Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
File: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json)
Hash identifier: pEe8x92fH4NVhCB5XPc8OOySnLGkOCRS700Jup7UUHg=
Subject key identifier: 09:AC:EE:B6:ED:1E:B7:A8:9E:EF:F3:CF:F4:CB:83:AB:39:93:2F:65
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial: 019D27A8B3488730F8A3A54C9E2E47B7AE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:01:00 +0000
Manifest this update: Thu 26 Mar 2026 01:01:00 +0000
Manifest next update: Fri 27 Mar 2026 01:01:00 +0000
Files and hashes: 1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: U5yhOAbUSaNX1GWknIMvx0sQhdnPjEushshNEwOoGpQ=)
2: edQgb1OKZzdIqpTZCvd7y06flso.roa (hash: YslE6ABxgM2nK0S1WncJ01AbUDV4x4LC73+qD5UxVEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b3:48:87:30:f8:a3:a5:4c:9e:2e:47:b7:ae:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Validity
Not Before: Mar 26 01:01:00 2026 GMT
Not After : Mar 27 01:01:00 2026 GMT
Subject: CN=09aceeb6ed1eb7a89eeff3cff4cb83ab39932f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4a:ca:eb:d7:34:8c:4d:89:ff:e0:b4:93:ef:
66:38:30:49:ab:ec:c1:58:50:12:9d:3c:c5:1e:d9:
86:2c:15:fc:cd:26:46:15:c8:0c:69:3e:2a:d5:14:
8a:20:19:00:c4:b4:33:20:6c:0f:56:5e:ca:5d:66:
7c:ae:9f:1b:55:85:a7:3b:33:11:a8:bc:9d:32:5e:
95:99:3b:78:f2:6c:ba:31:63:a6:18:49:9b:52:e4:
40:1a:a1:3e:35:39:5e:d7:a6:e4:58:8d:da:07:19:
8c:38:f6:a6:e8:27:4b:4f:a0:58:84:4f:c4:f5:6f:
a2:ce:82:6a:8e:08:36:2f:ad:cd:cd:f9:27:84:e6:
dd:da:d0:51:cb:a3:03:c9:b1:e5:0b:63:a1:05:8f:
a4:c6:ae:47:77:c9:a4:87:6e:ec:b7:ab:24:88:43:
e4:41:a3:ac:b2:c2:d6:ec:cc:3c:b3:b4:d8:76:cd:
64:1e:3c:41:14:1c:9b:e3:9c:08:48:ba:6c:a5:53:
ae:2f:c7:c6:c4:00:ac:a4:42:d6:92:6e:0c:13:41:
5e:3f:cf:5a:23:42:b8:42:29:c5:50:ca:62:06:b3:
c5:69:af:fa:b0:c8:63:d3:b0:00:8a:49:17:73:cf:
5f:85:c1:ff:62:fb:a9:3c:b5:1f:c8:83:fe:3c:b3:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AC:EE:B6:ED:1E:B7:A8:9E:EF:F3:CF:F4:CB:83:AB:39:93:2F:65
X509v3 Authority Key Identifier:
keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4c:36:b6:07:a8:14:f2:aa:e9:cc:60:8a:43:da:f3:af:ae:
0f:6f:12:75:98:ba:8c:94:a5:90:76:a4:09:b5:ed:b0:a7:c2:
34:8f:3d:49:f9:c4:42:66:e8:36:20:a3:3b:11:1a:dd:65:af:
1c:6b:6c:55:c9:d9:3e:c0:c6:3a:f2:d6:3e:06:48:53:38:6c:
35:5f:9e:5b:c8:91:89:0f:b6:6c:94:d7:af:c6:6b:eb:d2:73:
69:a4:cb:9d:e9:5f:4b:d9:d2:c3:09:a9:08:2c:70:57:cf:40:
3d:fe:68:db:07:87:4f:60:69:7e:f6:48:aa:ad:21:a0:b2:ec:
57:b5:be:f2:c0:71:18:4c:1d:80:5f:ee:e5:0b:2c:c8:8f:21:
83:dd:57:ee:f2:25:4b:5d:54:ae:a4:6f:b5:93:fa:66:f0:cc:
3a:2e:bc:c1:be:59:28:1f:22:77:84:11:92:6f:0b:8b:b8:ba:
d0:b0:4d:8d:dc:be:63:2b:3b:61:9b:b3:b2:82:8d:dd:39:9e:
8f:a7:4f:08:14:c9:15:b1:49:f1:ac:e4:d2:3b:8b:d3:b3:7b:
cb:25:d9:b0:a2:12:7f:66:d5:54:06:44:42:9e:75:b9:9c:a3:
7e:3e:83:d0:a0:48:3e:8b:a2:77:00:28:06:ff:62:64:75:34:
fd:a6:90:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:02:57 2026 by rpki-client