Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File: 7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier: n2hJf1WftfWdK9R58UHurfH4vsuJ/sn7ZQPORDIY1lM=
Subject key identifier: DD:16:DD:CF:91:27:42:83:5F:58:2D:74:24:5C:1C:E5:A6:FD:A7:27
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial: 019D37F6E8168BF92C16B956246A870EC665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:21 +0000
Manifest this update: Sun 29 Mar 2026 05:00:21 +0000
Manifest next update: Mon 30 Mar 2026 05:00:21 +0000
Files and hashes: 1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: AX1BHhNeG7SGBInoU580N1rzYVte639zUfWxDzSjpOE=)
2: SEU-eUTm-6iORlN5RtiJHEwSdwc.roa (hash: rXL5N4BdgulO5NRgIVf5AGGcYxix/8Lxb7TWkibxEWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e8:16:8b:f9:2c:16:b9:56:24:6a:87:0e:c6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Validity
Not Before: Mar 29 05:00:21 2026 GMT
Not After : Mar 30 05:00:21 2026 GMT
Subject: CN=dd16ddcf912742835f582d74245c1ce5a6fda727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:7c:05:76:16:13:33:fa:52:45:bc:0f:c1:
d8:63:5f:20:dd:db:54:ca:c1:40:74:2e:4f:4a:e3:
5d:cd:f1:b8:32:7c:0c:e7:fd:ea:3f:3b:0c:6e:33:
54:40:07:99:cb:54:be:65:5f:fb:13:90:86:0b:15:
b0:21:7d:ea:82:91:45:3d:40:33:1a:00:30:d0:bb:
8c:ff:70:8b:ce:a0:37:66:39:d3:58:69:26:0c:24:
36:d2:9f:8c:a6:51:27:4b:a2:cf:46:46:1f:31:0f:
cc:62:3f:25:8a:34:93:da:7c:81:82:61:05:af:5a:
57:99:b2:ba:27:74:37:34:a9:3a:0b:73:e9:ad:3e:
ab:f4:95:c8:45:1c:28:74:e6:19:e7:df:0f:7b:aa:
1b:e3:29:75:cb:d3:7f:ff:eb:d2:af:8d:52:cd:99:
3f:89:a1:76:6c:df:6d:52:29:51:45:68:b3:d3:89:
c8:88:5b:55:c4:74:ab:b3:1e:29:5f:e5:2e:16:fb:
ce:cc:d0:d0:b0:b0:ff:5c:14:6e:3b:9c:84:fa:18:
eb:71:ed:a0:82:bd:26:f6:78:d5:9c:d9:a1:89:c9:
98:a5:5d:d1:33:cf:67:54:d2:ac:13:34:db:6b:58:
18:ef:33:2c:7c:34:eb:a8:ea:48:8f:0e:81:43:af:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:16:DD:CF:91:27:42:83:5F:58:2D:74:24:5C:1C:E5:A6:FD:A7:27
X509v3 Authority Key Identifier:
keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:68:74:4d:7e:42:b3:7f:3a:23:99:f0:5e:1c:38:0e:97:3a:
9c:e4:32:98:d6:43:60:9a:4a:27:b0:9b:39:e1:9d:29:a9:fa:
bd:af:da:a8:72:f7:5f:c7:9e:39:e9:76:2b:47:83:7b:fa:21:
76:c5:5a:b5:ab:6d:0b:87:c9:4e:d4:bc:d6:fa:39:df:8a:a2:
1b:ad:02:89:ad:88:93:a7:40:41:d1:57:54:02:33:c6:b8:c3:
be:c8:c6:4e:2b:c9:a4:d3:c2:b5:46:08:25:ed:52:95:2c:c1:
ff:be:77:41:1f:66:18:c9:78:6c:da:2e:b1:43:9f:69:43:80:
d0:b0:ad:36:67:8e:a1:6d:32:a3:1b:c3:75:6f:fb:98:27:b4:
01:73:8f:0a:9e:bc:5f:e6:ac:57:28:8b:e3:b4:41:4e:ec:18:
c8:e9:ee:96:30:cc:4c:7e:d9:3f:a9:f6:d4:33:05:42:f9:0c:
06:f2:88:b7:2b:f3:1c:12:7c:54:9a:7d:c8:53:0f:16:e5:7f:
c4:06:f9:ad:ca:83:8d:fa:a2:b4:fa:3c:1b:5e:ef:98:be:db:
b6:b7:96:98:7d:19:c8:e3:b3:46:a4:5f:93:7d:31:04:e8:ed:
14:fb:ec:ba:e2:d8:1e:08:7b:2c:82:bc:43:2c:ea:af:b3:80:
01:08:6e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:59 2026 by rpki-client