Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier: +70ShfPRQwoRrI/uX9u6VMH0YF8aKP90H55Nx7TyHK4=
Subject key identifier: 82:74:01:2C:C7:83:D9:CA:A1:0F:B9:77:39:32:F5:FB:C1:8F:4F:2A
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial: 019D2B859578604C73DF4F97A38BCAD4A569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number: 09C7
Signing time: Thu 26 Mar 2026 19:01:07 +0000
Manifest this update: Thu 26 Mar 2026 19:01:07 +0000
Manifest next update: Fri 27 Mar 2026 19:01:07 +0000
Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: bVYulT/lOQzAzKRO4dm2FG7/edbcMBp3Pz2UG/pffnw=)
2: UlZluMg72w3OGQ7yVXSws-uTL0A.roa (hash: ZbBL16EPSfeFJDsY/7W353hLaYPwOpiK4otGlBdRF9Q=)
3: r6bLmGYRXJA6GUfCZnH4ebCbXYU.roa (hash: Q+Z0jJyseu+MqQA03xeTfakfDGrq+7+0HE8bf99rEXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:95:78:60:4c:73:df:4f:97:a3:8b:ca:d4:a5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Validity
Not Before: Mar 26 19:01:07 2026 GMT
Not After : Mar 27 19:01:07 2026 GMT
Subject: CN=8274012cc783d9caa10fb9773932f5fbc18f4f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:13:21:b2:3f:32:5e:55:8a:6e:2e:10:ff:
ad:ec:8c:b4:00:aa:7c:92:96:c1:70:68:32:51:c2:
80:f3:fb:e9:3f:c1:4e:9e:b2:2a:0c:5d:49:bd:1c:
60:3a:8b:bc:b4:82:30:77:9e:52:53:26:10:71:9e:
9f:36:95:39:41:f1:e6:c3:50:ab:2f:3a:b3:42:3f:
64:31:22:a6:42:40:ac:38:1a:7b:65:f3:91:62:35:
bc:04:b8:75:58:d0:00:fa:9b:0e:97:2e:3c:37:0f:
5f:cf:a1:4d:54:f4:98:50:0c:48:4e:18:58:7b:81:
9c:70:71:d8:b3:a9:b8:c0:5f:21:7a:89:8c:67:c9:
ed:ef:1a:2f:a2:d4:e7:1f:45:da:60:cd:0a:88:fe:
50:20:de:74:7c:3b:2d:95:21:0b:d2:a8:d3:d7:b1:
bf:54:fc:63:ec:55:32:94:32:91:d8:90:1c:98:e0:
12:46:b6:7c:46:0e:06:9a:b6:d4:71:53:f7:4c:e8:
00:45:01:7c:6a:c4:96:d1:1c:82:ab:20:02:c5:5e:
c3:d7:09:b3:8d:71:f1:de:6f:f7:6f:04:12:cf:4a:
7b:bb:4c:ef:c8:b6:65:b3:fc:b3:f4:28:26:33:74:
a1:27:f9:31:5a:90:a1:da:ad:77:69:7a:3f:e4:bc:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:74:01:2C:C7:83:D9:CA:A1:0F:B9:77:39:32:F5:FB:C1:8F:4F:2A
X509v3 Authority Key Identifier:
keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3e:9a:39:ae:5b:43:63:20:b7:ec:c5:5e:64:44:79:6e:25:
a2:f0:0c:1b:62:26:aa:ba:90:d5:d4:65:c3:b5:0e:5f:2e:da:
00:6c:e7:0f:f3:58:a9:8d:50:95:d8:13:9f:1b:6c:14:f7:1b:
b4:ae:c8:c8:11:ab:25:0e:96:be:53:d2:c9:74:64:07:f4:7b:
8d:97:54:eb:b7:eb:e1:77:f1:f7:64:ae:54:cf:93:03:50:3b:
31:7f:ba:34:82:6e:ce:73:a3:94:6f:f6:81:7d:03:63:e9:b8:
17:72:7d:21:32:0d:5c:8d:c2:02:85:2b:48:1a:b1:47:13:c4:
33:fc:92:97:0c:0c:09:ca:59:04:34:87:1b:4c:93:20:24:7b:
c7:b9:11:c9:f7:c0:15:97:fa:f3:74:f3:e4:37:c1:50:78:5a:
3b:4a:87:c7:e0:0d:d9:85:02:24:f3:0d:71:4f:b3:8a:98:d7:
c2:45:61:a3:53:fb:22:28:b5:1f:a3:49:ea:42:b4:f2:a2:c8:
ff:92:d3:7b:69:7b:2d:11:01:a6:16:18:06:ec:84:b2:7a:16:
be:94:cf:c2:6e:fc:bd:5b:c3:ac:e3:cd:06:de:0e:fd:4d:7f:
86:e9:b6:53:16:fa:cb:93:ed:ce:92:53:0a:4f:fb:0a:0f:ae:
3a:06:77:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:40:02 2026 by rpki-client