Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
File: _7ml8yjMMGUnzExHS9xLE6dGoag.mft (raw, json)
Hash identifier: O1sWxqozt4ekjFmnjCGfTPAwxCDj4bezcy1PWq8TUqA=
Subject key identifier: 60:F9:FD:C3:8F:94:49:0A:F1:CD:63:A8:73:BC:DA:35:A6:8E:40:25
Authority key identifier: FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
Certificate issuer: /CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Certificate serial: 019D2AE1099C39E4E4C73C72B2EF0B7CECD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
Manifest number: 8D
Signing time: Thu 26 Mar 2026 16:01:24 +0000
Manifest this update: Thu 26 Mar 2026 16:01:24 +0000
Manifest next update: Fri 27 Mar 2026 16:01:24 +0000
Files and hashes: 1: TjUAHrNX6D8KKFwZiePYTV0m3bk.roa (hash: 61/mGPF5yOHT2ppU4Jvr6b/vuT6FmCh4sw4OsDecTfo=)
2: _7ml8yjMMGUnzExHS9xLE6dGoag.crl (hash: UofncPvC7mrm3bsvAKtR+Ss3I6Shqh5FOYNrdufB+p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:09:9c:39:e4:e4:c7:3c:72:b2:ef:0b:7c:ec:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Validity
Not Before: Mar 26 16:01:24 2026 GMT
Not After : Mar 27 16:01:24 2026 GMT
Subject: CN=60f9fdc38f94490af1cd63a873bcda35a68e4025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:1a:e3:1c:d0:c9:2c:9f:61:da:63:91:6b:
29:93:be:c0:13:45:9d:ed:eb:2b:de:3e:a4:07:bb:
42:18:be:37:28:17:2d:ce:3b:93:16:c9:c3:c2:ea:
56:be:b1:7f:39:e1:33:28:0f:95:3f:6b:21:e4:e1:
eb:e4:e3:3c:b3:93:f7:f5:44:56:f4:7a:1f:e5:95:
0c:3c:bd:5b:95:f8:88:47:74:bb:48:e8:0c:50:5a:
af:b9:b2:54:b5:38:52:b0:c5:60:dc:7e:af:94:09:
c4:ae:fe:b4:b9:9d:e3:92:c9:62:20:49:88:0f:0f:
c9:e7:8c:99:9f:2a:29:99:7d:5a:2d:d7:05:d1:51:
47:68:21:58:99:6d:4e:0b:6f:d4:19:58:8a:f4:f9:
f4:95:7f:4a:64:34:76:b3:b9:d6:8e:3b:5e:9a:de:
9b:ff:bc:f4:66:ae:3c:5c:15:2e:cd:56:91:b6:14:
86:fc:f9:ee:91:ec:47:1b:0e:04:d2:71:47:f6:d8:
47:55:e2:ef:fc:c2:29:4f:74:97:5a:61:aa:34:0d:
e1:66:20:ef:e2:22:74:e8:9c:20:2b:38:ce:f8:52:
a1:95:7f:b3:15:8d:85:c0:0d:a7:b9:11:f0:17:4c:
17:d6:99:f8:41:62:f8:01:ff:81:8d:7b:c8:ca:5e:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F9:FD:C3:8F:94:49:0A:F1:CD:63:A8:73:BC:DA:35:A6:8E:40:25
X509v3 Authority Key Identifier:
keyid:FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e3:ca:e4:78:2f:5f:88:fe:87:36:d7:4f:b7:ed:4f:f6:98:
ca:ab:f2:60:95:08:21:fc:4a:10:92:c7:5a:e4:79:41:08:86:
b3:e0:3b:40:8c:cb:e4:3d:c6:d2:db:85:66:88:07:8a:5c:f1:
3b:e0:9f:f5:ca:52:91:e9:3b:61:fe:24:bd:fb:a9:82:56:ee:
18:3f:95:b5:a8:f2:c0:be:3a:e8:f1:6c:2c:8c:bc:a3:89:cf:
af:0c:45:d7:0c:4d:7c:f9:5c:a7:1a:59:13:03:22:a7:90:ff:
88:7c:90:e9:fb:0d:78:cb:67:89:2f:1b:7c:0d:3d:c3:b3:46:
fd:eb:ce:6a:f3:71:30:0f:95:6a:1c:a3:3d:5d:de:d7:44:4c:
cf:ee:2e:86:19:8e:31:0d:63:3a:be:76:b8:51:18:6f:4d:da:
7c:02:41:6a:93:ac:90:fc:b0:05:7f:a2:4e:01:d6:bb:0c:86:
d3:57:63:a1:db:99:4f:5c:7f:ab:15:46:d2:5f:0e:57:dd:55:
99:cf:27:7f:e2:91:18:48:c3:8b:02:29:96:a3:57:c5:b5:1b:
68:d4:d6:9c:d2:72:80:8c:b7:50:3c:f7:ee:a9:35:c6:31:53:
2d:b4:fa:91:f8:04:f9:9e:58:df:85:b3:e6:cc:47:af:b3:3c:
06:ac:d9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:34 2026 by rpki-client