Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
File: 7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft (raw, json)
Hash identifier: LieQH+aBeos0zf5AXeI1og3+zBdKv+5eLYfe4F9Lxo4=
Subject key identifier: D4:7C:89:2A:8E:AD:BC:B9:EA:02:8E:69:17:22:06:68:56:FD:6A:83
Authority key identifier: ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05
Certificate issuer: /CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
Certificate serial: 019D284DC42BDFA67C6EA71894D63F09EF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
Manifest number: 01A6
Signing time: Thu 26 Mar 2026 04:01:18 +0000
Manifest this update: Thu 26 Mar 2026 04:01:18 +0000
Manifest next update: Fri 27 Mar 2026 04:01:18 +0000
Files and hashes: 1: 7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl (hash: doxUvVguF5I7EAdyzn3B4QwNM9dmoPPAmbIousygb6Q=)
2: TalCKAxab_gMMHeJvcq48KPYlOs.roa (hash: yPK8jifbQaBLYT5U8Ae5k9YG7IJ/bOiLPK0w75h7kpk=)
3: mglUegYtWaUyDz_-mcfoeZK3iuc.roa (hash: 35GBN0aP6FdxTviok26NqcLKHwN12VPItzfJaY9sv8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c4:2b:df:a6:7c:6e:a7:18:94:d6:3f:09:ef:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
Validity
Not Before: Mar 26 04:01:18 2026 GMT
Not After : Mar 27 04:01:18 2026 GMT
Subject: CN=d47c892a8eadbcb9ea028e691722066856fd6a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:d6:bb:28:18:89:97:8e:b4:c2:50:b9:79:
3d:c7:b4:ba:82:47:13:60:11:8b:d5:1a:75:23:26:
11:4e:76:b0:93:7a:9d:41:5a:2d:ec:0c:4c:8b:7d:
30:0e:df:19:ea:21:66:99:b4:81:62:e9:08:d9:94:
a1:2e:88:d7:97:5a:53:d2:69:86:77:d9:23:a2:86:
ef:8e:55:3d:a2:69:7f:c3:c9:23:0d:f0:33:de:f7:
90:52:9a:7e:d3:bb:f4:59:c8:35:06:e8:1d:a8:dd:
88:87:34:81:f8:b5:65:75:81:d1:a3:a5:0f:1f:7d:
69:8d:1c:94:5f:12:5a:c9:07:25:60:b4:72:70:46:
56:3e:3c:ba:4c:63:47:3d:56:30:4e:05:5f:ea:0a:
0d:b1:89:b8:cc:39:80:94:56:1a:15:21:15:11:fa:
7e:45:09:ea:a8:0a:45:90:78:8d:1b:b0:79:fe:28:
16:5e:72:9e:90:00:7a:cf:db:1f:4f:41:21:04:96:
00:23:8d:70:8b:93:83:91:fc:cc:15:ca:d4:57:95:
eb:2b:d9:b5:d5:15:7e:0f:4f:0b:9f:8c:87:68:d3:
e9:ac:cf:3b:3f:af:75:c1:ef:71:dc:0e:8a:d1:c6:
cb:b5:50:9e:24:42:ba:86:02:2f:d9:17:2f:9a:71:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7C:89:2A:8E:AD:BC:B9:EA:02:8E:69:17:22:06:68:56:FD:6A:83
X509v3 Authority Key Identifier:
keyid:ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:67:16:e6:e0:97:45:c3:c1:b3:93:22:a9:10:29:b9:73:9a:
de:4f:44:a2:dd:a4:b5:71:6e:e3:38:5f:e4:c9:8c:71:aa:35:
fa:19:09:0b:f8:e0:d0:93:5e:1b:e7:91:dc:8e:44:4d:77:83:
47:9f:48:99:59:55:01:93:eb:37:5f:38:e0:ba:c2:a0:87:40:
d7:20:f3:33:6a:f3:61:d9:c1:9b:9f:f7:71:ee:85:fc:b7:58:
3b:b6:21:1a:f9:87:4c:3e:60:d4:1a:77:b9:7f:fd:5b:19:04:
84:2e:80:76:dc:52:1f:e5:aa:7e:87:7d:52:8b:bb:c4:3a:55:
19:7a:0e:71:db:32:52:7c:88:71:92:8a:f7:65:42:97:66:72:
c5:b0:a2:8f:10:0f:e4:5b:ad:e6:f1:17:0f:af:db:85:ad:a8:
94:9a:61:9e:f9:7f:4d:da:61:61:88:dc:5e:ba:d6:a6:6b:33:
bc:de:bd:5e:1f:23:0e:7f:fe:0e:ea:cf:24:78:51:c1:95:7b:
33:a1:64:b9:48:5b:2a:12:da:e7:b1:4b:7d:40:49:ea:28:f2:
c6:37:57:8e:a4:44:12:e1:b5:ae:92:55:a5:04:5a:03:84:db:
57:d6:dc:ba:8c:36:72:4b:6a:81:28:0b:6d:26:69:55:a9:25:
fa:e2:96:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:40 2026 by rpki-client