
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: RfYXznh6r+d5br6r0r4KYPCs6GSZMn/Q2cf26/TaWzw=
Subject key identifier: 36:51:F1:5D:A8:EB:DD:31:D4:FE:AB:43:A6:51:5F:6C:7A:69:6C:23
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 019D27723723B264EEA7A28093ADC9A69BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 15D1
Signing time: Thu 26 Mar 2026 00:01:29 +0000
Manifest this update: Thu 26 Mar 2026 00:01:29 +0000
Manifest next update: Fri 27 Mar 2026 00:01:29 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: qwWHAiYjuevL8r76wmin4Pblw11A/GxCkPMM4rVkyOA=)
2: Qy_dYjktdWTMwKlvlGZGCPvqukk.roa (hash: HyB9pQQ7gH7LCMcZGQN6Qp3fcmCpTOcafmUokwLnbLM=)
3: knZABU6A8bvYatZnGIApuHOdxF8.roa (hash: ZG17hdxOoYWoARbjcCtZd2S+SWHd1m7LFGZzi15/I2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:37:23:b2:64:ee:a7:a2:80:93:ad:c9:a6:9b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Mar 26 00:01:29 2026 GMT
Not After : Mar 27 00:01:29 2026 GMT
Subject: CN=3651f15da8ebdd31d4feab43a6515f6c7a696c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:c1:74:a1:c8:61:dc:96:24:e9:a2:b4:6d:
9e:ca:bb:af:a1:5c:56:d6:e6:39:cb:63:b6:5a:5a:
3d:4c:25:d5:20:a4:3a:89:d3:10:25:c9:5a:4a:0c:
2a:85:5e:77:50:7e:8c:c5:4f:66:21:a5:a1:c2:a0:
26:63:ef:3d:63:ff:aa:92:bb:41:64:e7:91:ae:8b:
e7:3a:9f:e3:62:e7:f6:15:94:66:a4:84:b9:59:39:
f4:18:05:25:b1:71:dd:91:16:8e:9b:89:e1:c5:18:
a9:33:3a:4e:fa:b7:cf:0c:ab:88:e2:72:0a:54:cb:
be:74:f0:bf:2d:49:10:f0:2c:e7:55:c5:1e:25:52:
e8:4a:53:a8:2d:55:ed:5f:3b:26:38:07:43:fb:36:
31:f5:6c:ed:d0:ad:1e:7d:b3:d2:87:e7:48:7b:d3:
f3:33:40:b3:d8:4c:7a:a7:a5:b5:a6:83:fb:88:96:
8f:81:35:f4:d1:d1:d7:bc:bd:de:8c:40:c6:e6:df:
cb:2c:45:cb:f9:6e:f4:e6:6f:f8:ce:be:a0:d9:3d:
de:39:d4:6b:07:9b:c2:d3:fb:eb:33:bb:e4:00:8f:
97:60:ce:7e:fb:32:04:00:46:6b:c7:db:71:f4:3b:
17:98:44:f2:d5:01:f7:50:d3:39:65:91:42:c3:81:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:51:F1:5D:A8:EB:DD:31:D4:FE:AB:43:A6:51:5F:6C:7A:69:6C:23
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f1:48:61:0a:b1:c2:92:10:bc:c9:c6:35:c8:28:a6:cf:ab:
ba:90:51:5c:b4:88:84:fa:d2:66:28:28:f1:f8:83:7e:b9:3b:
4f:49:99:a7:7f:f0:d2:cc:eb:c4:d8:3d:0e:a4:eb:b7:54:71:
f4:75:be:07:d2:4b:a6:74:ea:e0:f6:0a:b3:7e:30:67:20:5e:
9f:06:f5:c1:2e:bf:52:37:45:ee:ac:00:d2:1f:29:1c:91:98:
7d:7c:16:3e:19:e5:a7:e2:8d:8c:77:2a:8c:19:3d:ff:3e:e5:
41:8e:87:35:d5:cb:f8:cf:b6:7b:72:7f:f2:6a:45:9c:82:ab:
ef:04:f0:86:57:47:97:dd:ba:0c:24:46:7c:5a:c1:35:cf:84:
e9:25:58:99:58:5a:d5:0c:15:3e:bd:d4:c5:d1:fd:e1:bb:21:
eb:c3:50:74:e7:ca:30:48:3b:b2:4b:a0:e7:dd:71:2f:39:a6:
0c:d8:9c:15:86:51:50:bb:d2:af:08:38:66:cc:57:d2:ed:aa:
6f:cb:84:a8:d4:95:b6:c2:d8:6e:99:14:1e:ed:4e:dd:2e:7b:
2e:04:bf:cb:3c:ae:4c:bf:f2:62:9e:25:72:d9:fe:c1:8d:a2:
6e:16:4c:0f:af:1a:64:a6:db:d4:56:28:94:66:a4:7d:a1:b3:
77:9c:36:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:54:41 2026 by rpki-client