Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
File: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft (raw, json)
Hash identifier: rrDVS4sj8iYUfWHxbZMXkK7jq6KTK8tNPy2IbklJXNw=
Subject key identifier: 66:3D:5B:A1:14:AD:C8:97:9B:61:10:C8:61:52:B0:ED:73:CD:4F:70
Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Certificate issuer: /CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Certificate serial: 019D29972FF5C5A6743934473B55DFE44C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
Manifest number: 162B
Signing time: Thu 26 Mar 2026 10:01:07 +0000
Manifest this update: Thu 26 Mar 2026 10:01:07 +0000
Manifest next update: Fri 27 Mar 2026 10:01:07 +0000
Files and hashes: 1: 2tKSrvE8w4OPUMtHHmn4NBgdIN0.roa (hash: xtQTDappKS+L7HJWwmh8B32VXucrBAKNvYHP3fwsAXE=)
2: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl (hash: 3qND2F9+COG7d9HSWbHvJpGVIaV/23M0DrZwxi4ArYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:2f:f5:c5:a6:74:39:34:47:3b:55:df:e4:4c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Validity
Not Before: Mar 26 10:01:07 2026 GMT
Not After : Mar 27 10:01:07 2026 GMT
Subject: CN=663d5ba114adc8979b6110c86152b0ed73cd4f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:56:eb:03:c1:88:46:04:08:e6:29:1b:d2:79:
96:d4:ad:fe:9d:d7:a8:76:96:70:88:82:87:8e:27:
17:7e:b5:31:43:9b:87:e1:b4:63:38:16:86:a9:64:
51:9b:17:24:3e:3b:24:a6:ba:c2:7f:1c:2a:8b:0d:
9f:23:32:65:19:df:11:bf:c4:0d:05:a1:96:1a:86:
61:4a:d7:c8:27:66:36:f5:15:e2:9c:f8:2f:6c:57:
4e:eb:ee:4a:02:e1:55:5b:39:77:1a:d4:b9:5a:fd:
c4:3e:83:3a:ea:bd:f4:17:90:9a:43:19:79:f2:22:
dd:b1:bb:49:58:97:c2:dc:e7:72:c5:53:e1:ba:6b:
cb:6c:cc:e8:c4:ae:bc:c6:96:81:74:d8:f9:b4:28:
48:19:73:79:d4:82:68:64:2c:db:2c:d0:73:0a:de:
8b:02:12:cd:36:7d:66:df:8a:51:a3:7e:3c:cc:a4:
15:fc:0e:36:e4:8a:05:99:d0:4e:10:2e:95:bd:78:
8b:2f:12:16:50:09:2e:23:23:a5:cb:19:cf:f6:67:
ec:80:a0:21:b3:6c:82:c4:ef:bc:f5:09:57:17:ea:
b5:c5:31:66:8f:0c:10:51:50:ed:ac:68:e6:11:46:
72:96:bb:cd:27:55:1e:4e:5e:a0:56:cd:c6:cd:c4:
c8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3D:5B:A1:14:AD:C8:97:9B:61:10:C8:61:52:B0:ED:73:CD:4F:70
X509v3 Authority Key Identifier:
keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:27:f3:b7:fc:2f:54:b6:a7:d4:01:75:14:19:ad:f8:e9:a8:
48:c0:f8:40:cd:1d:af:2d:49:9b:de:d3:86:f0:b4:3a:0b:74:
5d:a7:d1:64:8c:13:d9:64:df:f6:c5:2f:1a:b6:35:b5:b8:39:
7b:06:bc:34:0a:c2:9d:24:e3:72:12:09:4a:5e:b1:3f:c1:8a:
4c:7d:e0:c8:f1:0a:8a:7e:1f:36:07:17:8c:63:c3:33:e0:1d:
46:10:f8:33:d0:39:5e:74:32:9b:af:d1:13:82:7c:ea:b1:86:
b2:c6:96:d8:87:9e:78:b7:d2:e0:8d:d2:ef:5e:f0:9d:e4:72:
32:19:d7:29:7c:65:1b:6a:be:66:c7:00:01:69:35:9d:f9:a5:
48:bd:aa:e8:c6:51:d9:5c:87:2e:5e:98:18:28:1d:7e:17:c3:
3b:26:41:e2:e6:67:73:bf:6a:d1:66:8a:56:96:e2:ad:3c:9f:
66:9f:c1:f9:5a:45:81:1f:61:e9:de:17:07:a9:bf:16:94:04:
4b:32:36:b4:9f:1e:2c:d6:5f:bd:6b:77:08:10:6a:d2:e3:85:
be:cc:58:63:a1:de:7c:5f:fb:5e:f7:f8:17:75:12:29:0b:e1:
5d:0c:5e:c2:e7:dd:70:99:09:12:69:ed:df:43:03:92:80:c8:
ee:a9:67:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:02 2026 by rpki-client