Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
File: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json)
Hash identifier: SaKh6B6JL0NJB54UFh9w65qnGxbFO4byi77+5cPF+0w=
Subject key identifier: 1B:A5:44:AD:EE:C1:56:44:C3:53:B9:8D:B5:D5:7F:A9:45:C0:22:7D
Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
Certificate issuer: /CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Certificate serial: 019D3977AEA4CE10AF72A5FDE0868C313928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 12:00:37 +0000
Manifest this update: Sun 29 Mar 2026 12:00:37 +0000
Manifest next update: Mon 30 Mar 2026 12:00:37 +0000
Files and hashes: 1: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: 9ZmL918VQhKgldFHYOJP0YIzrC52BROl9iJCfA6d6Qw=)
2: ice_LDnA6TShJ0tbBNY5iT0MS20.roa (hash: Ne/xr7FxI4PoMf09Z/160yY/95SJ/bfXY5TJhx10TCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ae:a4:ce:10:af:72:a5:fd:e0:86:8c:31:39:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Validity
Not Before: Mar 29 12:00:37 2026 GMT
Not After : Mar 30 12:00:37 2026 GMT
Subject: CN=1ba544adeec15644c353b98db5d57fa945c0227d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:84:2b:17:7f:30:59:e6:27:9c:31:31:5e:
06:99:18:7f:76:7d:2e:1a:d4:d9:6b:48:56:89:65:
7d:be:fd:1b:af:4b:1b:50:87:d3:c9:6c:b7:96:b7:
ed:39:c2:c3:47:ae:ba:70:6a:42:cd:07:4a:9e:98:
37:97:af:cb:f6:23:bc:31:af:a2:43:f6:91:be:36:
f1:6e:c4:a7:bd:61:6d:f2:b4:82:c5:8f:03:6b:44:
91:ee:32:83:a1:82:6b:40:f0:f0:ae:92:4f:bb:c1:
ac:0e:09:6c:df:59:a8:b1:b2:0c:47:e4:6e:2b:77:
be:39:a6:75:9a:cd:8f:f3:5b:18:66:0b:f3:00:c7:
32:b2:7b:a2:f3:8c:a8:76:00:27:d4:c0:b7:df:fc:
66:ff:da:c2:2a:24:eb:b0:1b:27:fb:71:13:92:01:
81:d4:d5:cf:5d:85:5c:62:f9:f5:02:91:a4:fd:bf:
5e:1d:0d:84:54:e9:b4:b1:2b:7a:95:05:4c:ba:6d:
46:dd:02:6f:84:f4:1f:85:9b:41:fa:80:a8:24:89:
78:96:74:68:7e:ea:b1:34:7f:fa:3e:26:55:54:e1:
e1:91:74:6d:63:4e:47:88:f0:45:17:28:9d:60:5a:
06:49:d2:2b:6f:64:cc:41:33:a7:81:b8:b9:2f:5e:
78:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A5:44:AD:EE:C1:56:44:C3:53:B9:8D:B5:D5:7F:A9:45:C0:22:7D
X509v3 Authority Key Identifier:
keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:89:4c:1f:8f:56:18:9c:bf:0a:92:18:11:cf:42:95:38:6d:
0f:2e:10:e4:35:b7:dc:27:1c:3e:b4:eb:07:98:37:e8:64:d1:
d7:84:d3:ce:3d:ab:7d:13:98:ae:87:35:85:d4:74:cc:63:cb:
7f:31:75:19:d0:e1:c0:d6:72:aa:b9:a1:00:99:2e:79:ea:45:
93:ce:67:b9:e4:15:5a:2a:7a:ce:b1:28:3b:8e:be:01:b9:4b:
31:7f:89:a1:86:7c:33:f2:08:2b:49:8c:6f:d2:ea:07:7b:98:
29:f5:50:e1:e2:da:89:90:4d:50:c3:00:c6:20:47:53:0e:34:
fe:bb:68:02:6f:87:a1:ca:55:3d:24:f1:a3:1e:d2:cb:24:40:
8f:19:db:fd:8d:06:0d:2f:27:fb:a9:ba:a6:b7:cd:f4:b4:45:
88:79:80:a4:e9:66:e6:78:da:53:24:56:28:5f:20:55:fe:1c:
48:f1:e5:e1:e4:9c:33:7b:dc:b8:30:9c:50:71:a2:61:43:b7:
95:fd:5e:73:4b:0e:aa:f6:5a:dc:cf:06:1b:cd:34:57:05:5d:
0b:94:9f:35:6f:f8:ce:39:c1:c0:64:20:d9:06:62:54:23:9f:
69:eb:da:6b:cc:32:f1:e9:6d:cd:ac:ce:86:5d:19:da:80:4f:
de:b2:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:01 2026 by rpki-client