Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
File: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft (raw, json)
Hash identifier: yEYPp5mnVq4A+8rKxapFlgEq5IpboQ9mjg7Nhe+yeYU=
Subject key identifier: DD:D4:4E:15:22:02:26:31:05:E1:1A:F5:FA:E0:09:46:1B:34:23:1D
Authority key identifier: EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
Certificate issuer: /CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Certificate serial: 019D2997671ACEBD81967EDF63B6314AF816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
Manifest number: 0C11
Signing time: Thu 26 Mar 2026 10:01:21 +0000
Manifest this update: Thu 26 Mar 2026 10:01:21 +0000
Manifest next update: Fri 27 Mar 2026 10:01:21 +0000
Files and hashes: 1: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl (hash: LCdlx/64RWAEQs74EiFvbQy8oNBqd4MAb8h3LLaYD6Y=)
2: 7LE1DEYT1ICWfMHoKNZXPCeUJQo.roa (hash: 6GDVwV7rQonMcBZu/ABynfjZj1iMGkNFh4pVQikYnrw=)
3: QxJ6dEmDHiw3lmS5PxMFumYPnck.roa (hash: aqxNNZjWenyXEE3qtSl1nU9WOF/JQO83RlkjXS7clZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:67:1a:ce:bd:81:96:7e:df:63:b6:31:4a:f8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Validity
Not Before: Mar 26 10:01:21 2026 GMT
Not After : Mar 27 10:01:21 2026 GMT
Subject: CN=ddd44e152202263105e11af5fae009461b34231d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:23:44:74:78:91:7d:f1:9c:b7:d3:ad:db:
5f:49:4c:fb:b4:e3:ab:b4:97:fd:99:7c:c7:55:73:
46:f7:12:fb:e8:46:de:6c:c9:37:3e:1f:81:d6:b0:
56:6a:32:d8:73:53:e3:29:08:02:e0:a5:28:24:77:
6e:d5:4c:c1:ff:32:49:c0:66:24:dd:e2:eb:a6:ef:
1c:1a:f5:5b:29:a1:3f:d7:63:35:7d:ff:b0:4c:f5:
d5:8d:be:4a:9c:13:5f:27:26:b1:73:5b:78:c0:f4:
13:6d:c1:ac:08:cb:01:b9:78:f8:51:66:99:28:68:
d1:1e:91:0c:3c:63:58:17:ff:02:6f:ec:f8:89:2d:
41:ba:52:ad:b4:67:00:40:f3:d7:05:b1:09:02:09:
f3:73:c4:f5:c9:ed:ef:39:68:7c:ed:67:29:d6:42:
b0:71:86:af:42:79:cd:cf:47:94:5f:ed:b0:bc:e8:
e7:8d:9b:14:73:68:42:8e:a2:86:5d:d0:82:ec:b5:
b5:0b:5f:2d:57:e1:6e:3c:20:60:35:6c:51:3e:eb:
c1:b4:d8:43:4f:f3:0c:47:34:a1:4f:e1:ef:de:03:
e3:82:c7:a0:c4:2d:2d:4f:78:2f:ab:b7:ad:76:0a:
86:70:08:f2:d0:40:66:ac:40:8b:9d:9e:87:ec:4d:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D4:4E:15:22:02:26:31:05:E1:1A:F5:FA:E0:09:46:1B:34:23:1D
X509v3 Authority Key Identifier:
keyid:EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:aa:7a:50:b5:70:87:d3:de:ca:63:b9:d3:70:fa:11:4a:d0:
f7:2c:ae:25:d3:e2:7b:52:84:ac:a1:e2:4b:45:3b:16:22:dc:
d4:e9:b8:c4:30:1e:8c:fb:16:5e:30:97:95:70:93:b8:2a:28:
e9:70:58:49:49:2f:18:ea:b0:44:ab:1d:dc:9d:c0:db:da:c1:
06:78:5a:96:87:a1:ae:af:c0:f5:c9:9f:fd:32:c3:9e:ea:13:
1a:fb:67:4b:4d:7f:93:7b:d1:99:a3:a2:7d:64:25:3f:d9:7d:
9c:ef:f8:4b:95:53:21:24:87:7d:69:98:27:77:4d:7f:4b:88:
d8:84:6e:85:ba:0a:32:32:e2:b1:ac:9c:f6:0d:97:ce:31:9e:
0b:bb:bf:97:d0:bf:d8:a1:60:33:ce:73:c9:02:4f:50:2a:ce:
09:c6:b6:d4:93:97:c3:b9:97:45:b2:24:d0:23:8c:80:ad:c8:
11:95:7d:84:df:30:75:76:09:33:6c:f9:7f:25:93:f9:59:92:
38:71:c7:6e:8a:47:0d:cc:b8:b5:ad:3c:b5:74:8a:91:d6:54:
cc:4d:4a:06:99:46:81:bf:cb:5a:1a:65:a0:93:ca:24:9b:fc:
51:6a:ea:20:fa:75:b7:23:b4:c1:d9:39:f3:54:3a:74:19:7f:
19:36:8c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:17 2026 by rpki-client