Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
File: _7JidnKHfQ9t6bxOfhhu7dE1YRA.mft (raw, json)
Hash identifier: XRISbVRsf0rMu/7H+fuJmqPXD65/qf+ZZ/cNp7qyeaU=
Subject key identifier: 8D:03:B6:0F:CE:D9:77:F9:80:6F:77:3B:7D:37:03:DE:FB:10:CB:A0
Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Certificate serial: 019D299765FD82A16716838DA71B22ABC877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
Manifest number: 0677
Signing time: Thu 26 Mar 2026 10:01:21 +0000
Manifest this update: Thu 26 Mar 2026 10:01:21 +0000
Manifest next update: Fri 27 Mar 2026 10:01:21 +0000
Files and hashes: 1: 3jq3JT05Xk8RZ2a5qjD2FUJa1Vg.roa (hash: BN7qrk5PhVCDMZZc/gkWTb+z7DTTxiTcCVTVZQiCQ5A=)
2: I6ALXmCteTenZcrOg4TP1V_iWag.roa (hash: mBTMfxZNjNhqmIR4K/UJM2sVF73blQR0DlqlzSJjP8c=)
3: _7JidnKHfQ9t6bxOfhhu7dE1YRA.crl (hash: cdHuIA9WAT0KB/JAOXbSZibar+AvqFoBXVe4/z9idMA=)
4: _KX5px9_8t4gmUQxbL9xxFEe0EQ.roa (hash: Ce1QjD72lAMkVrk9tsAIYNVsMGWhveRz8PigeWgSs88=)
5: kR23whFjS1yTPrK8lRsUC1IvToE.roa (hash: QZPua623BL753r2guNY8Q/Q1bYRMgfE3VvsbXCxTsdo=)
6: r6x-mCfX6y2HE8Fca-6L19rnZBI.roa (hash: uQHVblgOp1wekrgJVHdlCHMrkJ9aLpwbv/ZWjTHqqwM=)
7: rrn-hLlASc3QfQ_2G9XagIYTuhQ.roa (hash: 6mhOZyZWiBej5y33Jy7KbJNVz0VK2ieBWiaEGjbBwok=)
8: zQddJR0srh3UpgKOtESUaO1UkDw.roa (hash: tDBd3jYaumlCeJ61X+7zkMh6GIuzkfDLvRK2eN/iQ+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:65:fd:82:a1:67:16:83:8d:a7:1b:22:ab:c8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Validity
Not Before: Mar 26 10:01:21 2026 GMT
Not After : Mar 27 10:01:21 2026 GMT
Subject: CN=8d03b60fced977f9806f773b7d3703defb10cba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:3c:6d:f0:d5:a3:ab:1a:28:35:7b:04:51:
e3:a3:3a:73:7a:29:8a:aa:29:8b:80:63:0c:b4:d0:
cf:ec:61:31:af:30:77:41:f9:4c:f1:e0:e4:18:a7:
31:2b:83:31:ba:ef:55:16:d4:1d:e0:fd:e0:d4:c8:
fb:35:d9:8b:56:ae:25:aa:d7:48:11:18:fa:b6:be:
4e:90:d7:7a:5b:b5:d9:f0:8e:30:a9:58:ff:50:74:
86:a3:82:71:ac:6b:4c:61:1c:80:b3:14:c6:d3:5c:
66:0c:98:28:40:db:ca:a7:b7:c2:f4:2f:06:f6:b5:
d6:d4:91:df:44:e3:22:ef:49:d9:2b:ca:6d:44:aa:
4e:92:6a:3c:1a:fc:18:3a:fa:f5:61:52:11:9a:eb:
cd:e1:67:29:2c:0a:75:69:69:a3:5f:5e:3d:a7:b4:
13:55:fb:9a:30:eb:c5:85:9d:f0:a9:b3:8c:73:71:
8f:3d:ac:af:22:85:22:66:ca:98:94:61:3a:45:80:
7b:f6:b1:14:a5:21:3d:7b:3a:42:c1:30:36:a8:d7:
71:4c:4e:7f:23:31:a0:34:74:6b:f7:11:a1:a4:30:
6f:86:0e:36:e2:18:27:90:60:a1:7a:03:72:4a:e7:
4f:c5:b1:61:a3:08:6b:76:92:13:11:b7:9d:24:96:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:03:B6:0F:CE:D9:77:F9:80:6F:77:3B:7D:37:03:DE:FB:10:CB:A0
X509v3 Authority Key Identifier:
keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:96:cf:96:63:21:cd:5f:d2:b0:1f:e8:4e:35:9a:88:58:88:
8e:bc:cf:99:9c:a7:16:3a:b5:d7:7f:6f:4b:2c:48:d5:aa:ea:
d1:d6:37:74:91:46:8b:98:b5:16:ac:e1:20:21:2c:d1:36:55:
63:6f:0d:be:41:3b:63:56:da:56:9b:26:c8:0f:6c:fb:95:13:
7f:bd:7c:b3:40:23:72:42:eb:fa:bb:ea:22:47:da:7b:b5:9c:
86:de:a3:c2:56:f0:14:8d:48:da:9f:6e:ce:ba:fb:01:45:63:
f8:16:6d:ef:78:2b:3e:d9:7c:e6:1a:e9:bd:66:48:4e:eb:c5:
5c:f3:bf:83:32:27:39:80:f4:21:f6:7e:4c:53:ac:d6:5e:e3:
af:58:d0:eb:24:ff:e9:54:a6:42:dc:98:a8:c8:e8:c9:77:5d:
9a:3c:6e:70:03:d7:08:37:d0:64:e8:00:7b:78:ce:75:1f:73:
5b:18:1c:61:8b:9d:76:bb:7d:aa:35:d4:99:0b:90:20:7d:d0:
d8:3c:48:47:e5:71:98:7b:24:49:7a:f8:95:c0:02:1b:10:48:
4c:4f:44:a9:99:fc:bb:53:11:9d:76:88:11:5c:fd:68:5d:aa:
87:48:c0:0f:d5:47:34:88:13:c7:a8:09:50:2a:0d:ee:f8:fa:
ad:bb:c3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:36:40 2026 by rpki-client