Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier: q3OzKrhSElorVHmdDmtdcACdEIr0JyXIoFOkRgmcdJs=
Subject key identifier: 27:F1:6B:91:E7:AA:DE:FA:DD:62:6B:9A:B3:2C:04:E2:93:D6:1A:4B
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer: /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial: 019D39AE82F52C27E947FC7EFB4BDA2197FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number: 0CF4
Signing time: Sun 29 Mar 2026 13:00:31 +0000
Manifest this update: Sun 29 Mar 2026 13:00:31 +0000
Manifest next update: Mon 30 Mar 2026 13:00:31 +0000
Files and hashes: 1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: 99UxCJIiUyiD2mCqeCKWHPKCiJDq7FI+T6uE+tw9ewM=)
2: HdaygFB4iSszAmMjo8uX2Se1nQA.roa (hash: UArj7jtroG3BsSDh4aM2iaAylpZS3vUew6s3b3GEueo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:82:f5:2c:27:e9:47:fc:7e:fb:4b:da:21:97:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Validity
Not Before: Mar 29 13:00:31 2026 GMT
Not After : Mar 30 13:00:31 2026 GMT
Subject: CN=27f16b91e7aadefadd626b9ab32c04e293d61a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:18:46:d3:e9:94:c8:bc:d8:67:7a:18:05:c2:
f2:ab:9a:2c:da:dd:5a:1b:4e:7d:f9:6a:a6:a5:cf:
4b:af:5a:ec:a6:69:ac:55:28:13:e3:68:a9:23:dc:
bb:77:15:e5:89:9c:40:fe:b5:9e:f5:a1:2b:15:a4:
1f:41:60:00:e9:38:93:fa:91:14:8e:9c:8f:fc:c2:
0a:83:7a:b0:fa:4f:ba:3a:a5:4d:aa:b7:de:a5:f9:
06:d3:17:a9:62:23:44:01:1f:9b:68:04:2c:8a:c9:
1a:6c:5f:7c:d3:d4:0b:11:3e:49:62:21:b0:33:49:
34:47:51:87:48:40:c6:22:43:50:27:78:b7:d8:18:
09:fb:e9:1b:83:eb:be:cd:ab:fd:99:db:db:58:13:
07:d9:d8:24:b8:da:d4:54:38:4a:92:77:ca:5f:55:
dd:b9:de:66:f3:03:bd:1c:90:3f:21:f3:e3:36:19:
fc:23:01:cd:1b:49:da:28:50:55:8f:8c:b4:05:7c:
36:55:39:31:2e:52:da:d6:64:de:8b:3d:74:84:a0:
a1:e0:8c:d3:07:0d:6f:16:61:5b:02:91:33:1d:06:
4f:bc:eb:4f:a0:5c:eb:72:99:94:23:4f:4f:b7:49:
62:0e:cd:52:a0:02:c0:4f:f8:85:07:6b:ca:f7:b7:
78:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F1:6B:91:E7:AA:DE:FA:DD:62:6B:9A:B3:2C:04:E2:93:D6:1A:4B
X509v3 Authority Key Identifier:
keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d3:e8:6a:d1:62:ba:ca:ef:4d:c1:d3:d9:63:10:ae:8d:61:
48:74:de:08:9c:9f:95:4b:8e:01:cf:f6:01:be:59:36:18:91:
47:20:42:e4:d8:82:be:7b:d4:f9:33:d9:be:2d:95:95:a5:57:
5c:e7:6b:91:fa:49:c4:46:7b:40:5f:2a:96:81:58:be:48:50:
24:2f:d9:62:b3:72:bd:0c:5f:66:9a:61:f6:9f:aa:11:70:ba:
ac:15:f7:80:f2:3e:22:d4:3c:5b:a7:41:4f:cf:14:46:a3:ae:
5a:e2:89:ef:a6:f3:7d:51:41:c3:ba:da:8a:cd:92:eb:03:09:
42:d3:33:b4:6a:8c:dc:7d:a9:fc:90:d2:13:b1:32:80:8a:52:
47:02:90:86:6b:4c:0a:fe:16:d2:b4:8e:85:97:91:4b:4e:d2:
f2:b0:54:ae:cd:c2:77:86:5d:43:52:11:b5:b1:fc:9c:a2:de:
08:14:2f:c8:5f:56:fc:fb:22:da:6d:f5:2c:33:74:b4:56:7b:
9d:05:d3:ea:fb:e8:14:7e:7f:ec:68:0e:cf:fa:ec:85:9a:34:
5a:9e:db:bd:f7:2a:b5:99:98:ca:e9:3e:1c:ae:e3:2f:79:ea:
a8:e7:be:d2:33:5c:0a:e0:54:df:66:3e:68:f9:1a:df:b3:ee:
e4:07:a2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:49 2026 by rpki-client