Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier: 6VPvCoarjnjzbyOKnYRGSUP0FR9ZnyCNsswqc+Z6SIc=
Subject key identifier: E2:95:F9:F0:47:B3:C1:BA:CD:AC:13:09:9B:C2:50:67:9C:5C:BE:4E
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 019D2884D398FAD4976E9EACD7654290801A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number: 0F48
Signing time: Thu 26 Mar 2026 05:01:26 +0000
Manifest this update: Thu 26 Mar 2026 05:01:26 +0000
Manifest next update: Fri 27 Mar 2026 05:01:26 +0000
Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: xwh9sPWP+YFNu/jHwSMgwJagYQ+ooXntSKO0R9KgZlo=)
2: P24w_jLhUQYot-hYm7zVBeSYmLE.roa (hash: PHPMkNKEzzvlTlm3p3Tx5ImcestRuod2cI9K8iRdJC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d3:98:fa:d4:97:6e:9e:ac:d7:65:42:90:80:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: Mar 26 05:01:26 2026 GMT
Not After : Mar 27 05:01:26 2026 GMT
Subject: CN=e295f9f047b3c1bacdac13099bc250679c5cbe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:47:44:51:11:cd:ca:8d:d6:a3:5f:d0:fc:
01:77:41:1b:d6:58:f3:36:2b:ca:16:2b:cf:24:04:
69:2e:2d:14:25:40:a2:34:f6:d5:fb:18:a1:b4:db:
c8:34:08:c3:94:39:98:c2:4d:63:89:60:3f:b0:3b:
cd:6b:f2:98:c3:99:e5:e7:79:96:ba:15:9d:d4:ca:
cf:37:b3:b2:90:9b:82:90:6b:74:fd:30:75:ad:83:
0a:4a:db:fe:f3:79:95:62:fe:1f:5c:0c:3d:89:65:
9b:dd:58:0f:c8:a1:07:86:10:4c:3b:9b:90:8c:b5:
e8:88:45:a1:34:0e:95:82:7d:34:c7:d3:99:52:43:
e2:98:b3:c7:9b:4b:33:c4:d4:c7:ea:13:15:74:d8:
a0:91:18:4e:49:be:1d:2a:6a:aa:70:58:70:0e:15:
80:28:1c:b6:c0:b6:01:c5:a5:ca:f6:df:a7:ed:1b:
6b:db:ff:27:ce:98:5b:0f:a1:28:fd:a4:25:61:d4:
67:a9:55:7c:8f:a1:24:01:82:0a:8f:e0:91:25:72:
f2:10:74:7c:0e:96:5e:cd:94:d0:7f:ee:89:aa:f6:
d9:5f:e8:f5:5f:bc:21:21:3e:de:5b:73:42:bc:b2:
b5:20:03:4a:ad:0e:bf:47:23:ab:fb:2b:c3:95:f1:
7b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:95:F9:F0:47:B3:C1:BA:CD:AC:13:09:9B:C2:50:67:9C:5C:BE:4E
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c2:71:64:40:62:12:45:d3:58:cb:39:7f:5c:4b:4e:ae:80:
7d:c5:c6:9c:87:7e:d5:6f:ae:7c:0d:ea:6e:dd:4b:dc:90:5c:
c4:e6:06:81:1b:6c:72:10:04:89:0e:78:57:ab:6d:27:f9:2d:
c4:1a:49:89:2e:5d:cb:0c:dc:3e:d8:8d:06:63:c7:36:4e:f6:
9a:92:fe:57:0b:66:23:5a:f5:25:bf:29:29:24:96:d0:68:b1:
aa:7f:9a:df:eb:40:e3:e0:81:d1:6f:86:c4:90:0e:39:01:52:
dd:05:c2:84:68:43:38:d0:07:4f:47:5b:8c:55:e2:d8:2f:4b:
b1:ca:20:01:e3:42:cf:2b:67:f8:64:3c:3e:57:e7:4d:51:23:
a2:54:52:3d:89:58:c7:57:09:5a:cc:b0:70:a7:b2:f4:2f:6c:
57:52:57:2d:e7:eb:bb:1f:bb:2e:d4:8e:cc:a7:7f:fd:75:09:
01:64:e8:e0:e8:ef:d8:df:02:fd:fd:db:33:49:eb:39:e8:02:
8f:48:9b:70:b2:11:4b:a1:a9:c9:29:94:a3:75:d5:1f:fd:95:
15:16:ac:4c:d1:3b:04:3a:0a:cd:7b:39:9a:e5:78:01:9a:07:
13:2a:ea:33:a9:b1:4a:98:dc:4d:0c:bb:f7:b9:3a:cf:01:54:
9a:b1:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:13 2026 by rpki-client