Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: 4PSlXQbnhq1kZZnUa4iKpIljKlAM8ZvNlKLTPm5Csns=
Subject key identifier: 0D:E4:44:54:D5:5B:06:24:0C:F1:91:2F:45:91:55:E7:9B:BC:39:66
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 019D3752D8693C5902BD107B7CF2AA7FF49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 1745
Signing time: Sun 29 Mar 2026 02:01:09 +0000
Manifest this update: Sun 29 Mar 2026 02:01:09 +0000
Manifest next update: Mon 30 Mar 2026 02:01:09 +0000
Files and hashes: 1: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: QiwrKnb+9ZiGh9oMjwfDwcZM7bfd1t+J1N0glBNM808=)
2: m5yvHicFnXm_Esifvf9nJ43HYjM.roa (hash: 2UG9meAu50+1K4RYnFNAIuouwlkL5D4Ox6KRSauQKrc=)
3: rI-1eY7TtxFeY70hEXPRG9r4SUU.roa (hash: 3yzUSLFgFbapDsLKTnHWd+eZDAnjuQ4IsvzD3dpVDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d8:69:3c:59:02:bd:10:7b:7c:f2:aa:7f:f4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Mar 29 02:01:09 2026 GMT
Not After : Mar 30 02:01:09 2026 GMT
Subject: CN=0de44454d55b06240cf1912f459155e79bbc3966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:c4:ed:3e:7d:72:34:15:e7:96:47:86:8b:
84:c6:04:ed:fa:98:0a:ee:16:46:38:9b:04:30:d0:
6e:91:2a:2b:27:cf:68:40:44:1d:dd:92:a9:fe:27:
54:ef:7a:df:2d:c8:c8:e1:d0:06:77:16:3f:51:ee:
96:0f:0f:fb:ed:91:18:d1:10:3e:a5:81:7e:2a:3b:
30:7c:2a:c8:51:93:06:4b:52:57:52:ac:72:e7:87:
50:a0:ae:77:84:ba:22:44:21:f6:5e:1b:60:af:ad:
11:e3:51:dd:2f:9c:9b:28:84:6b:2f:18:86:04:33:
2d:ff:7a:6d:64:f4:06:f6:5f:8e:b8:8f:7e:98:27:
71:97:fe:42:cf:d4:18:ee:a5:0c:dc:8d:91:d4:42:
b7:f8:46:1a:c3:01:be:26:54:e5:4b:1d:ac:55:25:
ab:9c:62:e9:39:16:32:91:9e:ec:a1:30:00:dd:da:
b0:69:e6:11:d3:cc:c8:17:88:0e:62:35:70:8e:71:
36:7e:f3:fd:91:fa:5e:e8:4f:e7:a7:6f:97:cf:48:
aa:a3:37:5a:d8:57:f2:bf:de:8c:88:38:87:f4:ee:
06:18:db:b8:db:06:a9:45:68:96:27:e9:29:00:85:
12:eb:fc:66:ca:60:00:60:ce:4d:27:1e:1f:49:f7:
1b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E4:44:54:D5:5B:06:24:0C:F1:91:2F:45:91:55:E7:9B:BC:39:66
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f0:be:c1:47:2a:c7:82:09:85:6f:d3:9c:21:fc:93:1d:75:
cd:c6:a0:61:38:ed:ba:00:31:3f:e4:8f:3a:c0:a0:6b:1b:61:
ec:11:be:7b:1e:ce:e4:46:c5:9e:ea:5b:84:f8:d1:0d:3e:13:
55:27:4a:88:4e:71:3d:01:4b:c1:7c:d6:0e:97:e9:73:b9:da:
ca:5c:1b:6b:2e:86:ce:47:45:68:8c:d1:d9:a5:16:18:a1:c2:
13:6a:dc:23:17:12:a6:c3:c6:8a:92:96:74:27:4a:c3:3a:6b:
84:db:02:5d:40:75:45:52:22:e3:23:c1:0b:e7:fa:0f:0d:61:
ec:39:c5:a8:72:da:c5:9f:3d:a1:d3:58:86:5b:ae:54:be:bc:
b2:5b:42:bb:88:be:e4:0b:82:08:fb:41:3e:22:ca:81:75:37:
f6:11:91:35:a3:e7:2d:de:a2:c1:ed:98:44:df:09:82:35:69:
66:ba:0f:d5:d6:20:f6:bf:69:51:f7:76:a7:da:0e:60:38:8d:
77:92:62:91:ef:11:3f:20:29:c0:09:da:a7:87:55:0a:e3:c2:
ba:95:69:d9:e5:35:7f:40:c9:7c:b1:f1:71:3f:4d:6d:83:9d:
7c:6f:67:ac:6c:d8:2c:2b:f2:da:f6:18:07:2d:02:2b:df:b8:
d2:ec:03:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:52 2026 by rpki-client