Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
File: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft (raw, json)
Hash identifier: 2CnMUfDmanQdZ3DgRyyvs6oiB6yoFwElNO3egEVc0JE=
Subject key identifier: 71:09:ED:A7:1D:21:C5:AC:D2:30:F4:B5:68:59:3D:56:C9:D3:C2:F0
Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
Certificate issuer: /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Certificate serial: 019D273B24C47F37CBB2799F423EE98B7B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 23:01:20 +0000
Manifest this update: Wed 25 Mar 2026 23:01:20 +0000
Manifest next update: Thu 26 Mar 2026 23:01:20 +0000
Files and hashes: 1: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl (hash: 7rzWV0AM4yIR2GcACGLB9N1IX//SkKHjXjhQCTwaG+U=)
2: a1yKgQiS1kQqWALGhb3azz9xPgM.roa (hash: QrlCwnjrUJMDarRIw4ovkDjdQhcibYW6n6I1xi7Yys8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:24:c4:7f:37:cb:b2:79:9f:42:3e:e9:8b:7b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Validity
Not Before: Mar 25 23:01:20 2026 GMT
Not After : Mar 26 23:01:20 2026 GMT
Subject: CN=7109eda71d21c5acd230f4b568593d56c9d3c2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:14:62:00:b5:f9:25:9a:85:28:6d:e2:fc:06:
cb:9b:46:2a:4a:f4:ea:3a:5b:ad:62:56:ee:6b:44:
3c:a0:5e:46:93:75:ca:52:74:14:61:e6:4f:0a:57:
03:21:e9:73:2c:21:95:3f:ad:c8:3e:49:ee:cf:14:
b6:b1:45:6d:3f:25:4a:aa:31:b9:e8:e3:3e:4e:0f:
01:78:90:8f:d4:76:5b:ca:9f:c4:82:fc:60:67:e5:
13:c0:c4:a7:74:3c:f3:c2:a6:13:07:cc:95:0e:1f:
20:f9:b8:be:b0:c5:41:9e:0f:b0:67:29:d5:05:77:
c8:e0:b9:3b:cf:98:83:cb:1b:4b:d4:9c:be:9e:fc:
b5:57:f2:45:d2:ba:59:ec:6b:52:2d:53:38:7e:f0:
e9:9b:ec:8b:3a:3e:a9:67:07:55:71:be:67:7f:52:
5d:ce:78:69:cd:70:d8:55:8c:26:16:47:98:fc:75:
3d:fc:6b:b1:74:2c:9b:84:94:96:eb:af:8a:98:d6:
f8:7f:f6:dd:23:e6:73:79:70:63:4d:b9:7b:1c:1d:
fe:83:a4:eb:b0:03:da:78:69:66:55:d5:23:01:06:
18:d8:eb:18:53:84:37:40:37:b8:9a:aa:13:e7:97:
8f:36:50:2b:8a:b0:0c:c2:d3:e0:a4:d1:6e:21:5a:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:09:ED:A7:1D:21:C5:AC:D2:30:F4:B5:68:59:3D:56:C9:D3:C2:F0
X509v3 Authority Key Identifier:
keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b9:a0:95:71:e7:ed:b6:51:44:6b:fb:65:83:d4:cb:ba:da:
d0:4b:25:60:84:fa:9f:73:67:a1:9f:bd:8f:38:df:2c:be:5f:
66:81:25:09:d0:4d:f6:34:95:9a:35:56:6e:ea:15:83:06:5f:
99:8d:09:89:2b:ab:07:7c:b4:ab:99:71:48:05:4d:86:99:64:
6c:3e:5e:b9:55:aa:35:82:74:f4:64:61:5f:3e:2d:4e:b8:f3:
3f:b8:14:7f:f5:bd:bd:b8:77:34:f6:d3:c4:4a:5d:80:87:6b:
28:30:86:1a:4c:f4:ce:e0:1c:58:9a:0f:52:54:cd:36:ca:9f:
7b:1b:be:b1:d5:cf:a0:f6:6d:da:3b:7b:2c:d7:60:5a:6f:23:
db:ab:03:6f:9f:0a:1f:73:ff:b7:ef:25:24:23:30:75:76:44:
33:e8:77:0e:4e:bc:78:37:de:4d:b9:10:b8:fe:c2:07:12:72:
33:34:57:13:92:2d:71:b9:7e:f7:cd:a0:b0:1a:7a:3a:6e:91:
a5:82:b3:d4:1b:91:40:e7:93:e4:17:90:5e:89:00:08:63:d0:
8e:cc:01:06:b4:52:60:18:f3:e1:8f:1d:0b:a6:54:66:ac:46:
97:40:d6:c5:cc:99:83:4d:4c:f3:3c:9d:d7:e7:e9:bd:6c:8d:
90:9c:aa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:31 2026 by rpki-client