Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier: E0JPvAdTJ3x7zCXPc2zysVdAcTh/AmGxhZbf0qLWi5Y=
Subject key identifier: FA:0E:ED:0E:7D:78:F8:F5:1A:4D:E6:82:DA:7D:52:16:A3:8F:88:75
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 019D25F14A54D160A9D6293F99669E9AF703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number: 12AD
Signing time: Wed 25 Mar 2026 17:01:03 +0000
Manifest this update: Wed 25 Mar 2026 17:01:03 +0000
Manifest next update: Thu 26 Mar 2026 17:01:03 +0000
Files and hashes: 1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: vdeG/UNWApz1TTvxr58KHdKoPeCgsGvZ6J99Qb88D9Y=)
2: Z-Nhf0GUm-eK6gBfuWRH4mBMDa8.roa (hash: j8yQFLI888ZXRlZcfp3XqLieyu9/rqxMNp1WWGddyFc=)
3: zQxCSJAybTKhMbu9tj9geo08EHM.roa (hash: vRuFfeMEunDY9UG2VQ5bdPd5mpRSySgDc592VktLEXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:4a:54:d1:60:a9:d6:29:3f:99:66:9e:9a:f7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Mar 25 17:01:03 2026 GMT
Not After : Mar 26 17:01:03 2026 GMT
Subject: CN=fa0eed0e7d78f8f51a4de682da7d5216a38f8875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:f4:1e:ad:7f:92:a8:1e:5e:be:bf:36:51:
11:ac:b9:62:cf:4a:60:5f:24:4c:b9:84:cd:87:c4:
27:3e:37:01:c0:a7:10:26:73:20:20:6b:c7:c8:62:
db:a4:65:5d:5f:61:9c:57:f3:60:5d:3d:d2:aa:69:
db:36:03:d1:ae:d5:0e:7d:4d:3e:64:62:2e:4d:90:
a9:5d:92:7e:c5:9f:e1:01:5e:f2:f9:fa:bb:31:66:
4d:78:37:c7:1e:e8:33:90:cd:8c:bf:b6:71:02:b5:
60:b9:b4:1e:b1:1a:61:25:3f:56:7d:a0:c0:86:55:
14:ea:35:10:9a:30:3b:ac:29:f8:d9:64:02:87:de:
41:0d:50:cb:6e:14:39:ae:5e:39:2a:8f:a7:76:d7:
07:54:ff:cd:d2:5f:3b:8d:d3:13:ed:a8:65:b1:c6:
64:a1:a3:7f:2c:26:ff:ff:b7:35:e9:d3:c1:aa:f3:
fc:04:c9:4f:4b:f0:51:be:71:15:40:b8:d6:26:3e:
7b:ea:1b:06:34:3e:e3:60:63:6f:37:f4:f9:f5:dc:
40:56:74:16:10:a0:7b:fd:82:fb:87:8d:08:12:88:
9b:e6:63:22:96:6c:43:64:20:3b:a6:16:bb:a0:c4:
3e:0e:a2:cd:c4:b2:ce:9d:e3:db:15:e8:03:d6:68:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0E:ED:0E:7D:78:F8:F5:1A:4D:E6:82:DA:7D:52:16:A3:8F:88:75
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:33:ab:08:ca:c2:0d:80:26:a2:10:d5:f4:82:62:6d:fb:2c:
cc:73:ee:ec:c7:e9:1c:12:db:e2:d2:1c:1f:4f:80:8e:32:dd:
fa:0c:a8:99:2b:13:6a:17:94:57:05:ad:da:22:b1:82:45:38:
26:f9:30:a8:86:3d:fc:69:de:ea:99:f9:f7:59:04:e4:53:a8:
9c:06:ff:07:32:b3:60:f9:dd:ba:a9:55:54:24:e4:51:0c:95:
e5:28:34:fc:da:59:b8:6a:4d:ab:47:7a:76:75:fc:e1:fa:56:
e2:68:0c:52:24:ec:84:83:c2:0e:0f:ce:c8:d1:30:4f:ad:4c:
e6:9b:1a:88:e3:4f:39:fc:7d:a3:73:c1:59:73:58:50:f5:36:
ae:47:fb:8f:88:86:0a:eb:56:2d:d3:df:db:74:fb:88:3b:25:
be:6a:5d:ac:48:02:42:45:37:74:79:c9:63:56:a0:2a:98:64:
ee:75:8f:b2:5f:87:e8:99:c7:01:7a:4a:49:91:3c:48:a1:69:
83:34:6d:04:81:96:c9:d9:bc:9d:a5:4c:fd:23:7a:83:4b:8a:
18:6d:2d:b2:cd:d5:ff:47:a2:92:83:cd:f1:15:da:fe:35:9f:
e7:a4:22:67:70:66:d5:17:eb:e8:f7:a5:2a:87:b4:06:62:80:
3a:12:9a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:04 2026 by rpki-client