Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
File: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft (raw, json)
Hash identifier: hnx1II3+PtbIzp0cOsli1wj4cT/q752hPE/HzNiKy/Y=
Subject key identifier: 41:8C:AA:41:EF:E4:C9:37:EE:28:EE:2A:3A:9B:A4:74:3B:05:68:A6
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial: 019D2772B07A62CD6E01FA89BC807F0EDF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:02:00 +0000
Manifest this update: Thu 26 Mar 2026 00:02:00 +0000
Manifest next update: Fri 27 Mar 2026 00:02:00 +0000
Files and hashes: 1: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl (hash: LJtr0U6Sm4fTQ07X3Jo/iVGWT5oI/Jt3HW+DWllnD8M=)
2: 7ymJo6ToPK4ZRuDJzRSPCXxaPm4.roa (hash: ytpfJ9vNS5JwRc89yU0uWlEyTvzj77675KecMolldFc=)
3: Es0ua-vxyxjcsLvaoi1mzGRFLDs.roa (hash: f1TQFLKcOmbSU1W2vbI+gyaehRaTN+oWeXN0L2tAh3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b0:7a:62:cd:6e:01:fa:89:bc:80:7f:0e:df:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Validity
Not Before: Mar 26 00:02:00 2026 GMT
Not After : Mar 27 00:02:00 2026 GMT
Subject: CN=418caa41efe4c937ee28ee2a3a9ba4743b0568a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:48:13:35:88:17:ff:a0:d5:69:66:fc:98:
16:5d:d7:29:9e:79:fe:5a:b4:72:d1:f8:ab:f0:18:
13:a9:7b:d7:59:8b:bd:8f:ce:b9:96:cf:b6:f1:19:
5d:1b:ed:77:3d:db:d3:bf:8d:62:3f:4f:99:3f:09:
4f:1e:74:5f:63:c3:f7:f4:e7:c9:d8:d1:3b:f8:5b:
91:ab:36:bd:e8:e9:c2:18:c8:d7:d7:ac:4f:2e:82:
34:1e:5f:f6:e2:2f:f3:9a:11:ba:b9:37:63:c4:92:
74:ac:cf:26:b2:81:7b:27:c1:c5:30:db:1c:a4:59:
c1:63:d7:85:b3:70:af:0f:f4:0a:8d:93:c1:54:a7:
57:a5:f4:fb:6b:20:cf:e8:91:40:43:4b:fa:31:14:
4d:30:0b:d7:80:0c:02:ed:78:29:42:e1:61:db:2b:
77:95:09:2d:55:a1:f2:12:63:76:53:cf:75:4b:00:
56:b1:08:3d:5a:e3:41:4e:08:f3:0d:b8:c2:2e:72:
4c:9d:8d:b3:da:39:ba:f4:60:bd:14:44:64:3f:12:
1f:0b:73:5d:3b:72:d6:31:ed:35:9e:ae:2d:6c:59:
a9:72:ea:c1:20:c1:f5:07:dc:76:d9:bc:f0:85:2d:
38:2e:b2:89:f5:d3:ff:fa:53:96:d0:0c:1a:b0:2b:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8C:AA:41:EF:E4:C9:37:EE:28:EE:2A:3A:9B:A4:74:3B:05:68:A6
X509v3 Authority Key Identifier:
keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4f:fd:34:88:c7:83:de:73:42:3e:c8:48:98:3a:91:e5:af:
1e:ac:e0:8d:17:d9:3c:a9:b9:d8:94:f9:92:b2:e8:40:5b:87:
c5:55:63:be:52:13:10:fb:a0:79:39:a3:20:ba:60:cd:b6:6b:
68:6a:47:8c:f8:40:4f:a8:f4:45:ff:a0:a7:b0:25:bc:bf:b3:
f8:47:56:24:f3:97:9d:38:d5:60:93:28:15:fc:37:e0:e7:b2:
61:4f:aa:45:06:17:1b:57:ba:61:88:13:7c:a4:87:ca:59:c3:
88:ed:34:52:e3:31:49:20:02:13:29:6a:1e:ed:c0:f4:6f:27:
8a:df:68:59:55:9b:04:e1:d8:b6:8d:79:0b:b3:b4:1c:07:07:
d7:a9:90:74:de:c4:a6:2d:1c:4e:ff:8a:28:c3:25:a3:f5:b8:
46:1f:a0:2d:62:f6:ac:1e:58:60:17:0c:18:32:6f:20:3b:be:
a8:d0:f0:53:8e:c9:91:07:3a:f1:c0:ad:64:cc:f8:4e:42:1f:
1c:aa:19:2b:ac:5c:f0:eb:5b:a2:27:d2:0c:cf:94:53:ee:ef:
46:cc:21:70:bf:1f:cd:9f:cb:d7:47:f0:da:bf:e8:35:64:09:
c9:90:74:4d:be:28:e7:1a:a1:ae:8f:ce:9f:19:60:04:64:73:
8e:9b:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:20:27 2026 by rpki-client