Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
File: 7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json)
Hash identifier: XPsz2NOcguyg2Gq/2EHhupRqE1Xqjq0iK79SIuT48cI=
Subject key identifier: 64:CC:A7:F3:8D:B8:91:6A:3A:F2:36:42:3A:6B:03:F0:56:D5:44:22
Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
Certificate issuer: /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Certificate serial: 019D2816F72353B249C12C5AFB99D90BC980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
Manifest number: 0B53
Signing time: Thu 26 Mar 2026 03:01:26 +0000
Manifest this update: Thu 26 Mar 2026 03:01:26 +0000
Manifest next update: Fri 27 Mar 2026 03:01:26 +0000
Files and hashes: 1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: H4XstK8UhUcjAqPRqt+nOugfCNRXdiU+RRZRCw6d8KI=)
2: smfmsIUF9u9g8NgIU5ofNUq_OII.roa (hash: 4JsRlal2vIPYDa8QmogXl60LTzkl5mPgzweZiKuoNtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f7:23:53:b2:49:c1:2c:5a:fb:99:d9:0b:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Validity
Not Before: Mar 26 03:01:26 2026 GMT
Not After : Mar 27 03:01:26 2026 GMT
Subject: CN=64cca7f38db8916a3af236423a6b03f056d54422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7e:20:90:c3:82:be:65:c4:82:7b:ac:38:64:
60:25:fd:46:2a:09:e8:02:37:02:c2:e7:0d:ef:3b:
a0:76:d0:2c:85:3e:5a:d7:11:6a:a4:3e:76:f0:64:
fd:cc:8e:45:38:cf:9c:da:54:f7:8c:e5:55:bf:de:
3c:b8:9c:71:01:b4:85:d0:8c:09:2e:95:66:01:31:
45:ba:5c:3c:ca:10:7f:9f:1b:7e:7d:7c:8e:72:e7:
7c:76:93:6e:1c:13:df:8d:64:e1:b3:9f:34:ac:05:
4d:b3:85:85:cc:e9:a6:c5:a4:85:c5:c5:72:24:1b:
98:ce:d3:da:7c:2f:3a:a7:2b:9c:ed:c7:f6:b6:36:
d9:cd:a4:24:b2:b8:d6:d0:45:49:81:9c:69:82:5d:
9d:17:32:df:cd:7b:aa:2c:a2:ac:4c:cb:db:43:4a:
02:b9:de:0f:18:8e:6a:75:10:a5:6f:16:7d:ac:ef:
35:34:b7:d0:1f:08:d0:0a:e9:6f:b6:af:d3:8f:12:
a5:47:0f:12:7e:2c:33:89:8b:fd:56:ac:3b:cb:4f:
1b:6f:29:6c:7b:4f:af:83:70:e4:7f:c5:e2:7a:4b:
8c:88:82:51:10:a8:79:17:53:57:9e:b0:fd:11:e5:
dc:83:42:cd:ad:fa:bd:85:19:43:14:c2:b7:2d:1e:
b5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CC:A7:F3:8D:B8:91:6A:3A:F2:36:42:3A:6B:03:F0:56:D5:44:22
X509v3 Authority Key Identifier:
keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:67:14:96:3d:1a:f7:b2:0a:67:d3:5e:09:51:ce:f8:ae:47:
21:93:63:d1:25:e4:25:64:e9:51:1b:18:ec:24:08:2f:60:1d:
99:c9:cc:60:ab:a5:70:da:11:22:80:4e:46:a1:e7:91:b7:54:
59:74:0f:41:cf:a4:b5:1d:81:bb:17:3b:91:b8:12:56:d1:6b:
34:79:7c:6c:ac:1c:07:99:11:48:1a:10:ea:ba:de:e3:c0:e8:
f6:11:9c:44:c6:45:a2:f8:bf:67:9d:84:3e:c0:69:b0:d8:2b:
84:61:09:79:0d:c6:cf:08:07:b2:c1:e5:63:be:24:92:90:05:
9a:32:29:6d:78:31:65:54:69:ed:46:0d:74:44:53:3c:3c:fb:
2f:de:e6:d1:15:f1:ff:48:8e:67:16:80:1d:af:e3:b5:3d:32:
59:18:c2:db:a0:61:6d:a6:08:f5:3e:aa:af:34:53:42:16:d5:
16:b6:d5:cf:c7:f1:01:79:79:0f:07:a1:06:d8:31:91:f7:dd:
d5:ec:4d:98:1c:55:fd:3f:dd:bc:0c:68:e4:9f:f3:ad:a3:44:
be:6a:66:1e:a2:d0:82:a4:ec:04:7f:69:5e:26:37:ad:e1:c5:
c9:d7:6a:22:d6:2a:ad:a8:78:c4:80:5d:dc:14:01:88:6e:22:
d6:f0:f3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:44 2026 by rpki-client