Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
File: 7CSoJiAgkayDGfDwbreW_YJCKw8.mft (raw, json)
Hash identifier: YDOcik/Q0fBChz+Mz8V4bTjbSTe3AyuQpuKoOc+1/v8=
Subject key identifier: 15:FB:CC:17:C9:D1:CA:06:F0:99:AE:5B:E7:48:B5:98:4B:4F:48:6F
Authority key identifier: EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
Certificate issuer: /CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Certificate serial: 019D394179A6233925C42E252A62B05086CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
Manifest number: 0230
Signing time: Sun 29 Mar 2026 11:01:25 +0000
Manifest this update: Sun 29 Mar 2026 11:01:25 +0000
Manifest next update: Mon 30 Mar 2026 11:01:25 +0000
Files and hashes: 1: 7CSoJiAgkayDGfDwbreW_YJCKw8.crl (hash: JjhmpXcjK0FPsIsyBWzza5gvXIIQyt+GXUOAddvnuhQ=)
2: NV3f3XuOFAsDnfAaCg6nF83CLX0.roa (hash: gLitDvaGVXpGQdqcXcYcXVG4iAgjgIJ9u8eaDv8Xduc=)
3: XHsv6tidd9i-2RRz-dH5aTG8xDM.roa (hash: mc5VNfZqvrFRMc92AfbsJY+NZvDvOSGlYFhOV1FglZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:79:a6:23:39:25:c4:2e:25:2a:62:b0:50:86:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Validity
Not Before: Mar 29 11:01:25 2026 GMT
Not After : Mar 30 11:01:25 2026 GMT
Subject: CN=15fbcc17c9d1ca06f099ae5be748b5984b4f486f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:5b:e6:67:d6:ec:d2:52:ec:1b:18:fa:d8:
11:db:34:c9:93:a5:8b:f5:aa:ef:fd:69:55:bf:61:
37:ac:1b:66:83:ed:35:05:1c:e0:2c:dd:92:f1:7b:
5b:b1:78:9e:2b:fd:fb:fa:13:2c:85:3b:de:4f:7f:
2a:c1:b5:f9:4d:05:40:3e:8b:8e:7e:a7:8b:ef:fa:
40:89:1b:ee:c5:be:9b:3f:82:d6:81:e0:29:91:41:
77:5e:93:15:7c:63:d3:ad:cc:bd:f0:46:48:38:e4:
fa:65:a2:29:68:17:06:b8:d3:b8:bd:e2:6a:41:f8:
9a:cf:97:9c:40:c6:73:a9:da:ec:46:b2:7e:91:ad:
7a:39:82:42:29:6f:91:eb:91:fb:a5:30:97:e2:57:
9c:82:0b:6f:29:ce:8d:c0:f7:67:57:49:2d:23:03:
0f:21:c6:2f:82:5b:23:be:b6:15:97:a8:e3:52:9a:
e8:92:39:75:8b:3b:40:0e:2e:27:c9:bd:a0:cf:66:
ab:64:e1:9a:0a:d5:e5:c9:d5:9d:fa:d7:e8:95:88:
f7:42:4b:5f:a4:8e:7a:b2:e6:7b:e0:c7:6a:84:b4:
89:7e:85:a7:65:9b:27:3a:8c:52:77:7c:32:61:29:
72:91:73:24:eb:6d:66:ed:10:8b:a5:57:13:3b:b3:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FB:CC:17:C9:D1:CA:06:F0:99:AE:5B:E7:48:B5:98:4B:4F:48:6F
X509v3 Authority Key Identifier:
keyid:EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:3f:5e:0b:59:ea:e7:c8:be:25:29:15:ed:3b:3d:64:4a:9a:
4c:41:b1:7f:3a:10:93:97:72:94:4a:f6:8b:e8:97:e0:c2:b7:
ae:e9:7e:be:05:0c:43:7b:10:3f:32:5b:dd:a5:15:71:4f:08:
a0:b5:57:08:84:f2:2f:c0:a7:cf:3d:24:20:6b:e1:3b:c9:e8:
89:c6:5e:cb:ac:3d:16:e3:d8:eb:09:45:e2:cf:d6:10:0e:64:
ba:b6:3d:2f:57:61:58:5f:58:32:30:0e:6f:4c:48:d8:b7:ab:
d1:49:34:4d:e3:2d:99:d4:39:ad:2b:00:29:46:27:38:b5:07:
87:ec:4c:ff:75:21:f2:d7:a5:ff:7b:4e:5e:6d:c0:cf:ab:3d:
ae:05:56:fc:9a:17:34:dc:50:02:66:b3:e9:e6:2c:55:83:3c:
64:7c:ee:32:8a:81:f0:fb:0d:26:d6:2c:8f:de:d0:78:0b:48:
8c:07:27:e4:a0:a2:be:42:d8:4c:36:2e:1b:d5:fe:04:c4:7e:
63:b8:4c:f9:21:0c:2f:d0:96:34:a3:08:0c:05:68:c9:9b:f3:
e3:e2:d6:d8:6e:71:75:c3:27:e3:52:27:59:df:31:06:82:6c:
5c:3b:06:d8:a0:80:13:f3:37:6e:ae:7f:79:07:a1:d9:f5:9a:
26:b3:50:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:58 2026 by rpki-client