Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
File: 7jd-2foR7BmVVVl2LeBHpabrFKg.mft (raw, json)
Hash identifier: 0spFGC7Rcyu4xEGjQ7L1NPeSmUQIVlKfOrwYY36hdWc=
Subject key identifier: C8:2A:66:06:A8:E1:EE:97:36:BD:30:66:A1:C3:F2:51:E2:FE:D4:42
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Certificate issuer: /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial: 019D26CD1732AE12F430446F94F33EB3DB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
Manifest number: 0E1F
Signing time: Wed 25 Mar 2026 21:01:08 +0000
Manifest this update: Wed 25 Mar 2026 21:01:08 +0000
Manifest next update: Thu 26 Mar 2026 21:01:08 +0000
Files and hashes: 1: 7jd-2foR7BmVVVl2LeBHpabrFKg.crl (hash: a5Mf83fAhxkOdaoEXB8aZckrYJdnSC2t36cKBovXQl8=)
2: j6vNoMCJY2rJNTcFiFrK6BxceW0.roa (hash: Qbby+Zxos/Xwy+CO76y4SUXqNg4YubZrm7ece+VByCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:17:32:ae:12:f4:30:44:6f:94:f3:3e:b3:db:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Validity
Not Before: Mar 25 21:01:08 2026 GMT
Not After : Mar 26 21:01:08 2026 GMT
Subject: CN=c82a6606a8e1ee9736bd3066a1c3f251e2fed442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:05:5a:ea:ff:1e:b7:12:07:cf:39:e1:4d:
39:20:62:1a:60:f4:a7:77:f4:c8:56:b7:48:c6:29:
7e:49:7f:34:cc:64:48:1b:f0:61:e8:27:8e:e6:ca:
d6:e8:3d:57:70:42:e2:36:69:7d:08:8f:cf:38:64:
e5:e1:e6:49:dd:14:0e:e4:f7:64:10:a7:aa:c5:a9:
a3:20:32:a0:40:29:cc:bd:52:00:6b:af:a1:0f:6d:
1c:cc:5c:d0:45:5b:e7:75:09:e5:9d:95:47:ac:37:
b6:f0:36:fa:67:7d:e6:76:44:9b:14:b3:a1:8a:be:
8c:a7:fc:bf:be:31:c9:bd:d9:0d:08:57:19:0c:c1:
dc:6e:d7:d4:1f:51:ca:17:fb:1a:c4:a9:bd:64:8c:
74:74:91:3d:b5:d6:cf:0c:e8:21:21:4b:ea:d5:31:
a6:e5:4f:b4:93:f6:45:01:da:52:b6:1a:93:1f:25:
2b:66:4a:4c:15:7f:3b:7d:b4:94:e3:53:e7:04:67:
c9:1b:12:38:15:95:15:1d:f5:bc:08:66:40:7c:c6:
57:f3:cf:be:cd:0b:0e:70:5f:62:d7:34:dd:71:d7:
36:57:10:4c:2a:74:98:0e:3b:fe:0f:41:2b:0a:aa:
68:0f:00:dc:fb:6f:24:87:b7:74:67:5c:57:81:d2:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2A:66:06:A8:E1:EE:97:36:BD:30:66:A1:C3:F2:51:E2:FE:D4:42
X509v3 Authority Key Identifier:
keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c4:76:e3:04:d3:f3:23:8e:9f:f5:e8:6c:ee:5f:8c:63:ca:
19:7a:a5:08:fe:0f:2f:53:b7:b4:4f:74:17:a0:04:7f:eb:95:
28:6d:cb:af:3d:12:15:6c:ad:12:ad:b3:e0:83:b1:ee:cf:bb:
07:f1:93:4e:c3:4c:30:24:0b:ab:94:fa:b2:4d:d1:34:c7:46:
6f:2f:d8:66:8c:9e:ae:76:23:d5:b3:b2:f0:79:3b:a7:da:7d:
d9:32:71:9e:c5:dc:ab:a8:65:00:2c:31:3f:e9:b1:8a:d2:6e:
a7:50:3a:e5:8e:2a:50:d3:73:ef:a8:58:32:ac:8e:6f:ee:ea:
1a:47:20:d6:d1:a0:f9:8e:18:57:fc:50:5c:53:87:47:fc:18:
27:7a:c1:83:cb:6c:8f:3e:f3:61:7b:84:b5:0c:d1:11:bb:6d:
ff:b2:55:d4:f1:2f:71:de:fd:82:15:60:2e:a1:5e:53:76:0e:
8c:1c:0b:fc:ff:e8:80:5f:4e:a2:a4:b2:58:98:bb:ac:3e:ff:
cc:bd:e4:3b:d8:b6:67:64:99:c6:ad:57:55:6a:c4:cd:fb:3b:
6c:a8:5e:af:1a:cb:13:e2:56:3c:18:68:67:31:9e:b1:34:5b:
71:4f:30:87:0d:00:60:cd:61:6e:04:3f:c5:19:b5:38:7e:cb:
31:3d:02:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:20 2026 by rpki-client