Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: bVPQtIf+TkMCVciEUxTsXBKHXyY5hwdkWsulJukqJGs=
Subject key identifier: D6:A6:43:1C:29:45:57:04:8A:28:C0:63:E8:E7:84:B2:33:23:C0:AC
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 019D2AE11C51A8E886C77C02ED53C0CA5260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 0F69
Signing time: Thu 26 Mar 2026 16:01:29 +0000
Manifest this update: Thu 26 Mar 2026 16:01:29 +0000
Manifest next update: Fri 27 Mar 2026 16:01:29 +0000
Files and hashes: 1: 1-kxWXv05LSEshrBJnjD59T0FQ7Q.roa (hash: rHapWpK9pigcf/GGIQp1nmEJbzSoQssokoPt9LrVksY=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: ZYlVx/Z1uSZ1Q/awJgkfUGw36jTJv8i0EyKoJFsMnQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:1c:51:a8:e8:86:c7:7c:02:ed:53:c0:ca:52:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Mar 26 16:01:29 2026 GMT
Not After : Mar 27 16:01:29 2026 GMT
Subject: CN=d6a6431c294557048a28c063e8e784b23323c0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:74:4b:26:de:60:c6:a5:b0:2f:c7:02:f2:
19:f1:3e:dc:a7:82:c6:09:6a:b2:0e:72:51:6d:a7:
d5:3c:85:61:75:83:b0:a9:5b:b3:15:3e:b9:70:db:
57:75:b7:d8:94:99:d9:b4:93:6a:bc:54:bf:27:21:
7c:6e:3f:15:4d:6d:ab:24:74:24:dd:e5:a2:cd:6e:
31:84:7d:62:37:e9:ac:e8:22:aa:4a:7d:eb:b0:fd:
b8:20:ab:59:b4:54:ce:8d:9d:1b:23:7d:b8:32:46:
93:3a:94:62:db:7a:d7:54:9d:0d:83:30:be:51:0b:
13:d1:66:57:ca:5d:83:ad:5e:c2:e1:bf:83:94:17:
11:bc:1a:5a:b2:5f:af:2b:12:53:3b:5e:73:4b:8a:
4a:20:e0:f1:c2:be:cb:12:46:af:b4:0e:a9:ba:a5:
97:dd:67:dc:70:1f:d8:36:18:95:22:ac:26:d1:3a:
de:a9:4f:ce:de:58:95:8f:b2:de:80:88:9b:fa:2b:
f4:cf:c6:c9:3f:36:3c:1a:e9:eb:6d:0d:b3:35:6c:
f3:17:69:9a:95:aa:dc:e8:05:ef:07:ed:fb:7c:97:
21:43:f2:8e:94:a2:a7:bb:9d:ed:2d:99:62:d8:f8:
e3:82:7e:d2:f1:05:76:c0:3e:7b:ad:1d:c8:09:87:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A6:43:1C:29:45:57:04:8A:28:C0:63:E8:E7:84:B2:33:23:C0:AC
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:06:13:1d:b9:2d:b6:59:7e:d8:7e:51:fc:10:29:fc:43:b3:
80:be:3a:29:b2:48:ce:42:6f:6c:a9:f7:66:8c:8b:51:67:e4:
be:a7:a8:70:9d:20:dc:81:49:a2:c9:c7:a6:2f:ba:5e:5c:d7:
dc:d0:9c:94:9c:3d:f8:d4:06:44:ac:19:8d:ac:c6:b4:2e:e4:
8a:e5:23:c0:1c:36:e6:68:bf:e6:44:6e:ba:8f:33:c8:d2:5f:
d4:74:18:f9:a3:a1:15:e4:e0:b9:5c:7c:5d:85:1d:84:13:96:
f2:ef:70:44:b2:93:41:5b:02:f0:13:8a:d8:b7:7b:8e:d1:e7:
0f:10:46:12:24:9e:53:b3:0d:f4:98:5c:b0:35:eb:65:6d:b3:
f9:6e:c0:b9:e1:81:2c:ad:a1:cf:02:af:9b:cf:e4:43:da:28:
91:4c:47:cb:1b:45:5b:83:eb:88:e7:ac:62:28:87:c7:95:5c:
b2:35:31:48:5e:63:32:f8:f4:c6:17:81:6f:e8:59:3c:fe:d7:
46:f2:2e:22:c5:f1:28:d1:71:43:7d:32:b3:bc:a8:81:b2:cf:
51:bd:6f:21:e3:f8:ec:cd:b2:ff:6f:d4:d7:29:8d:e9:30:e3:
38:05:46:e7:33:f9:99:84:cb:5a:85:42:ec:98:0d:d8:e0:94:
28:61:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:59 2026 by rpki-client