Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: N9TLCJSZsBYDxW8T2ZxVz/eOFyv9C8lTrBgujG15mSo=
Subject key identifier: 04:12:27:24:6C:DC:4F:39:3A:AF:0D:51:AC:CB:7B:1D:DD:85:8D:89
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 019D296191AF2FBAF14D5F249A3B71C4039F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:02:33 +0000
Manifest this update: Thu 26 Mar 2026 09:02:33 +0000
Manifest next update: Fri 27 Mar 2026 09:02:33 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: TcxLglVZcbDI2yX/sS5Uk5B68bffksPmfeRqkVBYQCY=)
2: NE1cSr4PhSWQqxI3RwadUkiTzr4.roa (hash: gTOFfm6+4dqvFvqDPuHaiv7nUh/TeTbmvELpqBUfVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:91:af:2f:ba:f1:4d:5f:24:9a:3b:71:c4:03:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: Mar 26 09:02:33 2026 GMT
Not After : Mar 27 09:02:33 2026 GMT
Subject: CN=041227246cdc4f393aaf0d51accb7b1ddd858d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:66:7a:14:18:44:62:76:14:04:91:8c:e0:
2c:e0:19:18:6a:c0:44:b9:19:0c:5f:40:a9:68:0d:
8b:15:8e:b8:65:28:1b:17:c5:2e:7c:68:97:de:6a:
d9:3b:83:e3:90:9c:58:31:6d:69:03:6e:4c:2c:dc:
ba:a0:bc:51:b6:5c:06:b0:8b:cb:cb:50:e4:7f:89:
ed:12:0e:d2:ef:ab:8e:b4:bc:eb:9c:6a:47:82:46:
08:26:fc:96:1b:fe:2e:38:bc:c5:bf:16:0f:f0:2c:
50:e4:99:a3:1b:b8:25:f7:0c:6d:d1:39:8a:bc:07:
fa:7c:bb:0a:c4:57:c8:f6:c3:bb:39:87:05:fa:12:
c2:39:8a:31:88:34:b9:d4:ba:de:d3:13:89:57:75:
cd:6f:af:a7:b0:28:d9:4f:a3:fc:da:e1:68:1d:66:
c5:ec:95:21:5e:03:8a:15:bf:d3:ba:69:31:8d:96:
df:a1:db:b8:be:b2:06:d8:8d:b7:df:ae:3c:e8:25:
79:ed:b1:72:1c:52:d7:10:04:79:18:8e:0e:bb:7b:
8f:65:f4:19:89:bc:7c:93:61:93:2f:54:d3:18:40:
d8:64:62:77:eb:e9:bf:ed:44:55:04:3b:53:1e:9b:
16:c3:03:b2:4c:c1:e8:ea:94:07:de:ea:bf:46:c4:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:12:27:24:6C:DC:4F:39:3A:AF:0D:51:AC:CB:7B:1D:DD:85:8D:89
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bd:e6:15:19:f0:2b:ad:d5:a9:0f:d1:2d:61:52:ba:64:3e:
cb:c7:ae:61:31:26:b9:4d:ae:b6:97:27:26:61:29:21:1e:6e:
f5:10:a1:9b:bc:f6:e2:70:fd:bb:6a:9b:a4:cd:b8:bb:03:48:
22:80:ef:a8:5d:4e:5b:de:52:ff:ce:89:b7:63:5d:38:11:9a:
4b:14:00:c5:6a:ab:d0:38:b7:35:38:4d:73:80:b1:8b:2d:b2:
10:9a:11:a1:9a:55:fe:fd:4c:8e:a1:6f:32:0e:56:85:b0:bb:
b5:a0:57:04:9b:2c:0c:06:26:2e:84:d0:5a:4e:3d:e3:b6:59:
fe:d2:f3:af:c9:89:80:40:3c:a9:3f:5a:39:12:35:1b:29:5f:
14:0f:40:bf:1a:2a:15:e8:b4:70:ed:fa:f4:11:6e:c9:32:70:
94:d3:0b:8b:6e:8f:b7:ba:b3:fd:7d:c7:92:e9:8b:2d:90:89:
18:c1:94:6e:06:b2:ee:11:c9:21:62:96:3b:de:ec:a5:ca:c6:
5a:f2:5d:38:cd:aa:08:0b:0b:e6:aa:57:e7:0b:b7:0c:01:58:
9f:c6:8a:32:e1:ae:ed:17:2b:1f:f4:b1:c6:5f:88:fa:20:a4:
4e:1e:74:92:49:c0:7a:4a:5a:59:6f:5f:6e:0d:4c:a1:72:39:
66:c9:85:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:03:35 2026 by rpki-client