Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier: /5rf/KChhAZ9KQlV2ncngTWUyYwrDhqVZCpAbNib1RY=
Subject key identifier: F1:A3:48:9B:72:23:DA:F6:49:87:20:39:9A:38:AC:D3:5A:65:1F:60
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer: /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial: 019D28F2696781E60185EC8B41F3D01DF7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number: 13CC
Signing time: Thu 26 Mar 2026 07:01:08 +0000
Manifest this update: Thu 26 Mar 2026 07:01:08 +0000
Manifest next update: Fri 27 Mar 2026 07:01:08 +0000
Files and hashes: 1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: rP5xtuLqsGkRfajCi7IhGLZ2WqPoG5+s+d5z9uCsvPw=)
2: 88NWVToLEwKK_Mpgeyzi5wA0xpo.roa (hash: l2cWTge/R/tklyYKEf8+fIr98gBT5pBqi6tErfFhBF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:69:67:81:e6:01:85:ec:8b:41:f3:d0:1d:f7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Validity
Not Before: Mar 26 07:01:08 2026 GMT
Not After : Mar 27 07:01:08 2026 GMT
Subject: CN=f1a3489b7223daf6498720399a38acd35a651f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:28:47:99:98:83:41:8b:69:dc:42:d7:43:
99:09:20:b8:94:19:49:d7:d0:47:51:e3:62:d8:36:
92:3b:4f:f5:cd:7a:ce:67:b6:85:7f:b3:0f:e5:7a:
29:83:53:b2:d0:68:82:ce:ae:8c:13:1e:08:7e:c2:
c3:5d:ba:15:e9:7e:80:bf:47:0c:67:ad:6b:ce:4a:
21:77:73:ff:52:89:b6:c4:da:40:9f:fe:79:a0:44:
eb:b2:ba:61:70:4a:58:6b:5f:e3:a7:d0:d4:24:20:
c1:db:2e:59:49:27:03:bc:0c:d2:7c:1c:f7:21:34:
e3:8d:8e:d1:a1:2d:10:c6:6c:4d:6c:82:10:d2:b9:
c0:e9:01:8e:a1:0a:61:f9:87:62:22:8b:dc:c6:aa:
5b:71:f3:6b:4a:3f:bd:c5:80:fa:a7:ba:35:b5:3c:
d7:b5:79:3e:7d:09:38:3c:68:07:69:08:d8:c8:f4:
b4:da:c0:36:6e:8d:f8:d4:b9:28:17:8c:d0:56:28:
d4:7f:fc:5d:1d:8b:19:d7:1e:75:af:6e:0c:58:b7:
b7:a2:1a:5b:0e:bd:31:a8:36:31:23:94:58:88:fa:
4d:fe:f7:de:72:91:21:ee:7e:55:02:fd:e6:87:8d:
21:61:51:0d:88:48:89:78:3e:62:93:b3:87:42:b1:
d4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A3:48:9B:72:23:DA:F6:49:87:20:39:9A:38:AC:D3:5A:65:1F:60
X509v3 Authority Key Identifier:
keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:cc:c0:42:c3:44:a7:0f:ac:0e:0d:62:1e:85:64:27:84:5f:
72:64:35:25:3a:d5:86:94:6e:e5:e2:ff:c5:94:bd:22:3e:57:
1b:a6:b0:19:47:81:91:bc:58:d9:b3:97:e2:6d:f0:06:30:f6:
b0:04:01:a0:9e:a5:da:7f:10:1e:80:24:b3:2f:29:f5:6c:0c:
c2:76:85:07:14:07:a7:7e:38:bf:f4:24:16:97:e3:16:1e:a5:
fa:76:2a:66:f3:2a:5a:1d:dc:0d:6d:79:67:93:25:e6:66:6e:
2d:47:46:4b:89:18:6e:3e:41:af:86:fd:44:0b:5b:63:e3:3a:
7c:78:4f:f2:a2:6c:d1:79:9d:1a:e8:7c:c3:c1:c6:43:96:d3:
0f:01:cf:2e:b4:c7:1f:35:a1:cf:63:e0:05:c0:41:09:1f:67:
7f:a9:13:05:61:ad:51:5a:5a:4a:e4:ca:53:6d:4d:97:e9:3e:
61:aa:53:29:b2:1d:ad:be:aa:35:9e:e9:5f:75:e0:58:b6:ea:
72:ee:a2:ff:5f:1b:92:7c:a1:02:36:83:e8:0f:98:a1:e8:9d:
af:9c:b2:53:c5:6a:ec:73:d3:33:bd:14:b3:0b:e6:cc:4e:ac:
d9:fe:29:15:d7:5f:e4:50:c9:82:75:3a:c5:84:6f:10:fd:c2:
f3:b6:db:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:30 2026 by rpki-client