Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
File: R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json)
Hash identifier: ttFE26MN0PrM8F6cd1IdKJb+pqzM8fhWmeYfb5g3iNw=
Subject key identifier: DF:35:8B:35:99:7D:E6:72:F9:78:71:5F:C1:39:AD:61:48:EC:B3:AA
Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
Certificate issuer: /CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Certificate serial: 019D281677D176B2DD50F9CE88E4847F45F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
Manifest number: 0824
Signing time: Thu 26 Mar 2026 03:00:54 +0000
Manifest this update: Thu 26 Mar 2026 03:00:54 +0000
Manifest next update: Fri 27 Mar 2026 03:00:54 +0000
Files and hashes: 1: 6gLUsBkG-831LvTIKcOMB6anenc.roa (hash: 0P++i0Px+QNc8KIJpDVgXYAXiNKGP7NiivE2XFE/A70=)
2: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: EEzpF5Q2mvbqEXmSfrNxYfMf0AGhPGlbScN69IE3XPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:77:d1:76:b2:dd:50:f9:ce:88:e4:84:7f:45:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Validity
Not Before: Mar 26 03:00:54 2026 GMT
Not After : Mar 27 03:00:54 2026 GMT
Subject: CN=df358b35997de672f978715fc139ad6148ecb3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:98:1c:2c:1f:45:14:06:8a:ed:f5:b2:65:
5c:a3:ae:57:ca:82:8f:80:53:6c:79:5c:12:2d:e4:
c8:a3:4d:5f:22:e6:55:d7:24:48:e6:9e:65:14:25:
d4:98:45:96:ce:84:6e:f9:6e:86:c4:1e:65:ec:bc:
30:ff:1d:ce:8c:38:34:dc:7d:df:35:f6:e1:64:72:
75:69:46:82:f1:5b:89:6b:8f:56:4c:1e:6a:65:e1:
13:27:b5:18:40:13:07:7b:bb:0b:ae:48:0b:c6:b8:
3a:b1:c4:51:d9:ad:ef:53:12:e8:49:51:38:ff:38:
58:21:ec:d1:5e:88:e7:8b:65:84:90:25:1b:02:e6:
5a:9a:a0:14:3a:57:e4:29:93:fb:0f:ef:82:53:6f:
78:09:40:c4:26:7d:16:df:b3:cb:b1:e0:b9:99:f0:
05:dd:a8:3f:45:f9:bb:b3:6d:53:25:c1:20:4b:19:
53:f3:26:0d:f0:fa:0b:49:17:c3:06:f4:0e:4b:97:
0b:9c:8d:d7:93:42:9c:0e:16:12:41:bc:7e:c8:0b:
9d:17:bf:95:51:6d:0d:0f:a0:51:d2:6e:f5:b1:36:
1c:fb:7f:43:b5:1a:59:9c:16:ac:6b:d4:88:11:69:
df:28:fd:d4:a4:ec:50:76:9c:1e:a5:04:20:ce:46:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:35:8B:35:99:7D:E6:72:F9:78:71:5F:C1:39:AD:61:48:EC:B3:AA
X509v3 Authority Key Identifier:
keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:32:7d:21:c2:34:a1:5d:58:f9:ff:31:2a:15:b6:76:06:d2:
35:3d:47:80:1e:ef:60:96:c3:bb:e4:ba:81:ee:b4:65:b7:b8:
42:39:59:68:00:da:28:be:4a:bc:3c:a8:ca:51:c1:60:52:0f:
fa:fa:93:a0:e0:bd:91:e0:8e:df:58:13:ec:2f:30:aa:dc:d5:
fe:74:44:75:49:28:a5:23:c3:e7:58:f7:dc:55:51:58:ec:97:
03:93:ff:97:92:57:44:af:7e:99:7b:23:15:26:d6:62:96:0a:
41:c1:28:09:bc:7e:ac:34:7f:68:69:c1:cb:06:ce:b7:3a:2f:
c1:c3:90:95:33:8c:dd:54:d9:fc:82:45:31:ea:a4:5b:d1:38:
0d:8b:af:67:dc:4a:fb:44:32:a6:4e:8c:22:5c:90:2b:dc:f1:
23:b4:e7:36:ba:06:88:2d:24:0e:27:7b:81:85:23:fb:f4:4a:
d9:1a:6d:b8:a7:61:fb:c4:de:b2:22:8b:74:f6:41:85:b0:c2:
57:14:87:1d:a2:02:2c:70:de:7b:2b:9d:1b:0f:3f:fa:11:20:
d5:26:1d:83:e6:84:b0:c9:33:3f:6c:a1:b0:e8:76:b1:ac:3a:
e2:28:14:ca:46:c1:7d:ed:1b:11:d5:a8:06:c1:72:f5:1c:c3:
8b:a4:5d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:07 2026 by rpki-client