Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
File: fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft (raw, json)
Hash identifier: OYCyAyxMlQhr7w+GurhAI4QYKB3Fd17NDt2oXhZgI8Y=
Subject key identifier: EE:C3:C9:84:36:03:53:C8:2A:54:31:19:7D:19:48:0C:B2:00:47:1A
Authority key identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
Certificate issuer: /CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Certificate serial: 019D284D4A01E91E9B03BB6BE96C1C857F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
Manifest number: 0BDE
Signing time: Thu 26 Mar 2026 04:00:47 +0000
Manifest this update: Thu 26 Mar 2026 04:00:47 +0000
Manifest next update: Fri 27 Mar 2026 04:00:47 +0000
Files and hashes: 1: 2Vg8mtqhtEjY6JU3zi44laQwebs.roa (hash: Uc9g1r54C8yp0GXiH0sU3THCD+1hgCm7+9g2Pk5/hcs=)
2: fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl (hash: pZeHbPKbOsZTOrBxbc58mATVQyK3biQ+XkcpLYgrTeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:4a:01:e9:1e:9b:03:bb:6b:e9:6c:1c:85:7f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Validity
Not Before: Mar 26 04:00:47 2026 GMT
Not After : Mar 27 04:00:47 2026 GMT
Subject: CN=eec3c984360353c82a5431197d19480cb200471a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:77:37:91:15:af:38:fd:93:f8:0d:18:3a:
58:09:67:4a:96:93:c1:f7:b6:b2:bc:e7:da:6f:d4:
08:7c:82:1c:82:3c:ae:fd:2d:24:64:73:a8:29:af:
f2:ca:27:e0:dd:a4:57:91:66:c4:d3:8c:da:72:c9:
32:0d:d4:1a:a1:a5:11:a1:79:8f:c3:0a:9e:86:1c:
db:a3:88:90:fd:1e:92:ac:d7:53:fb:1e:2c:95:9d:
ab:49:fa:74:49:6b:51:43:30:98:69:40:0a:00:29:
5f:28:0c:b6:05:3c:80:dc:2d:8b:48:bc:9f:00:fa:
46:36:5a:ce:de:1d:ab:55:a6:d2:41:81:d3:5b:02:
82:01:57:41:b7:09:81:b3:66:93:27:99:99:79:72:
d8:13:ea:09:d4:93:cb:94:a3:e3:48:c9:18:3f:84:
a4:9c:35:d7:89:c3:1e:73:e5:f1:78:ae:86:5e:ce:
7b:26:a8:6c:3f:f6:e1:7b:d5:7a:23:fb:52:54:9c:
77:69:14:0f:ac:83:63:72:0e:24:0a:68:cf:90:7f:
8d:47:92:af:7e:f3:1f:a3:61:52:9a:25:ef:73:af:
37:a6:34:76:b6:a2:f5:9d:8a:e1:2f:f4:37:06:9a:
ca:d6:d4:2b:62:c6:c3:94:fe:8a:b1:d2:72:46:c1:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C3:C9:84:36:03:53:C8:2A:54:31:19:7D:19:48:0C:B2:00:47:1A
X509v3 Authority Key Identifier:
keyid:7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:87:40:71:21:da:fb:69:50:f8:70:b3:b1:4a:13:4f:11:ba:
3b:eb:b3:45:b0:e9:88:08:aa:b8:d8:fe:1d:f9:ce:25:32:f3:
34:10:48:8f:65:4d:2c:53:f3:e7:59:5c:93:ae:ee:eb:50:87:
42:a7:f4:0c:8a:70:96:58:14:94:c7:46:8c:a5:68:4c:65:62:
a8:1a:3b:25:85:0a:cc:4d:fe:1b:cb:dc:50:cb:49:98:25:21:
e3:7d:87:67:17:87:df:83:78:b4:c3:4d:03:de:83:82:19:89:
ca:10:f5:18:6f:40:2b:2e:bb:f1:83:a2:fe:b4:fe:a5:fb:70:
14:c8:bb:59:70:7a:35:cc:86:28:4c:3a:1d:ed:84:b5:84:94:
74:40:83:7c:28:02:3a:92:39:70:b0:8e:21:13:4d:82:d0:ce:
fd:2c:df:71:fd:3e:f6:50:ab:15:79:ed:26:d6:f8:e7:05:f6:
14:c8:2e:fe:51:f4:f3:2c:06:93:89:44:d3:b6:55:de:45:7a:
c4:12:c3:28:a3:ed:54:63:bd:32:67:fc:5c:0d:f2:f4:13:3f:
00:e9:88:5c:58:97:7a:20:0d:48:7b:84:e4:5f:52:ea:3a:21:
68:03:16:a1:b6:be:be:87:4e:a7:ce:0d:80:b4:41:d3:4b:d5:
5a:12:71:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:01 2026 by rpki-client