Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier: dIRHak5odhIa4XjG8Kua264F7KZdmYDTthy8bge4AP0=
Subject key identifier: EB:8F:31:BA:CF:6F:AD:99:F2:7C:8D:67:D8:D8:E8:BC:BA:BA:D0:CA
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial: 019D2AE104614B26E31DA6BBE89060EC888B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number: 04E9
Signing time: Thu 26 Mar 2026 16:01:22 +0000
Manifest this update: Thu 26 Mar 2026 16:01:22 +0000
Manifest next update: Fri 27 Mar 2026 16:01:22 +0000
Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: JZ9AvACoMCrKH/Xaxs+fJLqtEsxZTa5VndIdBevTzSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:04:61:4b:26:e3:1d:a6:bb:e8:90:60:ec:88:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Validity
Not Before: Mar 26 16:01:22 2026 GMT
Not After : Mar 27 16:01:22 2026 GMT
Subject: CN=eb8f31bacf6fad99f27c8d67d8d8e8bcbabad0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e3:55:23:42:70:46:3c:d3:67:23:ef:b2:23:
3f:1c:c7:dd:28:ee:93:b2:ec:1a:e5:19:6c:5e:d0:
2d:62:92:35:dc:96:33:0e:60:c6:7d:21:dd:7f:d0:
c1:00:46:fb:b5:42:5e:e5:8c:3c:07:8f:1a:fa:25:
1f:0b:35:37:81:d9:c0:92:d8:d7:c8:27:cf:a1:9e:
44:94:25:6c:22:8f:42:7c:3e:af:c9:ae:bd:b4:f8:
fa:17:ca:7e:f9:f2:04:e3:c6:ed:b7:82:71:f6:3f:
5d:72:f2:90:7b:1c:0d:33:02:3f:d1:56:1b:7c:1c:
f3:70:83:2a:3c:88:31:f3:3a:00:cd:83:d6:d0:43:
17:be:f6:95:72:df:ce:2f:ba:57:5f:8e:f6:fc:20:
71:78:84:90:a9:3d:39:3f:2d:8b:70:71:15:d2:8e:
a2:da:91:02:27:8b:c7:f1:8e:dd:d9:54:2f:55:39:
6b:04:25:17:38:97:c7:3b:75:00:f3:2e:d4:b7:cf:
06:5c:6a:af:70:c7:0d:6b:a9:09:c7:70:da:5c:f4:
f4:5f:a6:34:f3:e4:f5:ca:a7:77:d9:b7:91:fc:56:
e1:a7:d9:ca:f5:b9:4c:70:ee:21:56:74:22:23:7f:
26:3f:a5:1a:02:b0:bd:04:3b:b8:2d:ff:37:14:79:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8F:31:BA:CF:6F:AD:99:F2:7C:8D:67:D8:D8:E8:BC:BA:BA:D0:CA
X509v3 Authority Key Identifier:
keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b6:e6:d7:39:9a:b9:7f:65:aa:c9:2a:d1:1a:c0:df:30:a4:
6f:e5:5d:b8:04:24:e9:d0:3e:ae:81:1d:fc:32:19:ea:bb:66:
3d:c2:2c:e9:85:4a:51:fa:4c:31:01:7a:e3:34:82:6d:30:ef:
13:a1:5c:0c:75:5c:91:aa:f9:fc:01:18:de:90:d8:73:98:2b:
2c:8a:cb:4b:fe:f7:63:6b:64:39:5a:fe:80:ed:df:cc:33:c5:
09:f0:d7:0b:03:c5:16:c4:d0:ab:e7:0f:a2:56:b6:ac:aa:f6:
2c:17:77:62:3e:91:d6:51:3b:fc:d6:e0:bc:5e:d7:eb:ea:d6:
fa:19:16:37:55:79:b7:64:1f:77:7b:db:62:36:0b:35:48:4d:
df:4b:ae:a5:38:5e:f9:d1:57:e6:dd:e8:f6:e2:88:f2:0e:ea:
4b:40:82:5b:3a:74:8d:40:3a:61:cc:29:b9:c3:cf:9a:04:e8:
d7:e4:f4:4f:39:d2:de:db:c1:c5:bf:ed:a1:92:54:c7:a9:3e:
3c:6d:ae:ef:5b:70:9c:42:03:ba:d4:80:79:e6:b1:ba:a6:07:
0d:98:0e:e3:cf:6e:89:e3:e9:2c:2a:3a:2d:cc:0a:ec:d3:76:
f1:34:00:9f:e3:80:7c:25:53:df:b6:b1:61:99:06:16:0e:d6:
0d:0e:39:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:18 2026 by rpki-client