Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier: sLdaFaW1RucH2C7XxWy3NBvyKVpB8/pT16GI7EA76xQ=
Subject key identifier: 89:63:8D:34:B9:20:86:02:8C:6B:37:43:CC:5C:1E:EF:FA:A4:EB:3D
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer: /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial: 019D284E60E923BBD0200B6527E9FAC2C75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number: 0CEB
Signing time: Thu 26 Mar 2026 04:01:58 +0000
Manifest this update: Thu 26 Mar 2026 04:01:58 +0000
Manifest next update: Fri 27 Mar 2026 04:01:58 +0000
Files and hashes: 1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: ffoCbDt8j1GUtYNgY90H+NoSSHIJV+1R75ADlvxc3aU=)
2: HdaygFB4iSszAmMjo8uX2Se1nQA.roa (hash: UArj7jtroG3BsSDh4aM2iaAylpZS3vUew6s3b3GEueo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:60:e9:23:bb:d0:20:0b:65:27:e9:fa:c2:c7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Validity
Not Before: Mar 26 04:01:58 2026 GMT
Not After : Mar 27 04:01:58 2026 GMT
Subject: CN=89638d34b92086028c6b3743cc5c1eeffaa4eb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:73:d0:8f:ac:9f:4a:cc:ff:62:ef:b1:ec:
ce:0b:66:b9:b2:8e:e8:83:d6:f7:34:3f:43:6e:5d:
16:4c:39:23:fe:f8:16:4d:d5:08:a8:bf:07:53:7b:
96:55:e5:63:8b:f8:69:fe:0f:32:78:8b:20:74:12:
98:cb:37:e6:bb:b0:f2:64:f6:11:d8:7d:eb:64:2d:
7d:97:02:27:7a:08:b2:85:b9:c1:84:6c:59:aa:3b:
71:73:3b:55:95:16:79:56:84:63:df:56:cf:8c:9b:
b2:c9:3b:3f:cb:0f:40:b3:67:80:c6:29:4a:6e:35:
eb:4c:2f:1c:c4:8e:68:fd:4b:68:a0:2c:39:7a:96:
f1:a7:75:89:a7:24:eb:81:79:73:86:4c:fd:5f:62:
57:0a:9f:00:48:7d:1e:6f:36:74:cf:7b:20:50:00:
ec:8b:96:8a:41:3e:e1:0d:87:eb:ea:16:64:f5:d7:
fb:41:11:17:45:e7:a4:ba:6d:19:56:32:89:41:93:
e1:74:84:d7:5a:82:27:a1:7f:c3:45:8f:73:b7:6b:
6c:22:0f:7d:bd:b4:b1:00:e0:5e:b7:45:b8:54:a7:
10:93:14:21:39:58:12:5c:7b:5e:86:d8:9b:1e:7d:
f3:d6:4c:1a:32:cf:75:b4:0e:5b:56:3b:cf:c7:5c:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:63:8D:34:B9:20:86:02:8C:6B:37:43:CC:5C:1E:EF:FA:A4:EB:3D
X509v3 Authority Key Identifier:
keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ec:98:61:50:0b:35:18:61:70:33:f5:9f:e9:e8:a1:32:a5:
8a:09:99:06:3b:84:d3:a1:8f:07:8d:37:5e:de:3f:20:99:36:
66:34:b4:cd:84:9b:55:f3:88:2a:40:1d:9a:95:6b:43:3c:b2:
25:4d:18:b8:98:50:54:24:24:f3:ba:14:e4:ef:e5:dc:e4:f1:
2c:aa:5b:e1:14:1e:4b:d0:ec:e3:bc:51:f8:d9:4f:fa:60:d5:
f5:fa:97:9e:98:a3:a9:41:4b:fc:43:b9:c5:5f:b4:15:75:45:
e2:d5:2f:f1:43:d8:3e:04:66:a8:6a:e2:db:c7:12:3e:0b:71:
0a:03:11:6b:34:88:3f:6c:5d:90:f5:25:5f:df:c8:ab:37:df:
62:68:50:42:39:69:87:90:ce:04:ef:38:23:ba:91:29:db:82:
ec:09:06:fe:57:e5:1f:22:a1:ce:9f:75:0b:5b:86:b7:2a:9c:
f2:dc:01:06:cd:00:e9:89:0b:34:db:49:12:d8:fd:c3:14:33:
4e:95:1a:bb:83:1e:1f:d9:8d:c2:e7:2f:40:de:40:9b:c5:6c:
48:e4:93:02:76:52:b3:2f:72:a0:a0:13:eb:9f:5f:a4:67:4f:
b5:71:72:b4:90:dc:42:1f:22:f5:3a:fd:b8:d7:3e:32:ba:a6:
2c:8b:3a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:50:29 2026 by rpki-client