85:90:5e:53:9a:b9:39:f4:87:64:a7:
ae:d8:9a:06:db:1c:f9:b1:94:5b:98:4c:10:57:35:21:6b:b8:
bb:ed:b0:1c:48:7d:30:e4:b5:40:94:97:49:eb:a4:c7:02:d9:
cb:28:61:e0:f0:b1:9f:6e:9f:db:6b:11:c2:cb:69:69:c0:cb:
df:dc:a3:bd:33:d2:2c:31:3b:8c:4c:c6:64:35:20:a1:67:c7:
80:37:31:85:d3:78:de:5f:ec:e1:1b:9e:29:c3:13:3c:b9:89:
ad:45:3b:32:24:f7:f3:0d:24:b6:52:b6:c3:06:20:c3:74:fb:
f3:39:73:6a:c2:e4:db:6e:d2:3c:16:19:d0:af:eb:8b:cd:fc:
80:d5:6f:9e:d6:f3:04:88:67:8d:d1:6a:00:27:66:c2:f2:72:
0d:bb:53:ad:18:ef:b2:8e:73:0f:de:62:e0:ef:c7:5d:76:22:
74:3c:78:a7:b7:e3:87:d8:0e:95:80:3b:64:0c:72:61:91:af:
25:ad:7d:3e:b3:fe:11:71:f8:08:93:d3:fd:69:19:18:f6:8f:
84:13:12:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:50:58 2026 by rpki-client