Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
File: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft (raw, json)
Hash identifier: B1grQ9TmV6TqWmixMj7+kFiOYHn61KkzMnw8k5Iw7R0=
Subject key identifier: 32:98:2E:77:2C:6B:EF:73:91:F7:94:FF:C1:23:81:7E:22:68:C8:31
Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
Certificate issuer: /CN=ed32ef0caf0a057529fb928f76962a7425390dba
Certificate serial: 019D27E04D277FD159948AB55DDBB4A52786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
Manifest number: 033C
Signing time: Thu 26 Mar 2026 02:01:44 +0000
Manifest this update: Thu 26 Mar 2026 02:01:44 +0000
Manifest next update: Fri 27 Mar 2026 02:01:44 +0000
Files and hashes: 1: 4ck5stj-Nruh5mOMgR2qNBplGK4.roa (hash: pnWvPZcJH3rubSBQDARfPzyblV+Aac+zG4Cuud9DAE8=)
2: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl (hash: KuOvrLi41gHuqgGXSau2RiNsgmnGrRwq0RO7jOzTvBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:4d:27:7f:d1:59:94:8a:b5:5d:db:b4:a5:27:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba
Validity
Not Before: Mar 26 02:01:44 2026 GMT
Not After : Mar 27 02:01:44 2026 GMT
Subject: CN=32982e772c6bef7391f794ffc123817e2268c831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:7e:5b:c5:0c:91:11:42:86:82:0f:94:c2:
84:41:e3:ec:15:5b:31:b4:84:76:b3:8c:be:36:df:
5c:36:0f:d5:e0:13:92:6e:6b:27:bf:69:9f:f3:94:
c9:c4:e5:da:26:4e:c7:a9:9b:b7:ab:b5:de:a7:b5:
39:32:fe:6c:ca:42:9c:97:91:6a:42:eb:81:40:0e:
4e:bf:e1:cd:1b:77:9c:95:12:a9:19:cb:fd:6a:b5:
5a:6d:cd:87:fe:88:59:a1:c7:4b:55:66:de:c0:9f:
8a:bf:8b:de:10:1b:bd:a8:42:ca:18:6b:0d:60:85:
d4:86:a2:8d:9d:74:ec:30:a4:f2:6c:53:4c:96:42:
b5:19:a8:9d:99:08:f5:00:19:da:22:7a:c8:65:2b:
5f:08:f0:8a:ea:b0:bd:d5:97:6e:0e:58:29:4c:30:
ee:2c:3a:37:f3:a0:6d:67:e4:c1:5b:67:83:c6:fa:
6b:2a:2d:e3:f9:a7:cc:dd:22:2e:0c:0a:ef:6e:f0:
af:be:ed:e9:7c:92:a9:77:0f:ca:a5:cf:7f:c9:e8:
9b:a3:e0:2d:8b:b1:6d:b3:17:d1:22:5a:8a:83:c6:
23:3f:81:a6:19:a6:5b:25:7a:77:0e:c9:20:b4:f4:
e4:ff:01:df:40:68:b8:af:bb:8f:3b:c3:80:f3:ba:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:98:2E:77:2C:6B:EF:73:91:F7:94:FF:C1:23:81:7E:22:68:C8:31
X509v3 Authority Key Identifier:
keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9f:06:94:d4:1a:a9:50:6c:1c:41:22:37:1b:5b:ef:70:ab:
da:e2:74:d3:39:d1:c2:36:b4:c2:a6:77:88:6f:54:92:e7:53:
05:dc:21:f6:48:a9:74:48:7d:16:19:49:28:fd:c4:79:ce:67:
a6:dc:e2:d0:c6:08:11:07:b8:93:c9:42:53:74:4d:00:d0:1d:
3a:b4:e0:12:10:71:62:8a:37:84:fc:b4:f7:cb:60:44:5f:da:
cd:55:88:f8:85:cb:f4:c0:18:a2:70:f7:e2:8e:fe:dc:06:95:
8e:03:e2:86:5e:32:1f:06:05:82:80:da:8b:f7:ab:e8:2b:8e:
88:a8:b3:ad:52:fb:fe:b6:b0:ac:4c:dd:60:f7:f5:a8:eb:f6:
41:cd:49:8f:03:fd:07:95:0a:42:3a:52:55:11:fb:05:56:5c:
6f:00:0e:09:f0:66:2b:31:5a:7b:41:e5:50:d2:ac:57:75:2c:
2d:35:e0:28:7f:3a:2d:06:ad:b7:4a:3d:27:78:8a:d2:df:11:
d5:5e:e0:d1:1c:25:b9:27:94:32:b7:ea:dd:55:eb:d3:98:6b:
da:ba:34:39:43:be:92:d4:ad:21:26:65:ce:da:ee:40:1d:39:
7b:ed:6d:40:fc:52:4a:4c:4d:2b:c6:08:ed:e0:70:33:89:8e:
e2:37:00:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:47 2026 by rpki-client