Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
File: 7onRezmnaEppVLl7iw-6x9SJVMo.mft (raw, json)
Hash identifier: IHKuuJxkkOYCg5t+K7KF7uODOT7n+/BPblzb8bR5FcE=
Subject key identifier: 8E:01:67:1D:D4:19:6E:DF:CE:97:2E:B6:C9:9C:D3:86:B5:A4:72:B0
Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
Certificate issuer: /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Certificate serial: 019D288466E3D7C3FD433C078E4723CED85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:00:58 +0000
Manifest this update: Thu 26 Mar 2026 05:00:58 +0000
Manifest next update: Fri 27 Mar 2026 05:00:58 +0000
Files and hashes: 1: 266U8v32AIwFxpg_FZxsUC2Aiq0.roa (hash: pX+SOE6s9KPyp5jmWUGDvGzaItPjX+1uMV/qoRqubBk=)
2: 7onRezmnaEppVLl7iw-6x9SJVMo.crl (hash: MMWGb1D4Fjy0OE6GONQI5iI+uhFpUam/SxDYuxMjlYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:66:e3:d7:c3:fd:43:3c:07:8e:47:23:ce:d8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Validity
Not Before: Mar 26 05:00:58 2026 GMT
Not After : Mar 27 05:00:58 2026 GMT
Subject: CN=8e01671dd4196edfce972eb6c99cd386b5a472b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:1a:87:2c:f3:08:05:c0:2c:4d:2c:14:1e:
ed:69:36:3c:cd:2e:15:82:8d:09:dc:49:9c:96:d6:
61:20:67:3e:ef:c1:27:63:10:8c:7a:df:f1:7c:20:
e6:1d:16:ed:d1:15:2b:1b:aa:2c:f4:9a:5f:3d:b3:
fa:d5:15:ed:ab:74:af:9d:14:3e:7e:10:7f:d2:54:
e5:00:92:b6:28:73:d6:a2:03:02:16:35:17:b0:a1:
af:4f:ba:a3:7f:8b:2b:0b:e1:5a:01:02:7a:51:da:
8b:71:7c:e8:19:a8:4e:9d:7e:10:fc:8b:dd:0d:17:
c4:11:e5:f7:9b:de:e9:49:03:d6:19:f1:6d:fa:a5:
16:7f:a2:18:14:84:6e:1a:9d:61:68:cb:11:32:38:
60:ec:a3:7c:01:50:70:d1:7b:59:e3:7b:c7:d4:22:
bf:f9:df:01:c2:dd:26:d8:f7:cf:43:b2:02:4f:65:
63:2a:d3:92:95:eb:2e:ff:c9:d2:ca:28:23:52:d5:
15:c1:11:26:b1:83:7e:70:9a:18:3d:8c:d2:90:85:
34:39:a6:58:d9:72:b4:ad:fe:8b:d2:77:6e:20:7e:
fb:19:4a:d5:7b:af:2c:93:73:90:21:4b:38:34:16:
54:76:45:33:fc:c7:17:6c:4b:79:32:cf:c8:f1:f8:
92:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:01:67:1D:D4:19:6E:DF:CE:97:2E:B6:C9:9C:D3:86:B5:A4:72:B0
X509v3 Authority Key Identifier:
keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:58:c2:13:78:55:4e:6f:d6:33:8b:95:1e:02:5d:49:da:1b:
ab:51:d6:e4:b7:75:40:e6:26:e4:5f:8f:45:0e:f7:11:cb:a5:
0a:e8:cc:f2:0c:41:a0:b8:76:c5:35:ef:f4:cb:57:cd:69:1b:
46:ae:bd:74:f8:1b:9c:90:13:22:5b:16:55:7a:85:3b:7c:a9:
f1:60:37:8d:08:00:33:fa:c6:25:28:4c:0b:c1:9a:54:43:44:
97:81:f2:d5:52:47:b2:dd:9d:e9:f1:5a:44:52:af:6d:b1:9c:
bb:60:54:40:41:e9:1d:36:e2:6f:16:27:51:9b:13:23:96:2e:
4f:90:cb:07:05:c9:67:84:49:2d:50:5e:10:39:54:58:e3:a0:
45:f8:c7:25:7c:35:df:0f:81:e1:6a:ef:33:1d:0d:ca:ba:32:
53:a2:ad:51:f9:a6:a8:c6:16:73:90:ba:ce:06:08:9d:fb:31:
9d:9a:a2:a5:6a:9b:f2:35:78:1d:83:0f:7b:94:2e:0e:33:ef:
46:54:9b:be:e6:29:da:d3:75:07:e7:54:62:bb:11:a0:0e:5e:
a6:82:e3:d9:f1:84:4a:60:63:47:99:b1:b7:6f:d0:50:c5:42:
26:e8:6c:b3:8a:ff:9d:e9:c0:4d:97:13:34:09:cc:af:23:42:
3d:e9:63:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:49 2026 by rpki-client