Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: HuowcNSlCS+KlsnU6au+x7DIM4HIeFTrII7ykahrqSQ=
Subject key identifier: 35:26:B2:CB:C7:F4:B7:BF:2D:B2:AB:4D:18:F0:BF:E9:2F:13:5A:45
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 019D2A3C0C0E11723A4796F11FA8B380AD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 1652
Signing time: Thu 26 Mar 2026 13:01:11 +0000
Manifest this update: Thu 26 Mar 2026 13:01:11 +0000
Manifest next update: Fri 27 Mar 2026 13:01:11 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: TCFqO/ceDEjsJ9wxgxaonyLFr3YSN7ToE5q2LmwscMU=)
2: 85hHBUSy8Y2Mc7vYU29WfYNmQrs.roa (hash: hECfZ/fS6sGLnY/Td9cShCJ8J6B4XtgL9wvigKz0Uo8=)
3: LBH8ztFntHz17Sq_yk4WOvpZIOI.roa (hash: tYe43lNMSz/FpD84gMI0wKiTsaNLmmzOrcD2RhXlgfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:0c:0e:11:72:3a:47:96:f1:1f:a8:b3:80:ad:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Mar 26 13:01:11 2026 GMT
Not After : Mar 27 13:01:11 2026 GMT
Subject: CN=3526b2cbc7f4b7bf2db2ab4d18f0bfe92f135a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b0:70:42:0c:12:f5:a8:28:29:e9:53:90:dc:
5c:8d:e5:91:40:d3:e7:58:02:6b:27:d7:ef:23:3a:
44:54:8a:c1:4a:cb:34:09:5c:8f:70:54:3c:10:79:
87:fa:89:28:e5:ba:d5:2f:af:65:c0:0e:9b:c0:ed:
ce:78:28:ed:13:b4:18:5c:4e:d9:2d:35:ed:6d:4c:
3c:ca:40:24:20:3b:29:34:6e:0f:eb:9e:6f:f1:ee:
ff:4b:59:d3:25:66:5b:e5:ee:84:73:2c:c3:02:d1:
6c:17:dc:5d:6b:88:f2:14:17:3f:02:2f:5c:c0:92:
ca:56:c7:19:a2:5e:44:a9:45:6f:96:91:6c:45:90:
5e:18:b5:19:28:04:5c:f6:6f:6c:cd:3c:cf:69:85:
e9:91:c1:5e:ad:d8:86:6a:a3:9d:b7:f7:0b:8c:6c:
ef:0d:11:36:74:7d:60:ae:c2:5c:e2:85:17:15:1e:
7a:e0:08:da:19:f7:a7:b7:5e:9a:10:ed:78:75:20:
2d:69:86:37:da:90:01:5c:48:f7:75:31:34:d9:38:
6b:09:2e:c7:4b:de:ff:90:c5:09:e0:2f:4e:90:0e:
20:f6:2f:67:ed:d3:6a:8c:b3:34:de:f1:9e:89:95:
3a:80:fc:36:b8:df:50:2f:e2:1f:db:9a:77:fd:d0:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:26:B2:CB:C7:F4:B7:BF:2D:B2:AB:4D:18:F0:BF:E9:2F:13:5A:45
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:95:f1:8a:f3:ec:e2:86:fd:5c:2d:e9:c1:e6:96:30:e1:89:
4b:1e:1b:f3:6b:cc:3e:3c:b5:84:00:2d:2b:e3:13:3f:9d:d8:
d6:2b:13:c7:d4:3c:85:c3:a6:27:4b:5a:15:88:96:03:4a:d1:
1e:9d:3a:57:3a:e0:c3:9c:4b:da:e2:65:50:08:fd:b2:04:bb:
2e:2b:e8:9c:66:71:e6:f0:18:35:a2:7a:88:a8:20:3d:1f:bc:
93:35:fc:83:01:83:d3:85:6e:d6:a7:42:f2:4b:16:c3:d4:56:
62:a2:b0:7a:aa:29:d7:62:03:da:cc:82:ae:fd:da:c6:fb:24:
77:b3:1e:88:32:86:1b:0f:a0:ef:9e:23:0b:bb:90:a5:0b:ee:
79:88:12:a2:0b:e8:20:bc:70:6c:48:e0:69:00:4f:02:7d:3b:
b8:83:8e:e2:47:2d:f9:38:3c:91:f2:08:a7:1a:a2:60:8f:e1:
5f:28:09:43:d0:b0:5a:84:1a:5f:25:0c:2f:a6:b3:46:51:26:
1b:93:0d:3a:4d:9e:ab:0b:4d:cc:ab:43:63:ea:3e:a6:d0:1b:
f0:b7:28:48:d8:03:7b:b6:b4:41:de:ab:bd:5a:3d:62:d4:88:
26:c9:f0:21:8a:e8:4c:70:29:88:5e:68:36:99:08:73:7e:9d:
83:60:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:13:25 2026 by rpki-client