Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier: oiZAdhUngGYICTPr+UyVnrBZDBaf4+hOcZ9wwRSfrwY=
Subject key identifier: 54:64:C1:C1:F5:B3:B4:E1:A5:5B:78:F9:9B:BF:F5:1C:2D:15:B3:86
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial: 019D390A571F6F9145A1F8BAF9A03DDEA3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number: 09CE
Signing time: Sun 29 Mar 2026 10:01:12 +0000
Manifest this update: Sun 29 Mar 2026 10:01:12 +0000
Manifest next update: Mon 30 Mar 2026 10:01:12 +0000
Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: snBAYdzZa083x5ZsaSD9QLVqibGa7RQlhpQUXTaa9fk=)
2: UlZluMg72w3OGQ7yVXSws-uTL0A.roa (hash: ZbBL16EPSfeFJDsY/7W353hLaYPwOpiK4otGlBdRF9Q=)
3: r6bLmGYRXJA6GUfCZnH4ebCbXYU.roa (hash: Q+Z0jJyseu+MqQA03xeTfakfDGrq+7+0HE8bf99rEXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:57:1f:6f:91:45:a1:f8:ba:f9:a0:3d:de:a3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Validity
Not Before: Mar 29 10:01:12 2026 GMT
Not After : Mar 30 10:01:12 2026 GMT
Subject: CN=5464c1c1f5b3b4e1a55b78f99bbff51c2d15b386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:b7:1d:d4:e2:83:6c:9c:9e:7a:33:95:0b:
d4:b8:ca:83:a5:57:c4:6e:cc:2d:f6:f1:e9:6f:a6:
02:01:e6:ac:e0:02:91:57:35:13:ab:12:ce:5b:10:
61:8d:50:14:d8:2f:b0:79:c1:42:2b:af:cb:3e:fc:
7e:76:19:2b:74:e0:67:21:93:fd:e7:39:f9:4b:49:
f3:d2:96:5c:41:ff:4b:33:e9:1c:0c:81:08:32:95:
1b:1c:99:b6:e3:5d:6d:1c:27:a2:15:d8:44:38:97:
1c:b5:ea:7f:17:16:d4:ba:42:fb:3c:40:3e:ec:f7:
e6:a1:94:bd:49:bc:ec:3d:19:bd:fc:80:df:a1:34:
43:11:92:e4:ad:f0:e1:36:a3:bc:16:0e:f7:3c:52:
e9:ad:fc:c4:63:4d:30:c6:79:7e:2a:44:a9:ee:cc:
51:82:8b:6d:ff:ee:55:29:d5:02:9f:0a:93:d1:ad:
5e:64:8c:ab:4a:8f:e3:17:02:d8:5a:44:c6:21:7e:
56:73:39:12:ed:de:a9:f9:0b:55:a0:53:8b:f7:59:
12:21:db:7d:b3:bc:85:0c:15:df:47:60:1a:91:3b:
e5:52:6b:21:d7:12:e8:ec:17:88:db:71:7e:25:88:
35:16:03:25:59:27:6b:0a:d3:78:f3:e9:87:3a:90:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:64:C1:C1:F5:B3:B4:E1:A5:5B:78:F9:9B:BF:F5:1C:2D:15:B3:86
X509v3 Authority Key Identifier:
keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3e:05:4d:13:05:a6:e8:75:58:65:5f:ef:9c:c2:70:7f:4f:
96:fb:21:b0:7f:58:1b:f1:cc:91:0d:fe:e1:b2:3d:6a:c6:80:
d3:61:ef:b2:1f:7d:64:78:fb:88:3d:98:31:a5:79:19:42:b6:
bb:9b:48:a4:06:b2:b9:60:e8:2a:27:a5:c7:6e:2e:24:d6:dc:
04:de:a3:5f:85:c6:de:1e:5c:20:f3:80:23:ea:af:43:ca:ba:
e2:69:ec:97:2d:37:b0:57:aa:cf:4f:1a:4c:2c:98:16:9b:b9:
0a:26:64:71:cb:1c:1c:42:96:ff:15:45:0a:01:be:42:94:6b:
29:29:6e:88:54:c4:88:d3:6b:a7:09:cc:23:d7:d0:f8:66:13:
b1:ee:bd:6e:ed:de:5c:9f:75:7a:d5:aa:fa:bf:eb:50:62:fa:
a8:0f:76:cf:41:54:f0:2c:e8:e2:a2:a1:6d:b0:0a:62:0d:db:
9b:a6:d8:35:f5:25:e5:46:39:92:45:13:58:25:3c:bb:71:24:
6c:5d:31:89:84:48:3e:a1:c2:e6:45:87:06:a0:84:74:8a:4d:
19:e7:d2:4b:b5:ae:39:3d:26:d3:69:70:25:cf:04:76:2e:94:
5e:c7:48:60:cb:ca:82:93:a2:f1:f3:72:9d:d6:d9:6f:32:66:
11:91:28:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:06 2026 by rpki-client