Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
File: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json)
Hash identifier: dzYBHTZHdExeg4Prr6r4o6zZJ2IO9EvF42IuJTKNafw=
Subject key identifier: 74:33:49:9D:DA:B1:9A:0E:1F:88:FF:D5:72:F5:27:A7:C8:79:B7:CC
Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Certificate issuer: /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Certificate serial: 019D284D893A1CD6FC3F22571A2C8EBEA738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
Manifest number: 04F7
Signing time: Thu 26 Mar 2026 04:01:03 +0000
Manifest this update: Thu 26 Mar 2026 04:01:03 +0000
Manifest next update: Fri 27 Mar 2026 04:01:03 +0000
Files and hashes: 1: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: twT5BiJ79meTy6fniCCylsuyWlnGduCLW8mAfd7i93I=)
2: EkaMEHFXzVXgvijJ-hXSC2h-u7I.roa (hash: JZppuXOA54xhCxrPeBXaCqhSYeNgkIyj6hJkt7FdiSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:89:3a:1c:d6:fc:3f:22:57:1a:2c:8e:be:a7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Validity
Not Before: Mar 26 04:01:03 2026 GMT
Not After : Mar 27 04:01:03 2026 GMT
Subject: CN=7433499ddab19a0e1f88ffd572f527a7c879b7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:1d:89:07:c8:9d:e4:42:34:e6:21:65:7d:
47:99:07:96:8f:4f:e9:c5:c1:5f:03:03:17:39:8d:
f5:01:3f:9b:32:e4:68:61:e5:ca:08:b7:0e:fe:f2:
b1:51:b5:71:f4:f9:e1:3b:17:fb:67:8e:cf:82:a6:
6c:08:33:2f:7c:1c:b3:d0:a8:97:9a:49:ee:d5:7f:
33:3a:de:31:ff:d9:b0:82:fa:eb:dd:c1:f5:c0:90:
07:4c:9f:34:02:0b:a2:22:e8:db:75:17:a5:f2:c9:
90:70:7f:2e:09:4a:9f:92:10:90:ed:29:10:b0:80:
73:17:54:db:07:cf:81:94:67:a5:fb:00:9e:81:02:
9e:aa:6b:b6:02:19:8b:eb:0f:8c:b6:cf:31:cb:c0:
a7:d1:b9:74:6b:86:99:b2:92:be:ee:f7:8e:ef:2d:
b5:5b:36:5d:2e:1d:31:e9:c8:c7:55:9a:c2:26:9c:
63:10:63:ab:92:df:5e:06:7c:94:b8:7e:09:0f:0b:
ee:b1:5a:4c:75:a6:58:9e:49:69:b6:9f:d5:a7:c6:
d0:b1:49:3e:9d:b3:e0:95:79:71:8a:5f:fa:18:89:
31:8c:b8:19:42:69:49:55:f0:32:69:df:1b:04:80:
36:76:35:b5:7d:22:40:5c:b3:65:fc:08:7e:78:35:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:33:49:9D:DA:B1:9A:0E:1F:88:FF:D5:72:F5:27:A7:C8:79:B7:CC
X509v3 Authority Key Identifier:
keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:44:08:80:d6:87:ee:73:91:7f:65:58:9f:42:0e:af:06:8d:
cf:1f:e9:66:dc:78:41:bf:2e:06:44:2b:6d:64:48:76:81:81:
36:6c:0c:36:d1:40:6d:fe:04:e1:ad:c6:d0:7a:fa:81:87:f2:
6b:b3:03:75:ae:61:be:18:c0:61:a7:78:f6:35:54:3d:fc:f5:
f4:a6:f6:1f:b1:75:3a:8a:15:46:d9:e9:a9:94:73:82:b2:43:
8e:49:6a:a3:52:61:ef:c8:5f:07:ec:0c:f1:32:93:d4:d7:78:
91:ee:58:cc:74:6d:5e:e1:e9:e4:1b:1c:0c:fa:76:7e:b3:da:
85:0c:f3:cc:71:36:95:56:6a:b9:95:62:37:b6:d5:5b:06:bc:
40:b0:f3:89:d2:ec:aa:bb:e9:08:cc:45:36:38:7b:c5:4d:7c:
00:22:62:09:d8:25:33:2b:d5:c9:91:23:2d:ea:ae:c3:72:d5:
9f:61:a0:3d:f9:1c:61:bd:f1:9e:1f:11:95:19:6a:f1:5b:fe:
02:84:95:50:1a:f8:a0:a4:74:b9:f8:70:31:59:d5:de:30:1f:
2b:c2:06:2e:f1:02:82:29:12:85:c1:b7:00:dc:3d:b4:b6:31:
22:99:bc:66:2e:79:e3:03:03:60:e7:6a:34:c1:5a:74:af:87:
4c:18:be:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:00 2026 by rpki-client