Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier: BiPuJDCTf2FPrGA66cO5S1kcommCKUcStr4jZGwj6Z0=
Subject key identifier: 7F:F3:1D:76:55:FC:87:2A:EB:51:5B:59:43:73:74:BE:A2:F6:B4:9F
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 019D28BB88B4CD88406587B4EE39797F601C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 06:01:11 +0000
Manifest this update: Thu 26 Mar 2026 06:01:11 +0000
Manifest next update: Fri 27 Mar 2026 06:01:11 +0000
Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: GXAR1OWyYvjrS3NUm+hh7IFdVtKL28foVeXPfeIBXxQ=)
2: RwU9zWthyfSOUWuvsWlsVhpMbmQ.roa (hash: 74TavDCjufR6GUNTwdp6AJnNFnxix31gx+8KWS5C2g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:88:b4:cd:88:40:65:87:b4:ee:39:79:7f:60:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: Mar 26 06:01:11 2026 GMT
Not After : Mar 27 06:01:11 2026 GMT
Subject: CN=7ff31d7655fc872aeb515b59437374bea2f6b49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:81:b5:ef:56:4b:cf:72:10:03:f7:32:0b:
ef:f8:e0:a1:2d:5a:aa:c2:d3:05:61:d8:14:26:5d:
68:4b:97:74:ef:83:c7:e5:a2:34:9f:7c:6f:b9:48:
65:d2:36:8d:a7:53:de:92:9b:87:0e:df:6b:07:27:
a7:48:d2:9c:20:68:09:a6:19:14:80:58:29:f9:3c:
6f:20:c6:ee:be:b3:52:c1:d2:fd:0b:15:bb:de:4d:
c3:84:2d:72:11:e4:27:93:0f:b6:ff:9c:5a:16:fb:
60:74:ce:22:ce:c7:50:d8:00:46:77:35:c0:c7:2f:
88:9f:0c:fe:57:2e:7f:a9:9a:49:c5:73:02:5e:f1:
8d:d1:4d:21:87:a1:8d:2e:dd:1b:aa:9a:ac:a6:2a:
8b:c4:99:07:a6:c2:4d:e0:cf:be:9f:ec:d0:ae:c5:
8a:f9:dd:0e:eb:61:4a:9b:45:ca:f2:52:39:f1:76:
16:2f:3f:87:43:87:56:5b:a2:8c:fc:10:d3:fc:48:
ce:1e:db:1c:ab:c2:be:ea:a5:84:fe:c4:ef:19:41:
f5:f7:c7:11:9c:c2:5f:4d:32:e5:09:ee:0f:b9:fe:
52:0b:8e:46:36:76:44:07:a8:1e:77:fd:d3:68:8f:
80:ce:ff:d2:c8:1d:fa:0c:cd:17:92:11:46:67:a9:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F3:1D:76:55:FC:87:2A:EB:51:5B:59:43:73:74:BE:A2:F6:B4:9F
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2c:0e:51:13:59:c8:4a:26:75:93:33:01:3c:e8:45:97:4d:
da:ed:47:1a:92:66:35:89:ef:09:9a:d1:8d:81:7b:67:30:47:
22:e5:2b:a7:e5:16:09:a6:20:f7:cd:f4:58:eb:78:bb:00:92:
ed:a5:72:8e:5a:ed:8d:a9:ad:a5:05:7f:2e:e7:e7:fe:d2:d5:
e3:00:51:bc:89:5c:bb:40:32:0c:11:53:02:f4:f4:12:e1:72:
c5:65:00:b3:8f:36:83:18:47:25:da:73:60:c7:22:ae:32:d3:
5b:09:55:4d:28:a9:69:4e:94:06:be:66:f8:98:04:f0:53:57:
0b:5c:c3:63:41:ac:ea:23:2d:8d:a4:13:e0:60:1d:44:3b:ab:
9c:4c:9d:b2:12:92:93:c9:ea:7a:86:65:df:14:cb:91:24:3a:
ae:ae:e1:9d:31:b1:35:51:ba:90:57:82:46:26:17:65:a6:d3:
08:2e:bf:65:22:15:62:c8:56:9f:b3:44:72:23:45:32:1e:c9:
f9:65:0a:73:63:f1:81:fe:1a:ff:15:77:b1:64:12:2d:53:b7:
6c:05:25:c4:e5:64:12:02:80:d1:81:18:cd:cc:fd:e8:7c:dc:
f9:69:af:5c:47:f4:c6:e1:3f:e2:fe:0b:95:af:21:9f:c6:c1:
97:3b:e6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:39 2026 by rpki-client