Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier: bUgJeIwf6V/3J0QjwBbwoFqSMFzzBv4S+xVDHAYLHew=
Subject key identifier: 8A:6D:B5:34:AC:AD:2A:DE:B3:B6:3B:8D:7C:25:3C:92:E6:D7:E2:BD
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial: 019D27A938E0672AF23E05BA9FFABCDC2BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number: 0C95
Signing time: Thu 26 Mar 2026 01:01:34 +0000
Manifest this update: Thu 26 Mar 2026 01:01:34 +0000
Manifest next update: Fri 27 Mar 2026 01:01:34 +0000
Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: 9/hT0KkULFfw3Zqts1cjvnwAQiY+OkwHPne8h5m8ing=)
2: BLLh5nNCz1s5if2pHYByIfYWqoE.roa (hash: EPJ+RLaqu85xGvwiEKDRnHSjYD9ruTYxv3tR7VjbDJs=)
3: E7Yzs4RQ5PAWanrzJaRetL_vIW4.roa (hash: ZfDaAmo4Ze/Cj58O8IkcEHyg6puoaRdc7XWQV2TfV6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:38:e0:67:2a:f2:3e:05:ba:9f:fa:bc:dc:2b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Validity
Not Before: Mar 26 01:01:34 2026 GMT
Not After : Mar 27 01:01:34 2026 GMT
Subject: CN=8a6db534acad2adeb3b63b8d7c253c92e6d7e2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:8f:fa:e8:ba:91:4e:89:78:ab:02:55:a2:
62:51:42:6d:7c:02:48:64:80:d0:da:31:4a:29:2a:
3c:f1:38:5b:71:22:99:02:bb:73:04:59:8e:a9:a2:
d0:95:4e:ff:89:b3:a4:64:0d:3a:a4:a6:d8:e9:bd:
de:ba:fc:30:c3:a9:9b:5b:53:7c:50:57:fd:8b:1c:
80:ea:cd:a3:0e:f8:da:25:0a:01:69:ec:64:25:45:
35:4f:27:a9:65:fc:0f:7f:3c:9d:57:68:58:40:63:
a2:15:ff:84:38:ce:3d:ec:fa:7f:52:20:02:ca:44:
5d:c3:ba:21:43:bd:82:63:90:22:bd:37:27:b3:75:
ec:ef:55:75:79:e3:7c:54:1b:a6:f1:39:de:b0:5f:
43:f3:71:4f:83:58:24:26:1e:a2:e4:c1:36:be:dd:
a3:76:1b:31:97:0e:da:9f:11:8a:80:89:e1:05:99:
32:32:ef:43:d1:04:88:52:e6:a2:b0:07:95:c9:96:
88:10:4c:4d:fc:3d:53:86:42:17:48:5e:72:44:5c:
43:b2:16:3a:12:3b:50:63:ca:0e:72:40:9e:f2:25:
d2:d7:1a:db:98:40:f5:fa:30:1a:16:fc:d4:79:f5:
4e:4c:dc:b0:61:c6:f2:e6:ac:3a:81:f6:f4:c9:6e:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6D:B5:34:AC:AD:2A:DE:B3:B6:3B:8D:7C:25:3C:92:E6:D7:E2:BD
X509v3 Authority Key Identifier:
keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:66:7a:50:04:9d:50:26:42:2a:55:df:d8:e0:cb:26:44:c3:
59:17:2c:db:7d:5e:d0:81:bc:4a:d0:59:18:85:85:8f:c6:0a:
ca:bb:32:02:39:c7:94:50:7b:db:da:0e:86:14:38:6a:86:c9:
33:b1:ec:55:35:ee:43:d0:b2:de:cb:70:ca:fa:ab:84:67:63:
c0:a0:a4:35:a9:90:6f:62:ce:17:33:0d:81:94:70:2c:aa:ee:
5c:82:be:a9:6e:eb:98:7f:7d:b4:81:50:52:1f:cd:ee:6c:e2:
db:5d:45:1c:9f:af:74:c0:9f:27:d9:d2:a3:9b:a4:e4:7a:7f:
98:6c:6e:5c:03:33:96:43:ac:0b:74:cb:86:c1:e6:df:46:45:
34:4d:d6:a2:44:ed:8f:87:34:4d:7b:e1:57:cc:ef:29:4c:8c:
1f:0e:b9:fa:91:32:4c:f3:13:89:6f:bc:ea:13:79:56:e6:52:
d2:8b:78:3f:d9:f9:f0:a8:f7:af:33:6a:a1:7f:f6:b6:85:7f:
43:8a:7e:e6:da:2f:88:f4:d0:90:77:06:d9:39:0e:61:1d:72:
e4:f8:27:48:96:3f:18:fa:e7:6e:18:4e:7a:b5:61:49:e6:99:
98:06:03:e8:12:f5:fe:ed:9b:a6:55:5e:ee:09:b1:00:15:4a:
55:27:b0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:05 2026 by rpki-client