Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: xPBtT2Wv1JiiznZfek0Lb7/GbrFMIfu5JdU1ovXX/A0=
Subject key identifier: 7B:D3:BA:50:23:44:26:B9:C2:F1:D4:F3:50:0B:11:4A:4A:EB:46:87
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 019D2627E0CBAEB7DDE8CCF05A2B624C114B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 100D
Signing time: Wed 25 Mar 2026 18:00:40 +0000
Manifest this update: Wed 25 Mar 2026 18:00:40 +0000
Manifest next update: Thu 26 Mar 2026 18:00:40 +0000
Files and hashes: 1: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (hash: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0=)
2: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: Uj8cKsPyX4rp3TbeFSMOrwTJoYQzby0p3aZMOW44VuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:e0:cb:ae:b7:dd:e8:cc:f0:5a:2b:62:4c:11:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Mar 25 18:00:40 2026 GMT
Not After : Mar 26 18:00:40 2026 GMT
Subject: CN=7bd3ba50234426b9c2f1d4f3500b114a4aeb4687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:92:0b:1c:08:f6:20:dd:7c:c7:b1:7a:ad:4f:
5a:29:aa:4a:2b:cb:39:23:21:71:d1:c8:4a:bf:8f:
d4:aa:de:32:9a:c8:a0:db:33:3f:41:0d:7f:48:c4:
16:28:16:15:4d:40:28:1e:9b:9e:62:02:28:30:52:
be:f0:88:34:24:34:00:d5:25:b0:6d:33:ae:c4:86:
c4:de:93:76:82:d5:3a:b3:70:f7:ba:dc:33:c0:d8:
3e:63:86:81:34:ce:b4:6c:ed:a0:74:bf:9e:97:0b:
24:f5:e3:f9:3c:74:1a:9a:4c:11:f7:f8:fe:88:16:
b9:d3:92:5d:1f:c2:ad:0e:f1:3f:60:2c:e6:b0:f2:
fd:3f:ff:47:55:20:06:91:dc:b1:ca:73:dd:35:96:
cd:9e:24:f6:be:fb:97:73:7b:cb:61:9c:0b:59:96:
f9:5a:98:af:d9:72:ff:84:b8:28:31:ca:9d:80:15:
ad:45:7b:75:f3:3a:87:59:dc:0e:c2:fc:1f:ae:98:
00:9e:87:6d:ca:5a:5d:70:4b:71:90:72:e0:80:f4:
f6:0e:98:8c:b8:f1:ef:fb:cd:c9:fa:1f:7f:a0:89:
ca:03:b3:89:3f:be:ac:05:e8:72:69:70:d8:ce:dc:
51:1e:41:d9:8a:26:8f:71:fe:ac:5c:37:e6:ca:93:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D3:BA:50:23:44:26:B9:C2:F1:D4:F3:50:0B:11:4A:4A:EB:46:87
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1a:83:b9:ca:8e:e1:33:78:e3:dc:f1:1f:80:83:ae:bd:f8:
f8:9a:3b:a5:46:32:61:11:f6:8a:85:73:75:05:43:3b:cf:fe:
b1:2c:a6:fc:24:eb:26:34:71:2c:18:1b:2f:d2:07:27:f7:fc:
37:42:3b:b0:6f:7d:75:14:d2:2b:82:10:bd:66:bd:8c:52:0c:
e6:fd:d1:b8:7c:e1:58:30:9e:43:9b:43:62:06:6f:e5:e7:7a:
bc:cd:63:71:73:f0:98:61:91:61:b3:87:88:96:56:68:87:a4:
c9:b3:8c:68:3e:ce:01:9c:94:25:61:e5:31:ec:18:00:bf:fc:
82:d0:1a:2b:aa:39:02:ce:bb:74:29:ca:32:c2:40:1d:7a:cd:
1a:76:ff:8b:a8:75:88:48:20:76:a0:ff:9d:40:a2:47:ca:53:
3f:26:0e:7c:2c:18:c0:ea:e6:b3:31:c5:82:cc:79:7d:18:ec:
7e:18:a8:8e:b3:e2:f3:3a:4c:65:e6:f1:55:22:4f:05:8c:a7:
e8:63:b4:58:87:de:b5:f4:b7:ed:bd:1e:44:eb:ce:2e:16:2c:
a4:c1:7c:c9:b8:89:8e:df:5f:99:b0:d1:44:b6:1f:fc:98:cf:
be:c1:51:3e:c6:26:0e:66:9b:55:26:cd:6a:ae:87:ac:91:ca:
ad:60:73:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:45 2026 by rpki-client