Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File: 7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier: YlWYc30EabaYSy40KF3B4DgH4UaA+Esuq/uYgLRbKJU=
Subject key identifier: D2:CA:61:BE:47:BD:71:EA:32:5D:E3:41:E0:02:40:10:8E:9B:BE:1F
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 019D26966A2EE9CA74D1837CCB6C97D00B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number: 1583
Signing time: Wed 25 Mar 2026 20:01:24 +0000
Manifest this update: Wed 25 Mar 2026 20:01:24 +0000
Manifest next update: Thu 26 Mar 2026 20:01:24 +0000
Files and hashes: 1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: 5NtIADJ8tluFCq5zqv51bD36v41hUNiQ2wuAnEtpAhQ=)
2: 80dI9feXzE2T2t1bf2lPrI9UTCM.roa (hash: Q8e0O49tibA3BkTmL30HyVvrm1M+ka9VvoTMNCf2EJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:6a:2e:e9:ca:74:d1:83:7c:cb:6c:97:d0:0b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: Mar 25 20:01:24 2026 GMT
Not After : Mar 26 20:01:24 2026 GMT
Subject: CN=d2ca61be47bd71ea325de341e00240108e9bbe1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:f3:26:cf:e6:8c:8e:de:01:1a:b8:09:55:
82:d0:31:81:8c:30:a6:cd:7f:ea:d6:07:56:6e:84:
d1:65:54:5e:a5:2a:f5:07:79:8e:23:fd:88:8e:3e:
b9:8a:1a:38:4f:e7:74:d8:34:ee:a2:5e:d7:93:6d:
16:6d:50:41:31:11:5c:b9:e7:b0:6a:91:ac:20:32:
38:4f:cb:40:99:00:fe:be:88:e8:b9:ea:21:da:c5:
06:ba:3d:12:ba:5c:c8:a0:33:ce:23:34:9b:b1:65:
a4:8d:12:63:e4:e4:48:fe:bc:a2:31:d2:6e:0e:8a:
15:e5:a5:8d:a2:c4:b5:cd:10:42:10:c5:6f:9f:ce:
80:02:d7:d3:64:50:c6:44:32:e6:5f:b4:ec:6b:f3:
fd:cf:78:af:99:b5:20:92:57:24:f6:77:6c:15:f1:
9c:f2:db:cd:5d:8e:ed:44:27:34:ed:fe:29:77:ee:
cc:50:d5:be:0b:34:64:8c:17:c0:fb:f0:97:59:e7:
58:66:3b:15:09:55:3d:c1:84:c0:19:00:35:28:ba:
03:4e:60:14:19:c9:b1:ae:be:2b:7d:fe:39:30:00:
43:93:95:fa:72:d4:81:9e:01:ea:04:55:aa:2d:e3:
a0:75:12:ff:e9:49:b9:ce:6d:c0:c4:f6:fc:97:46:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CA:61:BE:47:BD:71:EA:32:5D:E3:41:E0:02:40:10:8E:9B:BE:1F
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:be:36:31:b8:b2:bd:b6:0e:71:6d:9c:d1:32:d9:7c:41:96:
18:8e:4e:73:d7:eb:f5:c7:66:8d:aa:d1:b2:9c:f2:f5:60:7c:
60:77:21:df:84:db:c2:a0:ae:e1:08:89:72:98:eb:a5:34:c1:
30:80:9e:4f:83:52:06:d3:d8:b0:0a:51:28:3f:c3:a9:ae:79:
a4:c0:34:db:7e:da:a5:6b:ad:a9:f9:15:ce:aa:66:ee:42:e5:
c5:7e:df:0e:e3:c8:ff:04:08:c7:9e:e3:39:fb:2e:dd:48:1a:
3b:8c:c0:75:95:cc:24:65:12:ae:d9:7c:88:1f:74:cc:68:bd:
d3:30:4a:bf:91:b5:f3:2b:c7:b9:3d:94:48:7b:e6:84:40:d1:
f1:ce:ea:03:ab:9e:61:88:9d:e2:3f:82:95:f8:fc:0f:31:38:
9d:a2:9d:bf:ee:3a:03:63:96:dd:6d:86:78:8c:70:38:48:97:
98:8f:d9:03:27:9f:4a:87:68:68:c3:a1:f1:85:0f:68:f0:7e:
84:8f:94:1e:f5:5d:24:71:15:07:47:75:f0:07:de:91:ed:d3:
09:b6:d8:30:d0:c1:a2:1b:a7:43:d9:10:cd:a8:cd:06:2d:5b:
53:2c:3d:0a:f4:f2:83:df:77:cd:c7:bd:eb:ff:79:86:6c:77:
35:11:6b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:47 2026 by rpki-client