Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
File: 7v5LdSmMAHIB5xyAalyMCee3dBE.mft (raw, json)
Hash identifier: daCc6iQXnizRzBOz9Qd0CAWjiS88Ib7p0JGeRN6z584=
Subject key identifier: C8:8F:BA:6D:11:F5:AE:FF:52:3C:FF:E9:0C:CF:FF:C3:E7:8B:E8:1C
Authority key identifier: EE:FE:4B:75:29:8C:00:72:01:E7:1C:80:6A:5C:8C:09:E7:B7:74:11
Certificate issuer: /CN=eefe4b75298c007201e71c806a5c8c09e7b77411
Certificate serial: 019D28BB0BB0D7D59FBCA182643D25EC9F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
Manifest number: 01B3
Signing time: Thu 26 Mar 2026 06:00:39 +0000
Manifest this update: Thu 26 Mar 2026 06:00:39 +0000
Manifest next update: Fri 27 Mar 2026 06:00:39 +0000
Files and hashes: 1: 7v5LdSmMAHIB5xyAalyMCee3dBE.crl (hash: RVDE49UKLa7RgwivRgJL0cOyRpwx73As3EVIwtwIG4Q=)
2: kSMT1dhlyUE_bz-1S4dIcztetw4.roa (hash: F9u5h4O+BQwPhg0+/A9rPBdp4O6XTcDk1n4Wko8CaAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:0b:b0:d7:d5:9f:bc:a1:82:64:3d:25:ec:9f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefe4b75298c007201e71c806a5c8c09e7b77411
Validity
Not Before: Mar 26 06:00:39 2026 GMT
Not After : Mar 27 06:00:39 2026 GMT
Subject: CN=c88fba6d11f5aeff523cffe90ccfffc3e78be81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e9:14:60:67:17:7f:90:6b:4a:1c:9a:54:fa:
4e:d1:7a:90:a0:d7:72:1a:ed:e5:f8:2a:a3:e9:b2:
1e:e8:e0:7c:66:95:30:fb:08:5f:5e:fc:be:57:fa:
ac:b3:3e:26:01:96:0b:da:76:f4:9c:6c:4c:c5:09:
b6:a0:19:e9:cf:5c:3b:bb:9d:ca:12:b6:b6:6d:b2:
05:5a:07:f3:25:d4:e1:d9:2a:7a:8a:3d:a2:c0:6a:
aa:99:a5:a1:c9:fe:c5:cb:87:c3:7b:43:b1:47:91:
76:4e:55:72:d4:d5:e9:50:1c:7e:55:3d:a7:d3:bc:
47:54:ff:61:bc:34:72:7c:a4:ff:fe:19:fd:8f:4d:
f0:d2:45:f4:75:e4:fb:37:1f:e7:25:23:10:a2:6d:
3c:0a:4c:1c:7d:e6:0c:16:85:04:30:fa:b5:87:15:
ec:15:84:ac:4e:86:7c:e5:82:8d:63:43:f0:07:dd:
80:9c:86:d6:bf:88:8a:fb:60:88:7c:00:4c:0a:0b:
ba:20:16:af:c8:56:9c:f4:a7:34:39:9f:c8:4b:85:
9c:2c:8a:1c:f3:f9:61:9e:44:5a:5e:ef:14:90:73:
ab:4e:da:2d:0d:f5:57:08:a1:da:47:95:f8:40:95:
8d:2b:56:af:a8:80:0f:04:69:ec:47:39:b1:9c:c0:
e1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8F:BA:6D:11:F5:AE:FF:52:3C:FF:E9:0C:CF:FF:C3:E7:8B:E8:1C
X509v3 Authority Key Identifier:
keyid:EE:FE:4B:75:29:8C:00:72:01:E7:1C:80:6A:5C:8C:09:E7:B7:74:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fa:da:8b:72:3a:e3:41:e3:58:a5:d0:17:92:96:ad:d2:2c:
9d:89:8c:06:49:b3:f1:0c:52:75:e6:1e:55:e3:b0:ce:04:9c:
aa:5f:b6:3f:b1:a3:48:40:e9:26:db:3b:78:8e:ed:c8:b7:bd:
32:ba:cd:61:41:b9:2d:4a:3d:43:62:83:f2:65:fb:30:19:40:
9b:f5:37:1a:a6:ba:72:8a:cf:a5:4d:51:4a:be:bc:0e:14:51:
5e:ef:7d:3a:72:df:86:f9:16:ba:1e:bc:ce:fe:9e:bc:ce:f0:
f5:d8:95:a2:9c:17:d8:43:d4:39:03:2f:25:f1:2e:02:36:ea:
26:58:fe:2b:ec:05:87:72:10:cc:4a:81:10:a3:d2:18:7f:e2:
95:67:ec:f1:28:32:c2:14:65:b8:9e:db:1d:e5:d4:7a:ec:a5:
df:c3:73:f1:56:25:c5:94:95:ff:b3:ed:7b:2a:6d:d9:64:67:
5a:0e:0a:af:08:a8:7e:94:9a:4e:65:51:55:6e:13:e8:48:89:
0f:a1:39:01:f7:82:02:5b:f1:a4:4c:eb:6d:55:6f:ec:e0:fa:
83:1d:45:1b:91:d5:55:d0:29:ac:ff:65:19:b1:66:6d:95:1d:
f0:d2:5a:84:a0:4a:d9:1d:bb:a7:b4:c5:98:2b:ea:09:dc:6d:
7a:f6:4e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:00 2026 by rpki-client