Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
File: 7pzNOKXWSWiAvAlHBuaPoE-izZY.mft (raw, json)
Hash identifier: nM1Lz4eecYO7WLyH7dlhYDUMvhqP5vnNr319mAkwh4E=
Subject key identifier: 91:89:58:67:42:31:00:C2:F6:10:3A:26:BB:62:03:A8:B3:23:24:8A
Authority key identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
Certificate issuer: /CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Certificate serial: 019D2AA99F5930DE6828FBA4D7F8C00D6F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
Manifest number: 0444
Signing time: Thu 26 Mar 2026 15:00:52 +0000
Manifest this update: Thu 26 Mar 2026 15:00:52 +0000
Manifest next update: Fri 27 Mar 2026 15:00:52 +0000
Files and hashes: 1: 7pzNOKXWSWiAvAlHBuaPoE-izZY.crl (hash: k95SB6xXYhOcZI1C18b4lQ+Kos+Y5B3VOmr2KZsFKaE=)
2: KnWPKh7vBsCWw3P3QjUnnKOMfRQ.roa (hash: S6KoJEkh3kj6VhNs+5jJEnoThmoK6o74Ufogas8E/6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:9f:59:30:de:68:28:fb:a4:d7:f8:c0:0d:6f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Validity
Not Before: Mar 26 15:00:52 2026 GMT
Not After : Mar 27 15:00:52 2026 GMT
Subject: CN=91895867423100c2f6103a26bb6203a8b323248a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:82:63:6e:c1:5c:23:dc:65:65:01:49:8d:
e8:c5:34:22:91:0c:27:f2:02:84:2e:01:d4:0a:c9:
1f:70:62:7a:30:fc:d7:d9:f8:82:13:3c:88:0d:31:
6e:1c:30:1d:82:b6:7a:f9:18:e2:74:1d:fb:26:7a:
12:fa:f2:41:84:8f:a4:34:45:c6:4f:a3:cf:be:7d:
25:d7:b0:4d:b8:d8:35:01:19:68:63:f2:be:6a:55:
22:75:15:47:6b:6f:92:85:83:61:d4:97:60:97:7a:
57:4a:73:08:7a:59:c6:61:a7:86:5d:28:d0:62:d0:
af:77:85:cc:62:4f:98:d7:36:b0:6b:9c:1d:fc:7a:
14:21:3a:1a:58:7a:7c:cf:21:45:a0:38:7a:38:5f:
55:e7:98:19:32:d1:90:d8:30:5b:43:97:b1:53:cd:
04:5f:61:47:28:31:0e:c4:2f:75:dd:41:71:62:46:
ba:3e:e3:41:f8:43:20:80:6a:42:8d:09:03:22:9a:
e3:90:d3:89:2e:09:c3:28:f2:96:62:cb:cc:ce:b0:
19:20:fa:54:27:c0:52:ae:30:8e:61:6f:b6:36:f9:
c9:9e:e5:60:27:88:9f:3d:18:ca:2b:cc:1c:55:aa:
0a:8c:0d:bb:30:1f:9a:33:8d:07:82:b8:c4:48:06:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:89:58:67:42:31:00:C2:F6:10:3A:26:BB:62:03:A8:B3:23:24:8A
X509v3 Authority Key Identifier:
keyid:EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:66:2c:d9:cd:13:d4:6f:71:92:72:3a:0d:80:40:38:5e:8a:
77:68:2e:f6:47:2c:69:05:89:e5:23:9d:ab:ee:c2:7d:65:c8:
72:47:08:08:c1:79:56:47:93:d4:ae:96:b4:4a:5e:f8:ca:48:
e5:66:b5:78:7f:3e:b0:c1:de:98:b6:a3:08:00:64:78:0b:1a:
e7:83:ee:19:3f:ae:07:30:37:84:05:49:19:02:aa:89:43:c8:
a2:37:9c:41:97:56:ab:b6:95:bc:0c:d2:d2:c0:73:18:bc:3d:
b9:89:a0:6b:fb:e8:f9:6c:40:b5:75:91:c0:fc:14:a1:46:f9:
24:da:6e:8d:3f:89:14:cb:75:0f:60:25:6b:cd:06:62:bb:1a:
9b:c7:36:da:b3:7d:72:20:5e:aa:b5:40:1c:dd:98:c7:8b:00:
5c:9f:7d:f2:54:93:2e:ab:64:8d:09:95:f6:d9:0e:4a:94:66:
53:4c:93:32:77:b9:5c:ad:d2:b3:56:50:73:de:5b:16:6d:fb:
c2:b9:dc:89:0f:93:68:b2:64:aa:59:63:c3:de:d1:33:d4:71:
2b:98:ce:76:c1:7c:23:df:1a:98:b4:20:ca:fd:9e:89:69:db:
de:0c:49:44:db:d2:01:63:2f:4d:1c:fd:f5:75:5f:c1:bf:0b:
3a:7a:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:29 2026 by rpki-client