Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier: gOj7FWA5AbNEasw5WIw27dxa2gZnGHLlobilCEPPcXU=
Subject key identifier: F7:43:FA:48:23:19:34:75:93:44:07:60:9F:2F:0B:C0:36:31:A6:6F
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial: 019D2AE13083519C0E560E03B80CC0C31EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number: 06F6
Signing time: Thu 26 Mar 2026 16:01:34 +0000
Manifest this update: Thu 26 Mar 2026 16:01:34 +0000
Manifest next update: Fri 27 Mar 2026 16:01:34 +0000
Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: 9pVPvnIkgOzbzLyVO0aWiOal+8ZPy0t4FnR2zIX0fe0=)
2: JU735praQ5D7ZouW4n12dU9bM-4.roa (hash: dXXp6fBpmMfrGgRgIwTGPcESSVbHsTgXLylCNhPpDJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:30:83:51:9c:0e:56:0e:03:b8:0c:c0:c3:1e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
Validity
Not Before: Mar 26 16:01:34 2026 GMT
Not After : Mar 27 16:01:34 2026 GMT
Subject: CN=f743fa4823193475934407609f2f0bc03631a66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:27:70:d3:54:60:ac:62:a4:ab:e2:72:d8:
41:99:c7:59:6f:09:7c:2c:65:59:70:24:7b:c2:9d:
21:fd:1d:6d:74:8d:b5:7d:0a:bb:e1:47:b9:8f:34:
b6:f6:85:34:af:22:92:96:29:29:57:a5:41:e3:f7:
0b:9d:9c:af:13:b7:1a:41:77:52:30:72:69:f3:46:
8e:98:53:c7:66:3d:66:ff:e4:c9:e6:9e:38:5a:8a:
4d:b8:b2:07:c1:b5:88:c0:e8:a0:02:a8:7a:88:7d:
bd:73:3b:84:e1:1d:97:29:56:92:46:12:1f:62:36:
62:c5:b2:d4:d7:2d:07:db:01:e9:b4:e4:17:21:37:
1c:92:b3:4a:3c:c4:43:cb:27:8e:ca:c3:df:14:42:
33:57:4c:39:c4:7e:4f:ab:37:95:87:4e:71:9c:b2:
4f:4e:8f:b0:65:1c:ff:a5:ad:e2:a9:c3:e2:aa:09:
9b:15:7e:51:a2:30:0b:1c:8b:8d:71:55:18:ca:b5:
71:3d:6c:80:2e:3a:ba:62:b3:83:c8:30:09:2b:8b:
63:91:c0:50:58:69:65:ff:84:f6:64:1f:06:ac:93:
51:3a:ab:dd:36:f9:85:49:d1:c9:ce:7a:e3:2a:4a:
65:c1:41:47:81:aa:0d:7b:a5:a3:2c:77:d8:03:47:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:43:FA:48:23:19:34:75:93:44:07:60:9F:2F:0B:C0:36:31:A6:6F
X509v3 Authority Key Identifier:
keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ad:65:52:1b:fe:bb:6f:2b:b8:28:6e:98:4a:9a:c7:59:89:
43:51:8d:55:25:e3:1e:97:9e:2b:d9:aa:ed:fc:3f:06:52:a7:
a3:7c:e1:08:42:f0:cd:8b:93:de:23:ec:b5:d2:63:75:f3:2b:
5e:d5:bd:80:d9:46:79:b6:6a:1f:7b:f7:b5:f4:8e:e6:ba:b5:
f3:e5:57:07:eb:5a:06:7d:b0:a4:3d:49:fb:99:6b:6b:a6:1a:
c0:e9:70:61:31:6e:bc:b9:4d:d1:fb:0f:56:f1:ee:a7:ca:31:
36:96:07:7d:27:a2:fb:49:f8:9f:24:07:80:c6:e5:9c:28:64:
94:fa:02:d6:56:b9:15:85:74:be:eb:e0:c5:01:f4:78:f5:b3:
8b:f4:55:e2:2d:f3:99:1c:96:cf:b4:da:af:95:ac:3d:32:35:
da:e4:71:e4:09:55:95:cf:4a:ef:f2:70:13:00:08:56:99:51:
53:1c:8c:f1:a3:4e:49:93:e2:2f:3e:ea:db:92:b5:d8:6b:fa:
ff:58:ba:bc:f9:84:a2:b4:97:d3:56:27:93:f8:c4:8f:fc:86:
93:b7:a6:9f:9a:81:ed:b7:bf:b2:85:d4:a3:b4:e9:2d:2a:8a:
c4:dc:41:b1:d1:a3:c3:0c:ee:61:6b:ae:88:13:f7:a4:10:94:
fc:fa:34:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:17:36 2026 by rpki-client