Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
File: X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json)
Hash identifier: rtCYaD1NBRaMo5k+hjS2s97t9eCmgZMPFV9T/W2vR1E=
Subject key identifier: 74:91:4B:F6:DA:C1:1E:0F:AE:28:FD:6B:1A:18:B0:0F:28:66:79:3E
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial: 019D27DF96A5AD1FE0B66B6A0B1FEEC5E766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
Manifest number: 0D7C
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: f7R1mvgS+2GHANcfTMCZlL1pOLqfqQcy5DgkulP2DBw=)
2: at5a5rELRNEAw0rbmlFozDBKmf0.roa (hash: fph6BRKPR1DclmnZB61WzWIE1l0c6loKAE1iu+Pb6gg=)
3: fN1BCGt6X78bmo40K4mqUHAHyNE.roa (hash: 4u131ZUFsLjOVWZz34pEcO0mSEYVLQJpztQcoDh3/Iw=)
4: o__yenjb_byTDMgOBxUzVji8MJk.roa (hash: i3sG4QUVi7SpGaea2GgrwUuE6uMpXt1hzOEHLJcR4vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:96:a5:ad:1f:e0:b6:6b:6a:0b:1f:ee:c5:e7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=74914bf6dac11e0fae28fd6b1a18b00f2866793e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:38:cd:67:5c:17:74:d6:58:99:6c:39:0a:
59:88:4b:14:b9:79:2b:65:fa:91:a7:cb:0e:c5:14:
47:17:86:94:a6:01:69:d6:da:82:22:30:0c:f7:59:
e9:f8:1e:b1:76:b0:a5:12:7f:d4:37:9d:97:cb:c1:
6d:03:70:80:41:54:a2:31:dc:ed:a2:27:73:b7:eb:
ee:f3:9a:c3:bf:cd:38:2b:0b:03:d7:64:45:4e:b0:
8c:8f:5d:02:b4:76:70:b8:a0:5d:56:8b:44:d7:ed:
c0:63:70:9e:bb:ce:ff:3b:69:fb:fa:d3:a2:8a:9e:
8f:e9:42:e7:e5:88:ba:3f:6c:b2:96:91:68:e7:07:
ef:23:d4:9f:23:5e:e1:a2:cb:6d:ea:61:3b:4c:e5:
fa:db:7e:3a:dc:39:9b:e8:6a:47:24:58:c2:0e:e8:
9b:06:76:bd:1a:5d:90:d4:c0:ce:23:2c:4a:0d:4c:
a0:57:62:73:cd:65:18:a2:73:37:97:b5:d6:92:b4:
26:2c:7d:3d:b0:20:c2:9d:66:1c:30:ae:a9:49:32:
85:cf:dd:c3:b4:07:c7:68:a0:2c:0a:6f:29:20:be:
97:27:48:f7:4d:ac:44:05:30:50:f8:ce:b9:56:ec:
e3:a7:c4:20:e2:6d:a9:9b:89:6f:16:b1:f5:3c:db:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:91:4B:F6:DA:C1:1E:0F:AE:28:FD:6B:1A:18:B0:0F:28:66:79:3E
X509v3 Authority Key Identifier:
keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f7:d4:62:bd:9f:d3:c1:42:82:9f:e4:ec:88:7f:7f:b6:fc:
af:4f:9b:c0:b8:e2:9b:df:67:e4:f9:34:f3:b2:ff:fd:e7:fb:
59:a6:16:66:82:7b:40:7b:6d:38:9b:47:be:d7:a0:99:be:20:
0c:bb:85:64:4d:89:52:c4:1b:ae:47:0d:14:8d:eb:22:ac:ed:
14:0c:44:3a:fd:6b:44:8a:f9:93:9f:4a:28:66:22:04:25:cb:
0f:c2:06:fe:14:f7:27:91:99:43:fa:e7:36:ba:ab:5b:d1:5c:
13:da:b8:31:d5:25:62:61:66:64:ef:91:03:ef:bf:7e:74:4e:
57:94:a8:8f:25:bc:e5:46:41:6f:e8:2b:7a:69:fa:55:cc:e4:
9e:2c:16:f4:85:b0:4f:0e:01:f4:19:4b:7c:d9:8c:62:27:c2:
44:a9:05:d2:e4:f7:d3:00:24:4f:5a:1b:19:b8:20:c8:c7:6c:
e6:2a:ef:4e:5c:3e:b5:6f:d3:46:d3:95:cd:fb:bf:30:02:6c:
94:62:73:33:e9:e5:14:54:fb:bd:63:e7:8a:fd:78:89:57:df:
00:8b:24:e2:79:3f:a7:d2:03:67:50:a0:45:cc:86:3f:9c:58:
d6:45:5c:a5:26:a4:67:93:4f:0a:52:2d:42:4a:57:9f:b8:df:
02:e0:46:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:41 2026 by rpki-client