Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
File: 07SieHIiWX8W0e5MQ1voaQ8QM9k.mft (raw, json)
Hash identifier: bBZP2xQyiscdtgn4XnUW22NdNT5pAEflLpO0CO5EG4I=
Subject key identifier: AC:8C:8C:51:31:42:A8:84:36:C5:A9:4F:AE:48:72:7A:E1:75:4B:58
Authority key identifier: D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
Certificate issuer: /CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Certificate serial: 019D382DE8FDE015DB359ED1D9BBE5EDCCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
Manifest number: 083A
Signing time: Sun 29 Mar 2026 06:00:25 +0000
Manifest this update: Sun 29 Mar 2026 06:00:25 +0000
Manifest next update: Mon 30 Mar 2026 06:00:25 +0000
Files and hashes: 1: 07SieHIiWX8W0e5MQ1voaQ8QM9k.crl (hash: ClnpNie8h14f2BnIQf2cByy6Q9G/m+PX5fmiXpAHJ44=)
2: cvsVj4Nxvo824NrKadr7CqxaETo.roa (hash: 6GdZp9tVQFM/JG4iIzlhh+KgWjJbdYXxpM8R/v3gqEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e8:fd:e0:15:db:35:9e:d1:d9:bb:e5:ed:cc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Validity
Not Before: Mar 29 06:00:25 2026 GMT
Not After : Mar 30 06:00:25 2026 GMT
Subject: CN=ac8c8c513142a88436c5a94fae48727ae1754b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:63:10:aa:1b:28:6a:3c:a7:ae:6d:22:64:
a0:2a:7b:aa:b0:9a:52:9d:ab:74:f0:9d:86:aa:e3:
bb:63:39:a8:c9:a8:6e:4c:67:4a:7c:c7:df:9c:d4:
e5:92:0e:77:0a:51:e9:05:22:3d:76:b5:29:c0:94:
9f:f2:cc:c5:3d:fc:5f:56:b1:d4:00:94:f7:8a:47:
d7:fd:52:a4:a1:01:9d:c3:1e:11:37:27:13:fd:e9:
4d:a2:0a:fb:cb:b6:f4:6d:9c:cd:a9:09:63:24:7d:
fb:1e:34:34:2a:3f:91:04:7e:56:02:38:f9:81:52:
75:bd:32:ce:65:a7:3a:b4:e3:9c:a6:b4:92:5c:7f:
5a:78:bc:08:d6:a1:a6:94:89:7d:1c:10:3f:2a:83:
3d:d6:6c:76:26:81:e0:e5:d3:a3:90:c7:c2:11:97:
41:14:f7:7f:07:28:cf:ad:c9:de:00:57:c5:77:34:
c9:04:60:1c:f6:df:3e:27:cd:38:6b:8f:bb:2e:82:
2d:e3:a2:8f:2f:f9:9b:0c:ac:65:b0:7b:08:36:cf:
a0:fa:33:ac:92:e1:ba:1f:18:06:73:bf:ac:87:c3:
a5:25:44:70:d2:da:c1:66:2d:e8:ac:ce:80:f9:bc:
ec:8d:5c:e8:a0:10:63:5b:42:e8:ca:f0:08:6e:be:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8C:8C:51:31:42:A8:84:36:C5:A9:4F:AE:48:72:7A:E1:75:4B:58
X509v3 Authority Key Identifier:
keyid:D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6c:7e:9b:b1:6b:d7:63:d1:27:3e:37:e7:6e:96:74:2d:c1:
3c:d1:6a:33:41:f1:f7:2f:f7:25:32:ab:4f:69:ec:de:b9:a3:
e8:cd:96:6f:58:4a:1e:ad:f1:1a:84:1e:53:a4:a1:f6:e9:cb:
d2:3d:1a:ba:b7:7a:b7:fe:fa:4a:cb:3c:6c:eb:1e:4f:66:40:
ea:6a:84:79:67:96:1a:b9:8a:bc:58:6e:cd:34:a7:b3:a6:ff:
cf:fe:fc:2c:a3:ef:f4:2e:70:29:4f:33:ed:96:1f:65:b8:99:
ac:90:a7:fc:aa:89:4e:9a:61:32:6a:80:69:56:39:b7:1b:bf:
12:6a:11:40:ef:22:6e:22:3e:40:08:8f:3d:ca:7d:0e:c4:c7:
8f:25:90:fa:e9:c2:88:72:ec:bd:1e:20:c0:6d:36:16:c3:41:
aa:c9:2a:98:2c:75:c5:fd:00:f0:d9:6e:53:3f:d2:1c:d6:55:
2a:d0:62:69:ea:d6:2a:12:de:6d:be:59:c0:72:ed:ad:4d:dd:
6a:ed:e1:04:22:4d:53:07:06:81:e8:a2:dd:90:30:63:c8:aa:
c7:58:92:54:8c:f2:77:d9:d1:2a:24:7c:5f:94:66:7a:73:d1:
08:22:64:60:59:5e:e5:94:ac:7b:a0:74:a7:33:ce:32:97:c4:
1a:93:77:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:17 2026 by rpki-client