Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: 5zB4suaZUwGb+Wo2p1YJ3yDt6qDHsxt27AtoHJ0i+AM=
Subject key identifier: 4C:28:22:E7:5C:12:33:FE:16:53:9F:D5:38:19:5F:AC:A5:4D:46:1E
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 019D3909F64E58C902F4D3AF162ABB3A125E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 0B02
Signing time: Sun 29 Mar 2026 10:00:47 +0000
Manifest this update: Sun 29 Mar 2026 10:00:47 +0000
Manifest next update: Mon 30 Mar 2026 10:00:47 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: To1iE3ZzLnE96/3DH8bt/OmIuVz4KGvIHWqchLEyclM=)
2: aO8SV7r8aRmaMsrCVn54MAITseY.roa (hash: UBYs9t/xpmJLmkQIIYwuZf57SETqiU4zYplqSc9D++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f6:4e:58:c9:02:f4:d3:af:16:2a:bb:3a:12:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Mar 29 10:00:47 2026 GMT
Not After : Mar 30 10:00:47 2026 GMT
Subject: CN=4c2822e75c1233fe16539fd538195faca54d461e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:96:f1:04:ab:f9:6a:81:fb:67:08:71:1a:b8:
b0:a7:a0:6b:cf:e4:82:35:8e:07:1b:99:12:65:90:
85:34:49:2e:01:5b:e3:e6:51:2b:1e:c1:6f:f3:e1:
9a:ca:85:27:28:cd:8a:72:ce:66:63:b2:0a:ce:07:
e6:0a:c1:20:5b:fc:61:ea:82:89:a5:50:99:cc:5c:
a9:e1:6f:08:e7:72:09:19:47:e4:83:c5:3c:df:86:
27:5a:f4:00:f3:9c:3d:28:c6:a2:54:6b:b0:75:ba:
4a:4d:7b:ea:20:a6:9c:af:aa:ea:b6:34:80:e4:f8:
fa:06:7a:99:c7:d1:a1:5a:92:a0:ff:65:85:1f:4d:
5d:15:38:66:f1:84:bd:db:b9:b6:b6:44:be:0a:72:
53:f1:63:ca:1f:d3:33:55:49:d6:c0:6b:9a:95:56:
d1:45:90:72:3c:ae:ca:66:74:4c:b8:80:25:91:dc:
9b:2e:30:59:66:b0:14:d4:91:e8:82:fe:5a:76:de:
d9:53:0d:73:77:b2:68:62:5c:ba:e4:7d:9d:5e:eb:
8f:67:73:76:a2:1a:67:a7:8a:40:40:38:46:22:fe:
34:04:78:56:d6:52:32:dd:07:65:b7:6a:e1:74:25:
a5:f3:da:18:0f:26:71:98:82:79:24:9d:21:fb:25:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:28:22:E7:5C:12:33:FE:16:53:9F:D5:38:19:5F:AC:A5:4D:46:1E
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:87:33:a0:d4:42:7b:77:c5:bb:30:8c:33:bd:9b:24:bc:86:
de:ef:5f:1f:3c:99:35:85:d3:45:5d:fd:d2:f9:22:30:0c:48:
09:ff:9f:11:3f:93:bd:27:ea:33:99:43:3d:ad:3f:a8:27:2c:
bc:7a:8d:78:e1:01:7d:b2:0f:09:2a:52:4f:ad:05:90:74:99:
3e:f6:6e:18:8f:56:a4:33:6c:e5:76:a5:01:61:1b:ba:7c:9b:
db:4f:0d:21:54:6d:43:45:92:d1:d9:21:f7:ef:0e:20:65:88:
87:a1:71:bc:5e:3b:f4:a5:d7:a4:9d:cd:65:ca:96:28:47:01:
ae:f5:4c:04:52:81:05:ed:35:c1:f5:69:e2:5a:aa:7d:23:03:
bf:5a:b9:3c:ae:8c:a2:7a:ad:62:b9:64:81:5e:b1:5b:bb:ff:
02:2e:9b:65:1a:d7:bf:92:8b:0b:dc:d3:77:ef:08:fc:ef:e7:
18:f8:8e:7e:66:78:c5:aa:3c:47:d4:51:d2:bb:fc:b7:cb:9f:
df:10:bc:43:3d:e0:02:69:e0:1a:75:44:0f:e9:e4:7b:9c:f4:
90:ec:72:ff:62:d2:9f:59:e2:f0:82:02:bf:8e:8c:69:47:d0:
c1:7f:07:48:50:dd:e0:6e:02:91:6e:2a:33:18:49:50:82:0a:
f3:b7:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:37 2026 by rpki-client