Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
File: 7V6DgxLgSu-flTbiDNQSg6e4t3s.mft (raw, json)
Hash identifier: ZbYO1oIjp0/MWjIUfvi5xVxzHK3Y7bMZYk9tzs1SA3g=
Subject key identifier: 49:56:61:E0:7B:7C:96:85:94:2E:05:76:7F:CF:4B:E1:69:D5:32:BE
Authority key identifier: ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
Certificate issuer: /CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Certificate serial: 019D38D2E7552DB4DF5AB28AFF4544BB40FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:38 +0000
Manifest this update: Sun 29 Mar 2026 09:00:38 +0000
Manifest next update: Mon 30 Mar 2026 09:00:38 +0000
Files and hashes: 1: 1tXKvbccZVqmGCzOIY3BaiKWNpI.roa (hash: ZMIDM8rVxwZQ46a51953kpL3cP7HCn+o1QL6WgtS1ZM=)
2: 7V6DgxLgSu-flTbiDNQSg6e4t3s.crl (hash: RvE2sfgPfI+7RMZQ2V1zDUtp1l1ivlnVPWThD+Vz3qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e7:55:2d:b4:df:5a:b2:8a:ff:45:44:bb:40:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Validity
Not Before: Mar 29 09:00:38 2026 GMT
Not After : Mar 30 09:00:38 2026 GMT
Subject: CN=495661e07b7c9685942e05767fcf4be169d532be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:29:d7:13:6f:e6:b2:e3:b7:d0:8e:65:26:
bf:34:9f:0d:ae:98:5d:02:10:ed:2c:87:59:ea:70:
52:92:25:c8:49:c9:61:b5:fb:e6:d1:d1:6e:e8:b6:
e5:35:59:c2:e9:10:c9:fc:0c:44:98:5a:17:9d:98:
24:2b:9e:20:67:98:70:32:3d:1e:60:88:56:ea:25:
a5:b1:e5:03:e8:84:dd:24:4c:57:68:42:78:45:56:
a8:49:f8:b1:1b:3d:50:a4:25:b6:66:c9:b4:cf:71:
f3:c3:07:a1:88:56:b4:af:7e:e3:9f:f7:32:6a:c4:
38:e7:f9:a3:e5:d0:f4:78:e1:45:97:9b:27:74:d9:
8b:d9:ae:4e:75:fd:e8:14:ad:e8:8a:19:d0:3f:33:
53:d8:69:2e:5f:43:b2:7a:bc:d6:ad:75:b3:a7:ff:
5e:b9:d6:95:66:c5:69:85:07:77:f9:de:ee:c2:3c:
71:2b:a0:2d:25:9b:9b:ee:5e:98:c5:ec:83:1c:7a:
93:fc:54:2f:7c:3c:d9:e8:de:5f:29:bf:53:23:51:
29:8c:b8:60:7a:0b:30:5b:0a:57:28:fc:83:00:a0:
ad:3c:67:7f:a5:61:af:be:ed:0a:b8:ad:00:51:66:
cb:ba:22:a1:4a:ba:29:2e:c2:57:b7:d0:14:3d:c2:
b4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:56:61:E0:7B:7C:96:85:94:2E:05:76:7F:CF:4B:E1:69:D5:32:BE
X509v3 Authority Key Identifier:
keyid:ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c2:f8:bc:f8:6b:c9:b5:70:4b:4d:45:e6:e2:95:75:7a:e6:
0f:f6:02:f5:1f:d8:de:c8:7b:9f:a4:57:0c:b7:5e:61:f3:43:
9f:c5:b0:6f:88:4e:5d:56:f4:5c:82:d7:44:82:ab:2f:78:6a:
17:b2:b3:b2:0c:ba:0d:4a:24:09:64:48:9d:38:9b:39:a9:18:
85:49:d7:10:80:b6:d5:83:ef:81:f5:1b:72:c0:13:ef:44:8e:
c6:95:53:0a:9d:8d:a3:cb:d3:5d:37:3e:16:ba:a7:18:24:bc:
77:c2:b6:8e:f9:09:d3:06:e6:d1:0b:c4:46:06:b3:5d:02:3d:
c1:40:62:35:f6:ce:74:6d:c4:8e:ff:c2:4a:a5:d7:cc:67:60:
5e:97:70:f4:5f:40:80:60:ec:e2:b0:52:66:2d:69:f1:d8:b2:
88:60:18:54:d2:71:de:2a:0a:64:fe:3b:73:52:f2:03:fe:64:
83:23:13:0f:2a:40:06:86:c5:00:91:34:13:1c:8c:2c:53:60:
a5:c8:56:08:f6:a4:e3:a9:8a:34:84:65:0b:de:3d:9f:41:eb:
db:82:cf:06:15:ce:ca:2d:56:ab:7a:59:e0:0e:72:50:d6:9d:
d5:5e:5b:42:72:f1:12:92:02:31:ba:64:be:00:78:68:8a:ab:
b8:82:13:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:40 2026 by rpki-client