Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
File: 7GV-idqz-xXjuuDrGsf6yT32OF0.mft (raw, json)
Hash identifier: nwIbyZDtgZvGH+LS+zIsvfWNPS+EOOnDoX6McWZl1y8=
Subject key identifier: DD:A3:D7:7C:C2:0B:C6:4E:8C:46:A2:AD:4D:71:DE:46:1E:7A:30:77
Authority key identifier: EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
Certificate issuer: /CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Certificate serial: 019D2816A8A96A10442647A498E7342752FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
Manifest number: 0878
Signing time: Thu 26 Mar 2026 03:01:06 +0000
Manifest this update: Thu 26 Mar 2026 03:01:06 +0000
Manifest next update: Fri 27 Mar 2026 03:01:06 +0000
Files and hashes: 1: 7GV-idqz-xXjuuDrGsf6yT32OF0.crl (hash: yNBF+GkVGhw+oFbBff2O0wuthCtzRGUh1vZ4qXziVDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a8:a9:6a:10:44:26:47:a4:98:e7:34:27:52:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Validity
Not Before: Mar 26 03:01:06 2026 GMT
Not After : Mar 27 03:01:06 2026 GMT
Subject: CN=dda3d77cc20bc64e8c46a2ad4d71de461e7a3077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:33:7c:09:f1:fd:cc:87:23:2c:3e:0e:ca:
58:04:e1:33:6a:61:06:28:2b:08:39:00:04:38:8f:
21:72:a2:e1:31:04:65:83:27:83:ca:d7:55:be:60:
a1:58:6e:d8:ab:3d:ae:89:e2:a7:74:dc:d9:41:63:
4c:81:0d:a8:23:6b:9f:47:05:31:9f:1c:5c:b9:f1:
4b:02:2f:c5:03:fa:bd:17:dc:a1:61:27:3e:b4:9e:
2b:61:f2:b3:0a:d7:4b:f4:ae:f8:01:a3:6c:86:c4:
c6:ba:f3:44:2e:25:73:3a:89:59:ec:7e:fe:c9:02:
6a:0c:d7:fb:50:45:2f:16:43:9f:d8:15:5e:ec:90:
88:c7:f0:88:b3:46:bb:d4:13:14:95:60:32:ab:1d:
b4:3f:f3:2d:cf:4d:ce:ca:95:e2:75:98:c0:97:50:
47:c4:8f:e9:00:ff:eb:15:f3:fc:c5:91:67:8a:91:
ca:3a:33:75:b8:df:99:a1:b4:ff:44:8c:54:0c:a1:
be:0a:49:61:d2:81:d1:99:a0:1a:41:8b:3f:41:92:
55:2a:55:ff:91:99:19:4d:c4:d8:dc:34:cd:de:79:
32:f1:51:d3:fc:da:3e:62:7a:95:8e:cb:35:02:86:
1c:b7:86:b9:dd:14:39:d4:ba:3c:0a:40:45:fd:e3:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A3:D7:7C:C2:0B:C6:4E:8C:46:A2:AD:4D:71:DE:46:1E:7A:30:77
X509v3 Authority Key Identifier:
keyid:EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:14:4d:c6:0c:cb:45:d7:fb:dd:94:94:a8:b7:87:94:53:29:
a9:2a:f0:c4:8a:8e:52:a9:48:65:68:bf:97:db:7f:53:4a:c7:
39:ac:95:bd:bc:c2:8e:21:c1:ab:f6:d4:8e:a8:4e:27:fc:0c:
85:47:ef:01:18:c1:b1:f1:0e:ad:54:11:99:0b:60:62:64:10:
47:fe:87:ab:4b:80:a6:eb:db:26:2c:1b:5b:54:a8:25:c1:7e:
da:8c:17:21:bb:c6:2b:dc:1d:92:45:18:4c:6e:fc:b6:6a:ca:
bf:0b:a1:1b:ea:ce:0e:fa:22:04:13:0e:f1:e4:f4:3a:fc:c5:
63:b5:e6:5a:fd:93:8e:80:f2:33:8b:75:fa:ad:b4:72:21:0b:
8e:5b:b8:99:2f:19:b3:24:4d:83:e6:c6:1f:dd:99:be:bc:cf:
e5:22:76:81:b0:26:6c:88:e7:fb:b7:01:31:37:b5:6e:7b:b1:
2d:83:a8:45:d7:d4:90:bd:14:af:6d:16:c2:4c:fd:ec:1a:2e:
5b:09:27:d4:a1:b6:65:e8:5a:86:43:2a:6f:5c:03:87:95:c8:
42:59:19:3c:53:c5:3c:05:bb:85:82:1d:d8:36:0b:45:53:7f:
64:4d:52:f3:db:b5:2b:fe:7e:bd:86:56:2e:d9:c1:a5:49:2e:
ec:72:a7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:02:30 2026 by rpki-client