Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
File: 7HB5DNzgwZKsiG89nvcl85lRg5g.mft (raw, json)
Hash identifier: tnMqE9DQS7u7T2TBP+ASsLCRtODt1M3uf2iod3+4L1s=
Subject key identifier: 28:EE:EC:45:5E:C6:48:0C:8B:CC:82:75:EC:7F:B7:7F:00:D4:CB:E1
Authority key identifier: EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98
Certificate issuer: /CN=ec70790cdce0c192ac886f3d9ef725f399518398
Certificate serial: 019D2583BAC54914F9B17D488B4C488592EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
Manifest number: 010E
Signing time: Wed 25 Mar 2026 15:01:23 +0000
Manifest this update: Wed 25 Mar 2026 15:01:23 +0000
Manifest next update: Thu 26 Mar 2026 15:01:23 +0000
Files and hashes: 1: 7HB5DNzgwZKsiG89nvcl85lRg5g.crl (hash: ny7wTxVLLCdtqkCxPFoYugL5NLn8AqtDA6PF8Cl/77s=)
2: SqwoZLt0wGfQ52uqKIyPq1MR0n0.roa (hash: 54gdg5z/WirnRdadVGX+GzAUp4jdY5Mqe47XSjLSOVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ba:c5:49:14:f9:b1:7d:48:8b:4c:48:85:92:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70790cdce0c192ac886f3d9ef725f399518398
Validity
Not Before: Mar 25 15:01:23 2026 GMT
Not After : Mar 26 15:01:23 2026 GMT
Subject: CN=28eeec455ec6480c8bcc8275ec7fb77f00d4cbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:35:d3:0f:37:5d:d2:b6:41:f2:b2:ac:3e:
bd:47:01:6c:d3:26:f2:a3:db:b9:2e:f8:5e:a8:d5:
1a:57:57:fd:dd:02:a9:95:f6:c3:a4:cd:05:94:1c:
3a:67:0f:93:f1:7f:3c:a6:44:19:de:8c:b4:1c:7f:
31:e5:58:37:16:6c:ed:3a:e6:76:de:97:0c:ef:0e:
ff:dd:82:21:11:fc:af:84:b8:51:7b:88:a3:b9:fa:
42:e4:0f:d0:61:80:63:fe:72:3a:10:ff:01:5d:03:
7d:d8:b3:15:17:09:c9:a2:1c:8f:74:c9:6d:78:e8:
ac:bc:64:93:0f:77:88:13:ef:25:fc:78:08:67:48:
33:eb:ed:12:38:b3:4c:82:c6:84:3a:62:70:95:e7:
5f:8c:2a:f7:6b:76:83:c9:b1:cf:ad:42:84:34:6f:
1f:a7:01:48:e0:6e:ed:9f:13:45:60:45:9c:e4:18:
e2:32:03:17:7c:09:6f:74:e9:67:e1:72:96:c9:c9:
09:3e:fd:a3:69:77:94:87:b1:d1:6d:56:b7:d1:96:
47:ea:b1:4c:7b:fb:39:ab:73:6a:c7:cf:f4:a2:96:
23:20:65:c7:a9:fb:0c:fb:03:a6:17:e4:35:54:f5:
26:17:25:86:00:20:d4:98:50:83:4f:4c:8f:69:0d:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EE:EC:45:5E:C6:48:0C:8B:CC:82:75:EC:7F:B7:7F:00:D4:CB:E1
X509v3 Authority Key Identifier:
keyid:EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:07:ca:96:da:98:c3:20:e0:c9:9c:b3:bc:cf:ac:1a:b2:4f:
15:cf:64:19:83:b3:6e:95:26:19:41:05:6b:09:14:a3:3e:4a:
7b:ba:83:68:34:40:fe:69:3a:0f:43:46:fe:4f:40:2f:5b:d2:
1f:db:ed:d4:20:08:e9:22:b9:8a:9d:06:1b:1d:8d:ac:24:d5:
b6:c8:a5:a3:c9:90:d0:05:56:9c:b9:ae:cd:d3:a3:11:ad:5c:
da:a1:76:bd:1b:45:8c:ce:7a:4f:7b:ae:39:32:da:b6:2a:c6:
84:27:31:50:dc:1a:85:a5:58:35:27:da:f2:a2:75:3a:ec:86:
84:f4:27:59:01:70:c5:be:b5:be:0a:bf:62:07:d7:30:18:24:
9e:9d:63:e4:51:d7:cc:c3:85:2f:48:71:a1:55:76:24:6d:2b:
d5:7d:2d:2f:7d:2f:e1:92:b3:2c:77:14:e2:25:42:4b:27:7e:
b5:c6:82:9d:ef:1e:a6:03:55:ff:3d:2e:96:7d:59:31:19:68:
80:1d:b5:6a:75:36:10:5b:5e:22:13:60:69:8e:a1:c4:35:02:
08:44:5b:ee:a8:32:f9:8f:18:34:51:fd:c2:7b:99:2f:2c:41:
2c:08:36:ee:2c:2b:be:52:06:1f:91:a7:6f:e0:06:9c:cf:e0:
5c:02:96:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:22 2026 by rpki-client