Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
File: 7N86SgXzcFD3wDedNPT0gUvSCd8.mft (raw, json)
Hash identifier: wfoLL3nGlPbI3JINtBrY86YQ0a9xvvgDmPuYudCqH6k=
Subject key identifier: C8:BE:68:43:82:AD:86:8C:25:D7:A9:5A:3D:1E:E9:5C:35:85:78:CD
Authority key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
Certificate issuer: /CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Certificate serial: 019D27A941C4F8CCE89ECFB8EBD9147C3B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
Manifest number: 03E0
Signing time: Thu 26 Mar 2026 01:01:36 +0000
Manifest this update: Thu 26 Mar 2026 01:01:36 +0000
Manifest next update: Fri 27 Mar 2026 01:01:36 +0000
Files and hashes: 1: 7N86SgXzcFD3wDedNPT0gUvSCd8.crl (hash: 1lmyv+pDVnhFVinZ/4TSHWYOInkUq1R2QVAiwQCnfKg=)
2: HRNjMQScROeFTp_2rmfTV1Pqr40.roa (hash: 66mHtRw/URStOe2xC3SxpwCWQ3KY1R/KgZMB+PrJKAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:41:c4:f8:cc:e8:9e:cf:b8:eb:d9:14:7c:3b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Validity
Not Before: Mar 26 01:01:36 2026 GMT
Not After : Mar 27 01:01:36 2026 GMT
Subject: CN=c8be684382ad868c25d7a95a3d1ee95c358578cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:26:97:8d:59:b1:7b:24:99:ee:8a:14:d8:b0:
79:f0:ce:3e:ad:ff:bd:1e:c6:14:0e:9a:af:fc:a8:
b6:59:a7:be:a3:d8:f9:04:c8:a1:6d:91:fc:c4:98:
ac:71:3b:68:d0:af:e5:cb:2a:e8:f2:a2:9e:02:0b:
f4:c2:cb:11:13:80:43:04:66:d2:84:63:d7:00:4c:
3d:91:e8:b3:45:0a:05:b8:cd:0c:2f:0f:78:60:16:
7f:7b:2d:8e:36:68:11:a3:a7:bf:c5:ee:dd:a7:60:
2f:ec:49:b0:ae:02:ec:c2:c5:d9:82:5e:49:b3:94:
a2:08:9d:16:2f:16:de:7e:2d:75:a0:db:74:9b:f8:
cd:bb:4c:2c:02:08:fb:9a:4d:6b:9e:5d:2e:e4:94:
de:df:59:47:fe:33:94:82:a4:43:1c:e4:6e:1b:6a:
6e:ba:46:a0:48:2a:c6:7e:f1:24:f2:bc:3e:53:8e:
51:73:8b:a3:12:b7:2e:18:49:38:cf:cb:f4:d6:17:
41:a3:7a:a6:b7:2f:b1:20:b3:14:38:e1:b9:32:5e:
2a:f4:73:25:9e:27:f5:e3:4f:e7:0a:8c:ab:e0:21:
4d:15:04:30:58:eb:ad:5a:70:c1:b7:09:2b:44:93:
2a:ae:19:48:72:ba:65:62:33:f7:20:00:e1:b1:2d:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BE:68:43:82:AD:86:8C:25:D7:A9:5A:3D:1E:E9:5C:35:85:78:CD
X509v3 Authority Key Identifier:
keyid:EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:93:a0:24:0f:c0:f7:b0:4a:2f:d6:06:60:8c:64:36:ca:f3:
76:19:57:70:0b:a0:57:4c:b1:a7:b6:c1:a9:08:71:0b:b5:76:
07:1e:cc:0f:55:9d:e2:0a:1f:f0:54:1e:39:27:5b:23:77:70:
f6:a9:77:fe:d8:69:82:aa:40:e3:b2:53:52:7f:1f:c8:32:5b:
5d:88:7e:7c:47:a6:61:b3:3c:c7:60:31:d1:2f:9a:c2:3e:b2:
d0:d9:4f:27:3a:f2:fc:d9:db:44:cf:ba:74:78:63:25:68:f8:
0e:12:58:26:75:2b:19:ce:bf:12:d6:38:cd:29:c8:10:6a:14:
33:9f:7f:d3:89:6d:90:fc:3f:19:22:cc:c1:a5:a6:42:81:73:
c5:c8:6d:ee:dc:47:70:ad:3a:21:47:e5:c7:6d:e7:cc:17:62:
ed:81:39:1c:f8:7d:e7:58:26:bd:6d:f5:9e:08:78:92:2a:fa:
4c:aa:02:76:95:19:a9:5e:8c:fd:55:39:cf:21:76:8c:88:e8:
8e:26:33:8a:7b:d5:03:8a:c3:5d:29:2f:2c:75:6a:d4:f6:0f:
b8:b6:ce:cb:e8:d0:f3:97:cc:58:5c:d4:51:42:c8:9d:16:6d:
62:87:e6:89:f8:97:41:94:a5:5c:d0:59:aa:00:13:cf:49:ca:
a8:c6:59:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:21 2026 by rpki-client