Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier: rRASbdwAWGRtyYRIQVgbKCuVOkcIXC+oijdT3hU9k54=
Subject key identifier: 22:C8:C3:92:A3:F1:CD:69:A7:0C:B9:3E:25:21:39:69:C2:63:7C:47
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer: /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial: 019D2703CD609659415B67B795A479682400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 22:00:53 +0000
Manifest this update: Wed 25 Mar 2026 22:00:53 +0000
Manifest next update: Thu 26 Mar 2026 22:00:53 +0000
Files and hashes: 1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: ISyLU19oMkVs4890WFrbaObDpuGya8rOF+SiYa0A6d8=)
2: oqgwVvgO4WobvG_o2YvqXL-ZxrA.roa (hash: qgN0ZwFa85gMlSMo8H+ZBEVFv906WUNJ1MUKTtcyf+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:cd:60:96:59:41:5b:67:b7:95:a4:79:68:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Validity
Not Before: Mar 25 22:00:53 2026 GMT
Not After : Mar 26 22:00:53 2026 GMT
Subject: CN=22c8c392a3f1cd69a70cb93e25213969c2637c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:ab:b0:22:70:a3:03:c5:ad:5e:ca:e9:72:
9d:7e:87:53:02:f1:62:6d:eb:f6:ab:34:19:18:1f:
04:6b:ae:99:a6:db:de:51:91:58:9b:cb:46:70:bf:
8e:5c:89:33:c5:4a:a1:02:42:05:9b:3f:80:6b:55:
70:5b:cd:e2:66:a9:e9:8b:e5:cc:ad:05:9e:e1:82:
c6:61:fa:9f:2c:dc:82:87:e9:40:ca:d2:92:23:34:
d9:d1:5c:94:a4:14:48:29:0f:98:7f:68:c1:a4:27:
07:5b:58:fe:06:ec:7d:c3:7d:2b:ff:f9:fd:bd:5f:
25:25:98:29:56:ea:2d:63:57:ac:b9:c8:c8:4f:2f:
19:4f:a7:ba:68:c3:62:35:cd:0d:a1:d7:49:b3:85:
79:9c:41:3b:51:02:32:17:40:c4:b7:06:30:4d:e6:
a2:f6:4a:d0:11:03:fc:65:9a:87:e1:ba:dd:49:e2:
6b:8d:c8:54:7f:70:45:4c:d1:8b:d5:7f:1a:5b:7d:
92:50:89:28:c3:3d:1b:4d:6c:54:db:70:e3:8b:30:
4e:77:87:d9:5a:ad:f8:32:2a:99:ce:2c:48:98:8e:
aa:96:cf:c8:9f:2f:d2:0f:c6:50:09:be:ff:4d:9b:
ee:e5:fe:67:17:6e:ba:de:92:b2:96:35:1a:f5:82:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C8:C3:92:A3:F1:CD:69:A7:0C:B9:3E:25:21:39:69:C2:63:7C:47
X509v3 Authority Key Identifier:
keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4b:38:2e:9d:af:74:00:95:33:82:fe:b2:77:77:70:be:d2:
a5:51:61:0b:51:39:04:fa:55:5e:d5:a9:13:92:80:66:3f:69:
f4:b3:aa:21:49:40:63:a5:01:df:8b:99:db:d6:0c:9d:26:cb:
b1:7e:16:39:11:85:dd:e0:70:69:0a:2f:a0:e1:e6:6e:df:b1:
5a:31:ea:60:ff:b5:ec:51:71:c2:84:89:58:65:41:5e:84:86:
f9:6c:19:66:a7:43:3e:17:dd:c2:53:88:37:24:c7:49:42:cc:
a6:aa:08:70:81:47:15:44:30:8f:23:7c:f3:79:49:9c:25:34:
56:42:fe:3a:c6:4e:49:c7:f3:ee:66:f0:55:c9:64:17:c1:75:
c5:06:84:20:8d:a3:df:12:d8:e5:20:cc:86:86:ad:a5:c0:97:
42:f2:4a:b8:73:47:bb:fd:18:2a:eb:b3:37:16:15:39:81:c5:
02:e0:42:dd:8e:85:cb:f4:03:c2:22:56:41:a8:61:83:67:78:
df:81:4e:be:29:de:04:00:8e:c8:74:9b:cd:39:bb:00:e6:ef:
b7:00:03:63:04:89:f3:48:a2:79:93:fe:58:65:af:1c:31:2c:
03:5c:98:1f:41:37:65:60:ab:23:c8:ea:c9:53:2b:3a:79:34:
1a:d5:0b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:49:12 2026 by rpki-client