Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier: XQslmNxwGxL7+za+QrFRY4cdJoABBKxjzHjlm7ApzcU=
Subject key identifier: ED:9F:49:81:6C:19:DD:5B:74:24:51:AB:E4:57:B9:F2:72:25:F2:EF
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial: 019D28F27B004172EB7A455B774AE21F227B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 07:01:12 +0000
Manifest this update: Thu 26 Mar 2026 07:01:12 +0000
Manifest next update: Fri 27 Mar 2026 07:01:12 +0000
Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: wlOjDjarVsfTHzn31JrcjQqlUlbdgr/FXKD8Z0xQCWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:7b:00:41:72:eb:7a:45:5b:77:4a:e2:1f:22:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Validity
Not Before: Mar 26 07:01:12 2026 GMT
Not After : Mar 27 07:01:12 2026 GMT
Subject: CN=ed9f49816c19dd5b742451abe457b9f27225f2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6b:fc:97:28:bf:5e:bc:67:4e:7c:d9:2b:b8:
85:dd:bc:8f:bf:75:4d:2a:a5:cd:88:d1:1c:ba:14:
50:a2:21:15:dd:cf:17:96:de:36:a3:8f:e6:11:22:
49:cc:e9:2d:be:a5:d3:4d:d0:bc:c0:d5:03:86:44:
5a:5a:0e:c7:32:f6:eb:42:93:ed:0a:1e:d3:91:09:
e0:05:51:af:57:af:e9:95:5b:4d:d6:01:61:ab:39:
62:0e:2f:95:4f:1f:f8:ee:12:e7:c4:e9:cb:33:51:
e9:d8:59:d5:c7:52:2f:ea:1b:4f:7a:0f:24:a7:2b:
2e:a6:e3:20:4d:6b:25:74:86:4e:eb:d8:3b:25:1d:
27:80:39:8e:e9:35:c5:38:50:60:75:b8:92:dc:98:
25:8d:3d:78:50:7a:55:c0:d5:1d:35:da:f7:7a:b1:
c1:ea:ca:1b:4d:02:48:c7:a9:cd:84:1c:98:46:05:
0e:af:2d:f0:ae:78:02:6f:8d:7b:81:e0:fc:38:05:
3b:2d:42:9d:74:da:d4:5c:4f:8e:88:62:8d:46:6e:
68:0d:8a:11:32:a3:0f:a4:36:3b:be:43:a1:aa:fc:
28:51:b2:6f:80:d5:a7:ad:d4:1d:21:06:91:38:61:
3e:48:ca:c5:f9:2d:78:85:b6:00:f6:5b:f4:a1:4a:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9F:49:81:6C:19:DD:5B:74:24:51:AB:E4:57:B9:F2:72:25:F2:EF
X509v3 Authority Key Identifier:
keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0f:22:af:f5:4c:67:8f:7f:95:79:ab:b9:3e:ff:e9:0a:5a:
9d:a2:69:10:1f:b5:e2:40:a9:ab:83:37:a2:28:55:b5:f3:5a:
b7:00:a1:2d:de:75:3f:e7:6e:f6:15:1f:6f:07:c7:f9:04:8c:
e3:e1:02:35:e5:9b:c7:48:4a:45:bd:c5:2e:9d:c2:73:54:72:
a8:d4:52:9a:95:5b:75:8d:e0:23:e6:2f:c4:1f:57:c6:48:d3:
e1:fe:8e:ed:45:89:79:2e:9a:03:81:32:99:15:69:74:66:a9:
5e:5c:df:56:a3:2d:fc:e4:cd:f9:e8:11:f9:2f:d9:3d:8e:6d:
f7:48:72:8a:43:45:de:65:4d:58:b6:99:a9:f5:98:cf:13:e1:
2f:1b:10:16:d9:b4:ee:5a:17:5f:24:ff:f4:86:c3:b9:25:97:
4e:c0:a7:18:2b:15:cf:60:07:46:98:00:8e:1b:61:0f:f1:bb:
d2:86:4b:ee:9e:15:3c:95:25:46:f7:ba:0f:e0:87:44:8b:fb:
53:37:e1:48:2d:c0:41:f4:0a:7f:5c:63:1f:25:cd:e6:36:12:
f0:69:ed:99:97:3c:9e:7a:e0:07:c4:f6:c8:14:27:35:ed:0c:
4a:e7:78:89:81:aa:89:3d:cf:a9:34:72:cb:25:5e:ba:66:d5:
31:9d:01:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:31 2026 by rpki-client