Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
File: _7up17hmEtT4fPFhcf-CsrRBNk0.mft (raw, json)
Hash identifier: YV6XzFxw6wM9tO8Hle4uH11HmUyLTsZRinJQRi9Tke4=
Subject key identifier: 98:50:A3:A6:B1:AB:B4:07:20:60:06:B9:32:33:F9:70:27:88:83:32
Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Certificate serial: 019D25BA3B0D5C49084C3F1F7FF0B770BA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 16:00:54 +0000
Manifest this update: Wed 25 Mar 2026 16:00:54 +0000
Manifest next update: Thu 26 Mar 2026 16:00:54 +0000
Files and hashes: 1: IuddFKkHgI9EpqcNiGzO6nW7ZKg.roa (hash: OtPSvPPL7VmcdioSeh1OC7elWB71YMWR1bBkxbubrgo=)
2: _7up17hmEtT4fPFhcf-CsrRBNk0.crl (hash: q2uzBU/kob2kpqXnMQwh/uZ/yq7qUXcr50+pbeb7qTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:3b:0d:5c:49:08:4c:3f:1f:7f:f0:b7:70:ba:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Validity
Not Before: Mar 25 16:00:54 2026 GMT
Not After : Mar 26 16:00:54 2026 GMT
Subject: CN=9850a3a6b1abb407206006b93233f97027888332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:ad:c1:45:08:20:86:57:e3:19:ef:b3:b1:
3a:fe:0c:88:c4:8c:92:6f:30:ad:6d:bd:80:e2:08:
bf:9f:b9:d1:7c:ad:3e:c2:31:de:4a:e6:79:ea:9d:
bf:58:de:30:ef:b6:fd:87:bd:83:3e:2f:7c:3b:a2:
0f:fa:9d:7f:6b:25:86:cd:6d:2f:bd:a4:63:a4:92:
de:2f:4b:b8:ac:af:2e:62:f5:3a:ca:8e:50:3e:fb:
e8:a0:2c:de:41:8a:ae:2d:f5:c9:ad:a7:f3:79:ab:
46:ab:03:71:3a:b3:97:99:32:a2:e2:b8:79:02:a6:
d8:a2:cc:01:3b:47:08:7a:a9:c4:41:14:c6:ef:90:
ee:73:46:56:d5:22:78:1b:d5:4a:5a:ca:3f:14:2c:
12:17:3f:b1:be:73:35:04:b1:1d:da:6b:df:4e:50:
8b:b0:fd:ce:35:6d:f2:11:da:a3:ec:a3:e1:f1:09:
13:a6:a4:33:d2:50:c3:ad:35:8a:a0:ba:cb:9c:c6:
f2:bf:6f:a2:11:b0:36:da:f8:f8:8d:00:9a:e6:9a:
b0:d5:0c:f0:f4:71:91:6c:61:86:fe:ae:12:fb:26:
88:5f:15:e0:25:5c:53:57:93:47:29:3c:94:bf:9c:
8b:e8:d2:bb:65:95:9d:07:b0:bb:29:04:cd:6b:aa:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:50:A3:A6:B1:AB:B4:07:20:60:06:B9:32:33:F9:70:27:88:83:32
X509v3 Authority Key Identifier:
keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a7:1b:ae:ed:b9:9d:6c:74:5e:57:db:93:72:8a:ac:01:da:
e9:7c:00:15:78:b9:7c:71:aa:6a:f6:c5:fa:1b:df:d5:e0:b0:
c3:75:45:8a:26:46:cc:cc:fa:4c:0a:a1:bd:16:e2:50:85:d9:
86:cf:84:0b:9e:6a:93:8d:f3:98:df:0e:ec:24:45:a4:72:1a:
0f:b7:bf:11:79:07:83:68:56:9f:7a:98:4f:66:13:29:c2:7b:
98:96:e7:fa:e4:5b:31:41:4c:f5:f0:22:be:8f:e4:be:a3:60:
64:b2:6d:48:83:90:2b:4e:cc:71:66:f1:d8:c8:1d:9f:e0:bc:
e1:a6:b8:fb:62:5b:07:13:d0:a9:84:f9:22:d5:b5:d4:d6:9f:
b1:77:9e:d4:a1:e8:15:69:c7:ac:eb:9f:28:11:04:35:ce:78:
f8:d4:9f:b6:2d:0c:fd:6b:83:be:a8:c2:43:7c:d7:ab:16:77:
d5:ac:23:b1:56:71:49:56:a0:fb:f5:1a:3c:0c:1a:77:04:3f:
b3:44:94:07:8c:28:91:78:a2:19:e1:3b:24:1e:58:4e:3b:de:
4f:f2:d0:11:6e:d9:9a:51:60:5c:36:e1:45:de:25:a6:92:ce:
9e:e6:b0:93:c4:42:96:aa:9a:b4:22:86:36:da:65:a6:0b:b7:
ba:c3:c4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:21 2026 by rpki-client