Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: F1iw6nzV3KzeqsW0VJ/SZlifRfcQvBB8pH9PRFZzZt8=
Subject key identifier: 15:C9:3D:6E:F4:17:16:E9:7B:B3:AB:AE:0E:8E:B8:15:80:F2:D8:52
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 019D28BBED63F6F67DD7D635F12509391DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 1670
Signing time: Thu 26 Mar 2026 06:01:37 +0000
Manifest this update: Thu 26 Mar 2026 06:01:37 +0000
Manifest next update: Fri 27 Mar 2026 06:01:37 +0000
Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: Vg2T7NuiIMPKmkxQaFB0ljLP161jX+BDl3+4fVAvaQU=)
4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ed:63:f6:f6:7d:d7:d6:35:f1:25:09:39:1d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Mar 26 06:01:37 2026 GMT
Not After : Mar 27 06:01:37 2026 GMT
Subject: CN=15c93d6ef41716e97bb3abae0e8eb81580f2d852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:b6:e0:79:ef:2c:e6:95:8c:7a:98:7c:da:
ef:25:b8:9a:4b:c1:3d:1d:32:2a:5b:d9:03:62:f8:
46:a5:5c:de:39:39:11:9c:ca:54:a2:51:c7:da:92:
8c:5f:e6:6b:00:fc:c7:83:b4:45:3a:8c:4a:6e:be:
6b:e0:26:b0:ea:b9:fc:c9:08:ab:70:04:3c:4e:88:
b3:ee:ff:09:9d:08:19:1f:6d:c1:4c:7c:d7:9c:72:
d7:ea:23:ba:9c:65:08:4d:12:6b:77:c4:9c:62:4e:
61:03:e0:18:cf:3e:5b:ce:88:32:0f:7a:97:e8:cc:
ab:6a:4d:53:8c:f4:88:10:4a:58:37:b6:4b:40:89:
3c:10:a0:0b:98:be:71:1f:30:0d:75:97:82:ee:b8:
2d:6c:87:aa:7a:5f:9e:36:4d:65:59:8a:95:28:d6:
96:d6:22:ef:c0:60:cc:7e:ca:59:58:d7:55:7e:0a:
42:ac:47:eb:e9:ea:0e:b3:c9:84:bf:8b:61:cd:e2:
67:cf:5a:03:44:b4:da:83:1e:0a:48:0e:78:3c:ee:
9f:5c:f2:3b:a1:75:86:33:46:0b:6b:6e:4a:ff:02:
a0:dd:8e:67:c2:80:1c:92:3b:7d:62:41:b0:96:ef:
4c:1e:6a:16:5d:0a:f0:ec:d7:f3:78:dc:8f:4a:3c:
2b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C9:3D:6E:F4:17:16:E9:7B:B3:AB:AE:0E:8E:B8:15:80:F2:D8:52
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:84:cf:0c:95:9c:2a:e6:94:04:cc:8c:a9:ba:c3:41:a1:b4:
2f:7f:37:99:c5:fb:2f:af:59:26:e2:e0:d1:f7:af:a7:a6:ae:
dd:16:5c:ff:60:b8:30:5b:a5:cf:06:38:4e:58:f7:8a:34:44:
af:b1:3f:70:39:59:30:c9:b1:7c:40:62:70:2b:a2:28:85:98:
db:28:38:03:af:9d:f8:cf:a8:6f:a0:1b:c3:35:55:f0:3e:d4:
9a:32:2f:65:dc:46:f8:61:6a:20:ef:cd:02:10:47:a6:7d:37:
5a:a9:22:76:91:36:62:93:4f:99:99:2c:25:1d:2d:de:e3:2e:
dc:cd:1b:22:04:f5:b3:80:52:25:34:13:af:11:a9:70:09:fa:
0a:1f:aa:50:c5:69:02:14:2e:72:e9:0e:9a:12:47:83:a3:75:
db:7d:1f:1f:aa:c9:59:0c:0c:79:a3:6d:a1:6f:d2:e8:93:b4:
8d:16:b9:50:58:c5:4d:1f:18:2f:e3:08:2f:61:64:40:fc:a6:
12:1a:af:be:7e:b2:06:1c:00:f0:02:bd:83:2b:89:2c:96:11:
24:d3:5a:ce:56:8e:37:cd:9a:8b:70:27:d3:a9:1c:6f:6a:bb:
41:5a:e1:19:16:28:87:c2:ac:cc:57:e3:58:6a:05:0a:55:c9:
10:bd:d2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:41 2026 by rpki-client