Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
File: 7hgkJLSEGX3DBFJAktzdmS_L5L4.mft (raw, json)
Hash identifier: fMM8aEbRRQ7FGor2v8uIjZHdFZ9fgkcUSrkTCboDrkw=
Subject key identifier: 76:6C:C1:B1:88:AF:AF:28:E3:77:C3:94:50:B4:D3:30:03:D6:BC:19
Authority key identifier: EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE
Certificate issuer: /CN=ee182424b484197dc304524092dcdd992fcbe4be
Certificate serial: 019D28F2D91CA2552F6E5DF5B7367DAADBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 07:01:37 +0000
Manifest this update: Thu 26 Mar 2026 07:01:37 +0000
Manifest next update: Fri 27 Mar 2026 07:01:37 +0000
Files and hashes: 1: 7hgkJLSEGX3DBFJAktzdmS_L5L4.crl (hash: lQnd9lv06Kgu/+8aKV7EESF4OdywuRcJB4+TAXAXPsU=)
2: AqgdamS7ykTc5_HqfSgHZzg-Qso.roa (hash: DOyihYhY01+95T0gRT92vlpyvdeigYu6nAKnqJSzkek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:d9:1c:a2:55:2f:6e:5d:f5:b7:36:7d:aa:db:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee182424b484197dc304524092dcdd992fcbe4be
Validity
Not Before: Mar 26 07:01:37 2026 GMT
Not After : Mar 27 07:01:37 2026 GMT
Subject: CN=766cc1b188afaf28e377c39450b4d33003d6bc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:8e:06:d0:95:db:70:de:f0:79:22:85:66:
eb:d6:51:ea:e9:32:68:47:ca:27:fe:04:71:0d:68:
5a:ec:05:95:95:33:53:e5:c7:da:15:ed:cb:96:38:
2a:fd:de:8d:75:80:3f:44:fa:ee:4c:94:17:dd:ef:
49:1f:db:89:89:b9:6b:7e:ea:63:9f:a2:11:33:93:
e3:91:b8:6c:bb:34:73:57:ff:1f:cd:75:01:e3:f0:
2c:f7:c5:64:da:67:a8:19:95:35:32:91:68:99:cd:
3c:0f:fc:7f:54:28:81:9d:d2:ec:a6:3d:8e:d5:1d:
bb:64:ed:98:ec:9a:6c:6e:82:e3:42:62:90:6f:0b:
30:9b:a4:fe:8e:98:bb:ba:79:30:ad:e6:60:ec:66:
ef:1a:a2:43:c2:a6:ff:17:8b:88:98:f5:26:5b:45:
7f:50:d8:df:da:a2:05:97:d2:fd:e6:ad:a4:7e:d3:
38:70:ac:71:53:8c:03:6d:33:35:8f:54:d8:32:10:
b9:b0:56:34:09:9d:24:45:cc:be:d4:e6:f8:00:5f:
9a:eb:97:14:69:78:0a:8d:fa:e1:66:48:25:54:8f:
ab:65:50:3e:3b:e9:8a:af:14:d1:49:3b:fa:90:51:
ca:d8:9b:1b:ff:17:c6:85:0a:3c:a8:00:14:fb:c8:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6C:C1:B1:88:AF:AF:28:E3:77:C3:94:50:B4:D3:30:03:D6:BC:19
X509v3 Authority Key Identifier:
keyid:EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:50:0c:92:03:10:01:e1:ff:46:0a:24:ec:a8:e1:bf:34:6f:
80:55:92:f1:d8:ea:cc:16:94:fb:fb:dd:d1:7f:8d:e4:79:fd:
76:a8:b2:83:c6:60:3f:a6:5d:cf:67:ea:2b:bf:da:6a:1d:94:
42:2e:4f:27:26:51:0f:c5:39:45:bf:7b:bd:e1:7b:73:1c:7f:
a4:27:d1:70:fa:40:19:dd:87:0e:83:d1:58:d5:aa:88:c9:23:
13:10:ce:16:6a:2c:b4:00:64:0f:a3:5d:26:3b:56:fd:34:63:
c7:e3:7c:fe:80:cf:09:85:3f:e7:49:e9:ed:89:fb:87:e8:64:
85:01:68:24:84:de:fc:3f:06:85:9b:5f:e4:06:90:91:51:d3:
d8:4f:d1:97:b6:c3:7f:b3:23:2a:d8:24:7b:0a:58:a5:df:7f:
34:fd:01:74:3a:e7:be:22:69:34:c1:6e:3b:f5:ac:2c:d9:72:
ab:27:cb:8f:f7:0a:c4:c6:95:f4:81:c1:b6:89:0f:cb:b4:e1:
a3:e8:94:66:13:27:b0:49:e9:cb:77:55:5c:d1:57:f1:06:9e:
fb:f4:ec:79:0c:f8:d9:fe:6c:59:86:8f:a0:c8:45:16:64:e3:
e0:3b:c5:3a:50:13:5f:69:9b:f1:3f:3d:b1:d0:c7:1d:ac:d3:
45:91:16:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:58 2026 by rpki-client