Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
File: 7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json)
Hash identifier: VwQV3Q2jO8wItkqSC4w97FIwHIyhSyitTl+aSVcntkI=
Subject key identifier: 51:54:EC:1A:B5:C3:E7:4D:08:9E:A9:74:E0:4E:59:40:11:83:7B:83
Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
Certificate issuer: /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Certificate serial: 019D2703A34EAA817178B0D8DE98DABC4F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
Manifest number: 12A7
Signing time: Wed 25 Mar 2026 22:00:42 +0000
Manifest this update: Wed 25 Mar 2026 22:00:42 +0000
Manifest next update: Thu 26 Mar 2026 22:00:42 +0000
Files and hashes: 1: 3MNxWlvYJ1UEreJxUOEEE9L47Ng.roa (hash: dV3Q++D9g4wj89CuXX4P3NnLKAaay8XuMVHolFZE0pI=)
2: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: 72IoayY0XjGMP46WcJ52BhajURexqw7WRAVIMOeu1Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a3:4e:aa:81:71:78:b0:d8:de:98:da:bc:4f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Validity
Not Before: Mar 25 22:00:42 2026 GMT
Not After : Mar 26 22:00:42 2026 GMT
Subject: CN=5154ec1ab5c3e74d089ea974e04e594011837b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a2:56:d9:e9:4c:23:fa:68:8b:c2:14:72:ff:
bb:27:77:82:9c:56:09:17:e8:7a:a1:62:78:ac:ca:
9b:cd:bb:a2:18:45:e0:8d:bf:b1:e3:93:41:33:52:
fc:62:3d:18:cc:b4:38:41:c0:1e:69:77:f9:db:00:
ee:8f:06:9a:15:13:a1:f3:41:ac:b7:ea:3d:7f:fb:
89:9d:83:2d:70:7c:99:a2:07:26:b3:3a:40:4b:71:
88:70:6f:38:cc:4c:92:38:12:da:b5:f3:63:ea:9d:
3a:81:bb:3b:dc:66:e0:33:0d:dd:cd:45:32:9e:6f:
a4:d2:7d:62:84:a5:6b:bd:b5:25:c3:25:ae:3a:ff:
9c:5a:e6:1a:8a:50:ea:0e:9a:52:fa:3a:41:3e:89:
11:e3:12:e9:1a:a5:d8:8f:4a:92:cc:8a:5f:5f:58:
6e:0d:57:e0:bd:26:13:d3:26:e4:79:84:ca:c2:af:
4b:99:92:9f:3a:07:28:30:a8:43:5d:d1:a2:ca:95:
2d:8c:ee:8d:c6:9a:d8:0f:85:b2:a3:8a:4a:d0:60:
9e:ae:73:df:31:c0:9e:4d:19:cf:08:58:59:ee:58:
7a:c2:ec:3f:c1:b5:41:62:0c:c0:db:e5:98:f0:b2:
6a:32:b8:ea:75:7e:44:46:0e:4f:e9:a0:39:f7:96:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:54:EC:1A:B5:C3:E7:4D:08:9E:A9:74:E0:4E:59:40:11:83:7B:83
X509v3 Authority Key Identifier:
keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cf:f5:b8:40:4e:d4:ff:21:bc:67:36:e4:ce:77:a5:24:04:
bf:1b:99:74:35:01:fe:31:8c:94:d6:b5:cb:c5:e8:ef:26:f5:
fc:37:9e:3f:2d:83:c1:89:aa:7e:01:c4:bd:26:c2:d4:6b:52:
86:be:c1:51:63:f1:1b:45:09:56:b6:77:be:55:fd:8b:ea:1f:
e6:88:32:4f:d2:6f:f9:1f:50:3a:54:e4:0a:4a:53:c2:f4:02:
07:68:f9:8e:3b:2f:17:e4:ce:01:2b:f7:e6:fb:30:53:3d:81:
57:51:9c:23:6b:2e:4a:19:26:4e:9b:59:2f:0d:6f:42:0a:b9:
24:21:c6:ae:3f:ac:4e:c6:5e:c0:41:a9:2a:1e:f9:34:bf:b3:
d5:02:32:73:98:a2:07:1f:95:eb:70:f4:e1:f0:47:e2:24:af:
7c:64:a8:a6:6b:b5:62:45:e0:c5:38:4c:ae:6a:f2:4e:ec:3c:
5d:bf:4b:5d:b7:48:b4:6d:ba:3d:a8:3d:ca:b7:b6:9b:46:d5:
72:04:9b:a5:73:a7:f8:11:15:68:e0:a0:2e:4e:47:4a:e9:5b:
1a:13:33:ed:e3:f7:13:83:63:c7:9a:e0:de:38:a3:d7:60:db:
af:14:07:8e:55:ad:e8:fb:99:70:59:90:bf:5d:05:13:d2:12:
1a:d3:bb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:46 2026 by rpki-client