Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
File: p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft (raw, json)
Hash identifier: rUXjy3oHg3CWc+wCRYUzS1LZSrdAwIRCxOSW/CxMlqs=
Subject key identifier: F1:02:FA:F9:D7:7B:6C:04:92:65:3A:A5:84:D9:D8:98:1F:07:2F:F8
Authority key identifier: A7:B4:87:BE:4F:27:C9:1A:E3:2A:17:BA:2D:ED:67:C3:D5:15:3D:3C
Certificate issuer: /CN=a7b487be4f27c91ae32a17ba2ded67c3d5153d3c
Certificate serial: 019D25F1901FD118CF2A223A7830AB0DEF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
Manifest number: 83
Signing time: Wed 25 Mar 2026 17:01:21 +0000
Manifest this update: Wed 25 Mar 2026 17:01:21 +0000
Manifest next update: Thu 26 Mar 2026 17:01:21 +0000
Files and hashes: 1: F4WIL5lRn1e8KEX9ZaKzwbn8OK0.roa (hash: fsVPNfzwVtcxP1d7ng53S1s+p3QUE/oW7iQYmnK5p84=)
2: p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl (hash: XFvwmrsm3Exmy+6iJcqqyYg4dv0nqyNwgNnazQs4Wtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:90:1f:d1:18:cf:2a:22:3a:78:30:ab:0d:ef:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b487be4f27c91ae32a17ba2ded67c3d5153d3c
Validity
Not Before: Mar 25 17:01:21 2026 GMT
Not After : Mar 26 17:01:21 2026 GMT
Subject: CN=f102faf9d77b6c0492653aa584d9d8981f072ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:18:73:9b:36:38:f6:76:49:dc:3a:8e:2c:bd:
91:1d:6b:98:66:ac:63:33:79:83:0c:c9:07:65:b2:
87:1a:58:3f:1a:7d:c7:0e:44:aa:0b:41:9e:c4:18:
b4:39:34:cd:5b:e4:da:34:59:45:81:39:a5:55:d1:
54:fe:4d:2b:b0:02:1b:a0:74:7a:d3:a0:85:2f:2b:
d5:a5:f8:d5:52:8e:de:0d:ea:90:9d:c5:db:4c:d8:
ca:a8:05:97:4d:a5:de:4a:e3:7f:c4:21:73:f3:f8:
c6:c0:b2:3c:42:83:c8:bc:66:1d:f6:2c:0a:9a:72:
63:9b:ed:cc:98:7a:d5:bc:7a:d0:89:f3:47:a5:42:
1e:16:56:bb:88:8c:31:4c:fa:d9:7b:be:56:33:98:
8c:78:cf:26:0e:31:4d:91:62:fd:3e:8c:7e:6c:61:
75:0a:10:36:a9:ea:b3:e5:15:7b:65:92:12:7a:64:
1b:fe:46:5b:66:f7:f9:f9:31:82:79:a7:94:b8:b4:
f6:ec:42:14:d0:d5:c9:10:cc:02:73:47:cf:4f:f6:
5b:78:d6:d4:60:29:25:ba:3c:98:b4:30:58:e7:33:
6f:14:5f:22:ef:09:b7:26:54:74:48:e3:c8:f7:9f:
3b:d6:26:35:c2:d1:ff:f1:87:87:b0:b8:98:f0:35:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:02:FA:F9:D7:7B:6C:04:92:65:3A:A5:84:D9:D8:98:1F:07:2F:F8
X509v3 Authority Key Identifier:
keyid:A7:B4:87:BE:4F:27:C9:1A:E3:2A:17:BA:2D:ED:67:C3:D5:15:3D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:81:8d:da:a5:e2:08:c2:01:d5:c9:9d:5b:09:1a:bb:b9:4a:
9b:bd:a9:b2:42:d6:fd:3f:28:40:b8:a6:45:b8:c0:97:d6:24:
35:60:51:e9:86:a8:31:44:f7:4e:d3:a2:06:26:d1:55:68:af:
47:01:90:87:1f:dc:ff:a6:4c:b7:0b:a2:0a:64:98:7e:df:fd:
76:05:3a:fe:be:59:d0:d6:45:f2:a1:65:38:6c:99:39:f1:2d:
41:b8:44:ee:43:86:d6:d2:c8:49:e6:d8:6d:a7:32:4c:09:f6:
67:c8:b6:91:11:b3:ab:9f:3f:b0:e5:f6:ca:92:5d:4e:e7:02:
62:97:fe:70:6c:54:f0:50:8b:c3:0c:3b:92:25:dc:71:0a:c8:
59:61:6f:11:9c:65:06:b6:e5:fd:ec:c0:d6:96:80:04:e9:a7:
e9:e8:a0:eb:13:c9:6f:f6:eb:f3:b2:96:0b:c4:61:4a:b7:e3:
78:6b:f2:6c:c6:b5:b9:d5:3a:a2:ab:0c:ec:77:d8:9f:9f:62:
bf:dc:27:83:01:a4:37:05:0b:bf:bc:47:42:24:66:ba:71:ea:
bc:de:ad:3c:6e:76:71:52:61:a6:7b:02:49:e9:69:40:c5:a1:
e0:e2:4a:bd:0a:94:27:0d:2d:ac:9a:fd:6b:0d:54:cf:48:05:
07:b1:77:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:21 2026 by rpki-client