Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/7u4EYVHEyMhCg2tG6paES1iQRfM.mft
File: 7u4EYVHEyMhCg2tG6paES1iQRfM.mft (raw, json)
Hash identifier: IJdLWdG5CFf/2JjkDQUyAEfu+aKW5xXWpBMiAVDxvNk=
Subject key identifier: B8:AB:7C:E0:E9:D4:A8:92:B0:3F:45:D5:2E:78:C0:4B:19:E5:59:18
Authority key identifier: EE:EE:04:61:51:C4:C8:C8:42:83:6B:46:EA:96:84:4B:58:90:45:F3
Certificate issuer: /CN=eeee046151c4c8c842836b46ea96844b589045f3
Certificate serial: 019D25833C4CC067E472899C5118CA6E7846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u4EYVHEyMhCg2tG6paES1iQRfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/7u4EYVHEyMhCg2tG6paES1iQRfM.mft
Manifest number: 2D
Signing time: Wed 25 Mar 2026 15:00:50 +0000
Manifest this update: Wed 25 Mar 2026 15:00:50 +0000
Manifest next update: Thu 26 Mar 2026 15:00:50 +0000
Files and hashes: 1: 7u4EYVHEyMhCg2tG6paES1iQRfM.crl (hash: Hxc4ZiBloskWdq7u9dzPfI0S3jJ1NaLxnFfZkoyLed0=)
2: KlsUbg9AMOo2OJW_BHZ60riJ1qs.roa (hash: HzGNBLf/SBMeM+8Ti4aGamBNAQLw7dOBmNy1c8GLu28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/7u4EYVHEyMhCg2tG6paES1iQRfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/7u4EYVHEyMhCg2tG6paES1iQRfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u4EYVHEyMhCg2tG6paES1iQRfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:3c:4c:c0:67:e4:72:89:9c:51:18:ca:6e:78:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeee046151c4c8c842836b46ea96844b589045f3
Validity
Not Before: Mar 25 15:00:50 2026 GMT
Not After : Mar 26 15:00:50 2026 GMT
Subject: CN=b8ab7ce0e9d4a892b03f45d52e78c04b19e55918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:26:16:1f:2e:23:2a:0b:31:89:3d:95:f9:7a:
87:03:c6:13:7c:a2:e5:77:d4:0b:9c:6e:f2:e6:92:
9a:5c:bb:52:c0:44:59:a7:b5:52:ba:6d:4e:bf:e1:
e9:35:d7:e4:82:34:ec:ea:8c:fb:7d:1c:29:68:a2:
76:2c:3b:b5:28:66:73:b8:ca:44:a8:c3:cf:e3:8c:
57:84:55:62:70:89:99:53:79:6e:8d:1a:65:00:c0:
53:f7:06:94:4f:11:b4:b5:71:df:f6:99:f1:00:a1:
93:fe:67:66:4a:0a:d7:f6:d5:b5:b9:f7:bb:2b:c4:
72:07:38:93:0f:78:cd:f0:40:ff:a4:5b:50:1d:5e:
c9:43:5d:7f:f8:93:39:92:e8:6e:64:4a:eb:b5:da:
55:1c:05:b4:17:21:5b:54:24:88:92:52:64:7f:79:
df:2a:04:36:bd:60:57:4d:3b:77:cc:8b:b5:b2:00:
e6:46:38:4f:fb:87:7f:b6:5d:ea:f3:39:19:6f:47:
32:4a:f1:a7:a2:6b:f0:c7:f9:ff:cf:d4:ee:df:06:
7d:48:53:f2:4f:81:bb:70:f8:25:14:e4:03:09:66:
df:b5:d1:f4:40:42:c0:66:06:25:92:29:a9:d4:5a:
e8:7c:fb:83:a9:6d:62:23:9a:99:6d:9f:f7:05:c1:
be:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AB:7C:E0:E9:D4:A8:92:B0:3F:45:D5:2E:78:C0:4B:19:E5:59:18
X509v3 Authority Key Identifier:
keyid:EE:EE:04:61:51:C4:C8:C8:42:83:6B:46:EA:96:84:4B:58:90:45:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u4EYVHEyMhCg2tG6paES1iQRfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/7u4EYVHEyMhCg2tG6paES1iQRfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/7u4EYVHEyMhCg2tG6paES1iQRfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e6:6f:c0:e0:42:71:b8:06:5d:fe:22:ef:6a:f9:fe:9a:70:
f8:8b:13:3f:9e:fe:ed:6b:d3:af:52:44:05:45:d6:62:a5:09:
bd:75:cb:66:38:1d:75:12:92:30:65:b2:91:74:8d:a0:8a:3f:
ae:98:52:75:f1:d0:f1:59:e1:b6:2b:27:fe:6b:8a:bc:c6:7c:
af:cd:ac:50:3f:37:4f:5a:eb:d2:86:f9:66:40:56:0a:7c:7e:
17:8f:ca:37:b7:17:3e:66:68:1a:82:8f:d8:81:f6:45:bd:c6:
be:23:dd:f0:ad:a0:bf:25:2b:cf:44:c8:ff:5d:e6:5f:51:c2:
9b:80:e0:9b:61:d5:45:28:d4:03:1c:d0:83:cf:03:53:a7:72:
75:bb:04:eb:d3:23:e6:a8:6c:1e:96:30:52:a6:92:f1:2b:95:
e5:9e:a4:9b:ba:c1:cb:68:c1:48:fd:01:a5:49:3b:21:c2:e8:
06:b9:68:ae:fc:79:76:5d:fa:da:2e:d8:5a:8c:dc:a2:ec:8f:
cb:5e:36:d8:a1:10:de:1a:e9:6a:ae:5a:4f:fc:e3:3a:d6:94:
df:17:88:9a:e8:a9:e9:1e:c7:57:b5:c9:d2:c2:9d:a5:6c:4a:
3d:43:f3:06:07:33:9f:91:ce:c9:bd:ca:81:c8:21:96:6b:a6:
78:37:90:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:33 2026 by rpki-client