Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File: 7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier: 4tEWIRCixuGFOuXo+SU82rhEOdZLcvFSfS7Yd4iG1V0=
Subject key identifier: B2:7E:A7:4D:AD:2D:C1:4F:E7:39:FD:17:A0:B0:77:AC:4B:AF:39:3C
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial: 019D2961054CE1A81ECA697B31B482D19089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number: 0F54
Signing time: Thu 26 Mar 2026 09:01:57 +0000
Manifest this update: Thu 26 Mar 2026 09:01:57 +0000
Manifest next update: Fri 27 Mar 2026 09:01:57 +0000
Files and hashes: 1: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: jonplOsDIAJbfy/URx0ye7QUMVwvNI52HAdwktUSloI=)
2: rkOQVmNrUrdY7_BGJo06hjnXKUQ.roa (hash: KQFoNA+jPIAj7lXy7/IWWZc0S9NISU/38W2iXUYI9HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:05:4c:e1:a8:1e:ca:69:7b:31:b4:82:d1:90:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Validity
Not Before: Mar 26 09:01:57 2026 GMT
Not After : Mar 27 09:01:57 2026 GMT
Subject: CN=b27ea74dad2dc14fe739fd17a0b077ac4baf393c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:8b:5a:cd:8b:b0:62:6c:f1:97:86:07:05:
e7:eb:d8:a0:3d:84:c9:e5:0b:5c:92:4f:b6:32:0d:
0c:80:26:79:3b:a4:c3:77:fd:b4:eb:47:9c:64:8d:
15:1b:ff:17:55:77:85:e3:28:da:5f:eb:53:ec:62:
1c:fa:c9:8d:88:f0:c7:c2:4f:59:9c:bc:eb:2b:7f:
27:b9:ee:91:eb:57:c7:d5:00:b1:bd:49:61:d7:48:
ff:24:93:1b:a1:3c:cd:50:d6:1b:b2:40:20:9e:76:
6a:1c:c1:f3:cc:f6:44:a4:bf:c1:00:b2:9f:e4:c8:
cc:bb:ff:05:5a:c0:b0:03:63:1d:12:70:7b:94:7c:
09:04:85:cf:f5:33:dd:a9:64:b0:c6:31:97:63:c0:
ca:f5:ef:2f:3f:18:13:55:87:ad:9c:d5:ad:bd:6f:
ab:d9:7b:78:59:ac:2d:75:5e:5f:41:08:e2:24:db:
ad:27:1e:8f:d2:18:9b:95:37:96:56:4f:58:c2:82:
fc:f4:fa:b3:e8:83:5c:92:08:3f:43:e6:40:c9:f9:
1d:84:73:f5:36:ba:38:eb:31:a6:bc:2e:9f:99:a0:
fd:ea:86:a1:78:2f:30:ff:86:12:02:ce:0c:52:4a:
84:cf:3b:06:ed:cf:f5:cc:ac:42:73:e6:16:50:f5:
c4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7E:A7:4D:AD:2D:C1:4F:E7:39:FD:17:A0:B0:77:AC:4B:AF:39:3C
X509v3 Authority Key Identifier:
keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ab:81:d3:88:f0:27:ee:fa:0e:e9:67:5a:58:94:6a:cc:ab:
b8:c9:be:d4:22:1d:b2:21:d7:a3:f0:40:46:e8:a3:19:0f:98:
ec:3f:cd:07:be:5a:47:68:e4:b4:ac:ff:a4:4b:9b:28:c2:ed:
d7:91:f7:80:7d:15:e8:9b:15:d3:01:ef:8d:1a:c0:38:ed:79:
67:1c:48:d7:4b:d7:d9:75:1a:4a:b5:bd:66:01:22:f6:ad:2e:
37:25:bf:76:40:7d:57:a5:79:c7:81:19:9e:db:48:75:e9:14:
16:ef:9f:b2:77:fb:0c:98:e1:c2:7b:dd:ea:be:a7:88:2c:af:
80:63:04:af:b5:10:f5:4c:79:d8:41:10:51:85:5f:21:36:df:
26:54:89:97:38:5b:d1:67:2b:12:5d:31:12:9d:f3:ac:81:37:
a8:3f:7b:a8:13:f5:06:35:74:60:dd:a5:fb:83:e3:af:e1:a0:
19:09:ab:0c:f3:0b:80:d4:11:e7:52:0d:7d:d5:0a:cb:f2:8f:
9f:8d:5c:88:7a:09:98:d5:f7:86:11:63:0d:94:79:9b:81:7c:
5a:c1:22:ce:60:07:ff:78:61:1a:3a:da:f4:d8:80:ef:79:8c:
7c:30:c8:4c:77:aa:17:74:0f:9e:34:61:b2:18:37:ce:be:1b:
39:95:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:09 2026 by rpki-client