Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
File: 7nwowZyp0nBozrxpyBVBZ13BLN8.mft (raw, json)
Hash identifier: j1YrNF9eoJPb9pcWIOreYO+/OuGSguehwnfVeXeo0iU=
Subject key identifier: 3B:3B:48:05:62:EB:60:92:DC:0F:57:A7:F7:05:D8:87:C2:D9:64:44
Authority key identifier: EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
Certificate issuer: /CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Certificate serial: 019D2703AFAA4AE17A617B3D76588B72739B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:00:46 +0000
Manifest this update: Wed 25 Mar 2026 22:00:46 +0000
Manifest next update: Thu 26 Mar 2026 22:00:46 +0000
Files and hashes: 1: 7nwowZyp0nBozrxpyBVBZ13BLN8.crl (hash: zGlEcOscqJWL0XhXMV/59oxQ0CSvACLRNgnV/atS+ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:af:aa:4a:e1:7a:61:7b:3d:76:58:8b:72:73:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Validity
Not Before: Mar 25 22:00:46 2026 GMT
Not After : Mar 26 22:00:46 2026 GMT
Subject: CN=3b3b480562eb6092dc0f57a7f705d887c2d96444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:44:f2:f4:24:d6:14:4b:d1:57:51:9f:3b:c6:
82:df:31:44:77:e5:b5:44:9f:d8:dd:8b:6b:c6:c8:
a1:8b:1d:27:65:db:a0:e9:09:9c:dd:60:be:32:c6:
c2:6a:50:0f:c9:b5:5f:4f:30:d3:8f:3e:ca:cc:f1:
73:04:53:36:f7:40:0b:74:ec:a9:5f:15:bb:87:4e:
84:95:43:61:6f:c7:91:4e:10:40:31:50:48:43:4c:
d7:ee:f4:23:a3:11:36:6c:51:89:b0:1e:10:14:55:
14:e4:de:4c:a9:9e:4d:6b:60:23:a5:08:55:d1:86:
f0:cc:50:c5:49:6c:b4:93:cc:ad:4f:0b:89:1a:de:
e3:98:1a:c4:2e:d0:db:f5:56:ff:5c:11:a2:41:b2:
20:f8:5d:5d:12:77:61:99:19:f2:eb:2f:38:b6:60:
3f:cf:ac:d5:f1:c4:44:4b:a0:ad:5f:9d:d2:d3:53:
ce:18:33:24:ed:a6:51:c4:4f:e8:65:73:d0:40:93:
1c:f5:f5:82:63:de:cb:e6:ce:60:3a:0c:a3:8a:6d:
f9:22:75:94:fe:09:99:5a:80:98:70:6a:07:ac:52:
3f:31:11:df:a4:3a:89:62:03:38:72:11:cc:6c:d4:
23:50:d8:54:6a:0d:a5:fc:29:20:8b:2c:80:e6:13:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3B:48:05:62:EB:60:92:DC:0F:57:A7:F7:05:D8:87:C2:D9:64:44
X509v3 Authority Key Identifier:
keyid:EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:77:6a:c0:fb:8f:ba:b3:c8:36:80:81:e4:e4:76:22:42:66:
79:03:b8:b4:e5:45:10:15:32:d5:c7:42:88:9a:2a:f2:bb:c0:
1c:09:4a:c5:18:7f:6b:5a:d0:6a:70:26:d0:b1:6e:13:11:8b:
a2:6e:23:0a:31:d8:c6:0a:01:ee:d4:64:33:9a:a7:61:17:fb:
d1:fc:8f:fb:c8:5b:bf:7b:89:14:fd:4d:8c:a4:39:00:32:d6:
c4:aa:d0:19:7a:5c:dd:94:06:46:b2:4f:bb:81:3d:ab:9e:80:
39:7d:e0:4b:1d:32:9d:b8:3f:25:3b:69:4f:8e:2f:37:d7:f5:
b0:cd:3b:a9:59:a1:c8:a9:1f:53:49:a7:f2:16:5e:f1:06:da:
65:0f:46:b9:36:11:6d:88:1c:e3:a9:a0:cd:d6:6c:1f:2e:c0:
56:c3:6c:14:f4:a4:e3:50:cf:0f:39:00:d8:e4:be:fe:42:8a:
eb:21:7b:bd:12:7f:e1:d9:6e:53:00:25:1c:d7:88:7f:7d:c7:
8d:fb:bf:68:de:2d:55:07:63:fa:a8:2d:86:73:94:a3:cd:78:
c6:9e:f9:25:55:af:35:00:07:f4:75:32:6c:55:c0:1a:0c:58:
78:e5:61:a6:cd:b3:0b:01:c7:eb:13:ab:d2:e6:3d:53:ab:ca:
62:bb:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:42 2026 by rpki-client