Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
File: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft (raw, json)
Hash identifier: SJt93CimBiw1+3EJQP0273VLvZfSBu25ayvS7NmY+Z4=
Subject key identifier: 2C:B8:D7:4F:65:8B:C8:B7:50:F1:02:67:E0:90:7E:4E:81:8C:3C:3C
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial: 019CE55A26E0634E0317D6842BDE60C645D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
Manifest number: 14A4
Signing time: Fri 13 Mar 2026 04:00:16 +0000
Manifest this update: Fri 13 Mar 2026 04:00:16 +0000
Manifest next update: Sat 14 Mar 2026 04:00:16 +0000
Files and hashes: 1: 1-nbvgTns4XEuIeTkS-WiJtQc-Ow.roa (hash: EpsG3PKVN4LLuyVtTXVPkQWMYJTWkP9XR4apujaoYwQ=)
2: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl (hash: O50ohF9vlU7N20B1AbKbmJnXvctdvG+L57H4T2mGmK8=)
3: sXC5yLn4k7J0Q9mLK5jMRSmlHl4.roa (hash: oarBoJiBeI3rfhIyVi9iZrYHFYrWYPyK5g0g+OH5uWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:26:e0:63:4e:03:17:d6:84:2b:de:60:c6:45:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Validity
Not Before: Mar 13 04:00:16 2026 GMT
Not After : Mar 14 04:00:16 2026 GMT
Subject: CN=2cb8d74f658bc8b750f10267e0907e4e818c3c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:43:f9:25:a3:0b:b3:60:c6:e1:08:01:6f:
18:cc:c7:fd:8d:c9:aa:1b:32:92:14:80:12:25:4e:
f1:e1:22:ca:9f:5a:ff:22:f1:ac:9c:e5:92:ac:a0:
1f:f4:04:08:33:1b:c2:b6:27:ff:97:89:ce:5e:24:
ee:02:31:ad:76:5e:90:f7:6d:1b:80:d9:86:23:e2:
bf:86:c8:e4:33:91:77:1c:11:25:2d:f2:e7:c9:a8:
63:ba:08:ac:e2:96:9e:d5:e5:a7:5d:d0:2b:a6:a2:
27:6f:c4:bb:d0:b1:1a:6f:9d:74:5e:3f:f1:95:95:
da:64:93:58:49:7f:8c:da:40:27:89:99:41:64:1b:
7a:23:d6:09:88:a8:42:0f:f3:2f:5f:dd:d6:90:c9:
18:0b:e8:67:33:17:75:9e:99:5e:18:de:c9:e8:6e:
72:4a:d1:55:19:4b:df:a5:4e:13:6f:0c:17:a5:d1:
70:b4:70:15:43:63:e2:2e:d8:8d:a1:14:6a:a1:c7:
7a:61:75:da:1b:c8:af:48:b3:43:92:71:8f:ab:b3:
56:64:22:f4:b3:f4:59:33:a3:81:d5:ee:3a:3d:92:
88:c0:2d:91:52:26:89:09:97:35:01:cd:fd:9b:63:
81:27:37:08:5e:6b:35:83:b1:c2:73:45:1d:85:be:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B8:D7:4F:65:8B:C8:B7:50:F1:02:67:E0:90:7E:4E:81:8C:3C:3C
X509v3 Authority Key Identifier:
keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:66:56:92:70:ee:b9:63:98:c9:14:cc:f8:7e:03:fd:d7:91:
d0:c4:c1:26:01:4e:fb:4f:13:91:aa:e3:29:ed:02:aa:22:f9:
04:a8:06:39:ab:f5:18:a7:bb:62:5d:82:30:8c:2f:e2:f7:01:
ed:74:a2:80:13:da:30:4e:36:ab:77:2f:e5:ac:2a:db:37:a7:
09:57:27:9f:a6:3d:b6:ed:00:d1:e4:d0:26:40:4d:6e:53:78:
b8:d6:f6:55:7f:dc:71:28:e9:cd:ed:29:8d:77:81:d5:2f:c3:
60:fa:b0:09:b7:e4:7a:a2:5f:21:8b:5c:61:ef:04:d0:63:fa:
41:0c:a6:81:24:6b:f6:4b:6e:2c:cb:a9:e0:ee:a4:0e:d1:94:
15:08:e9:a3:7b:8e:19:3a:6c:c1:48:f8:a5:e4:03:a6:47:5d:
af:69:ea:67:e4:12:9f:50:a7:7f:7d:7e:c1:92:cb:c8:d0:94:
dd:ca:49:07:1a:8d:a3:ca:3e:31:32:bb:5b:3f:28:ee:48:4c:
6e:25:fe:55:3b:86:5a:6c:a4:6f:a2:35:a4:b5:dc:ee:d0:a3:
56:fb:56:55:9f:50:93:0e:27:40:f4:c0:3e:07:8d:6f:c9:58:
c0:f0:a9:dd:85:6e:61:7e:e2:d3:43:26:11:08:43:94:41:da:
e1:c3:af:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:18:33 2026 by rpki-client