Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
File: 7XZO39sbgh1dJayLeggKapBvprA.mft (raw, json)
Hash identifier: nVuHeg2jfKOQ8E7e3hdCpMvtu/f0YC2MMVMJoZuBCpM=
Subject key identifier: 81:11:F9:C7:16:D4:EF:40:78:AB:D6:26:30:FB:7C:74:0D:5E:6A:75
Authority key identifier: ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
Certificate issuer: /CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Certificate serial: 019D26CD6F2D9699DD0C185085641A0CE1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
Manifest number: 04D6
Signing time: Wed 25 Mar 2026 21:01:30 +0000
Manifest this update: Wed 25 Mar 2026 21:01:30 +0000
Manifest next update: Thu 26 Mar 2026 21:01:30 +0000
Files and hashes: 1: 5KdGE2jdbERGSAaTxotqmYnDHPE.roa (hash: kwZAjYwYGkcbs7JNQRRWwRi2Ovfq/Y4hHTxA0ovQfso=)
2: 7XZO39sbgh1dJayLeggKapBvprA.crl (hash: IX4Bvu4+aUUxSyG2s+7aH2Je2bcQDnBxMpTQL37a0oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:6f:2d:96:99:dd:0c:18:50:85:64:1a:0c:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Validity
Not Before: Mar 25 21:01:30 2026 GMT
Not After : Mar 26 21:01:30 2026 GMT
Subject: CN=8111f9c716d4ef4078abd62630fb7c740d5e6a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:a2:d6:04:66:58:0a:1b:d7:70:b9:ae:52:
7b:5c:a6:4d:cc:9d:dc:42:51:f5:21:37:dc:c2:3a:
63:89:27:09:32:83:8c:53:46:65:e0:c5:fc:04:4f:
4f:41:55:4a:84:fc:e2:41:26:6a:2d:c3:83:7a:08:
f7:fc:64:73:11:43:2e:63:35:1b:bd:e5:fa:6a:76:
b8:41:20:da:09:13:9b:9e:ae:a8:99:10:ea:e7:4f:
f8:ed:34:3a:02:34:27:84:2e:bd:12:fe:48:74:c3:
50:e8:b8:4f:ff:d2:7d:75:50:7a:f6:ef:1f:ed:17:
50:3e:d8:2b:ec:b2:6b:b4:8e:d7:68:ff:14:a5:09:
91:5a:ce:15:39:7e:45:37:70:3c:c8:a5:38:f8:13:
68:9a:61:2f:0f:6b:fd:7f:77:75:79:30:65:ca:4d:
df:22:de:c0:66:4c:16:df:16:27:d0:27:a5:93:5b:
3d:14:dc:77:3c:e6:b2:3e:fe:32:c0:20:39:e7:22:
51:9f:5e:3c:f5:54:1b:bd:19:74:dc:9b:69:fc:cc:
c0:06:94:f6:f5:14:f5:40:b1:be:de:c3:03:b6:ca:
5f:17:a5:91:70:87:28:3f:5f:c2:f0:3d:03:46:bf:
36:45:7d:23:fb:a9:bf:e6:f9:43:e6:bb:8b:85:5e:
1d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:11:F9:C7:16:D4:EF:40:78:AB:D6:26:30:FB:7C:74:0D:5E:6A:75
X509v3 Authority Key Identifier:
keyid:ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0a:01:c7:88:77:cc:00:a7:ce:d1:96:a3:91:35:92:49:e3:
4d:25:27:2d:31:15:d2:61:62:67:b2:48:a4:e9:69:f0:a4:d5:
3a:43:cd:8b:3c:a8:5a:8f:73:57:55:0a:ff:7f:11:7e:52:22:
f4:63:b6:51:2f:b7:44:de:7e:bb:eb:53:de:63:45:53:e2:ae:
ed:e4:94:00:1c:f9:b5:a9:33:06:18:52:6b:a3:df:cd:98:76:
f8:c9:d9:ca:f3:c1:01:8f:47:95:10:4a:e0:cb:fb:0d:12:28:
7f:1b:25:66:b5:04:60:3c:e9:4b:f9:47:67:99:79:f1:36:fa:
9f:43:3a:e8:3c:06:28:6f:98:11:1e:2c:2d:94:71:30:b2:14:
65:3f:bf:80:96:33:69:4f:17:eb:cf:b6:cc:27:17:00:47:d5:
7f:98:ac:b7:46:dd:dd:73:fb:08:06:48:f7:38:60:88:5c:87:
2c:57:80:67:69:6b:7c:ea:2f:40:76:b1:ca:4e:5f:dc:b7:4c:
aa:62:af:5f:52:53:5e:31:a1:23:f2:14:71:ef:27:45:02:ee:
e8:95:f6:c7:e1:7e:d7:72:5b:62:f7:8b:db:d3:e1:8c:04:78:
a4:ad:c6:03:80:d1:ae:e3:4d:d4:1e:5f:8e:dd:03:5b:8e:0e:
71:ad:7f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:19 2026 by rpki-client