Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
File: 7v5LdSmMAHIB5xyAalyMCee3dBE.mft (raw, json)
Hash identifier: 1WQfMRKg+miWTQcqxN3gyyOhFDs4fZsVYFX/2mzN52w=
Subject key identifier: 98:B3:BA:7C:5E:67:50:A7:F6:9C:5D:2A:80:5E:A4:C9:86:1D:D8:DD
Authority key identifier: EE:FE:4B:75:29:8C:00:72:01:E7:1C:80:6A:5C:8C:09:E7:B7:74:11
Certificate issuer: /CN=eefe4b75298c007201e71c806a5c8c09e7b77411
Certificate serial: 019D382E019E700C01600D79B6DE8758DF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
Manifest number: 01BB
Signing time: Sun 29 Mar 2026 06:00:32 +0000
Manifest this update: Sun 29 Mar 2026 06:00:32 +0000
Manifest next update: Mon 30 Mar 2026 06:00:32 +0000
Files and hashes: 1: 7v5LdSmMAHIB5xyAalyMCee3dBE.crl (hash: TC5sX875+vh258sWptrAwByZvOMa7c0mM1xxBt+E5i0=)
2: kSMT1dhlyUE_bz-1S4dIcztetw4.roa (hash: F9u5h4O+BQwPhg0+/A9rPBdp4O6XTcDk1n4Wko8CaAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:01:9e:70:0c:01:60:0d:79:b6:de:87:58:df:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefe4b75298c007201e71c806a5c8c09e7b77411
Validity
Not Before: Mar 29 06:00:32 2026 GMT
Not After : Mar 30 06:00:32 2026 GMT
Subject: CN=98b3ba7c5e6750a7f69c5d2a805ea4c9861dd8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:d0:c3:b7:a6:76:47:f7:38:16:21:2d:3d:
38:ca:90:5a:84:51:5b:f1:d5:34:39:af:01:77:08:
cc:f2:ea:fb:31:fa:af:41:7d:81:56:cc:d7:25:7b:
14:5f:1e:d0:de:e0:73:12:fa:3e:f4:23:dd:11:a8:
41:11:f5:02:7e:30:73:a9:fc:8f:6a:c9:55:e2:11:
ca:09:a2:52:b4:8b:d4:2b:3c:58:3a:f4:48:76:2b:
1c:a9:34:d5:33:40:8a:d2:e6:90:ed:c1:00:11:ee:
b6:7f:5f:4d:45:ab:5a:c5:2d:d7:5c:5f:05:ca:f5:
f3:f3:68:b8:c3:95:51:8b:83:70:ea:9d:a3:12:f7:
c0:f1:17:d1:09:2e:92:68:b3:5a:d7:b2:e3:b1:f6:
20:6b:d9:95:6d:c5:82:c8:2d:3f:49:7b:d3:2e:9c:
3f:63:f2:75:39:a4:36:9f:51:55:53:da:b2:72:1d:
d5:78:20:a4:fb:b9:12:d7:4b:b9:cc:74:2e:aa:13:
86:99:83:a3:d2:73:97:f2:22:05:cb:2b:3e:24:52:
57:54:da:23:7c:7b:af:76:64:12:60:e4:54:02:78:
dc:36:6d:48:eb:e9:ec:85:c7:66:3c:f9:d3:3f:44:
80:50:a3:9e:19:17:e0:45:50:6e:8d:15:a6:7d:46:
af:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B3:BA:7C:5E:67:50:A7:F6:9C:5D:2A:80:5E:A4:C9:86:1D:D8:DD
X509v3 Authority Key Identifier:
keyid:EE:FE:4B:75:29:8C:00:72:01:E7:1C:80:6A:5C:8C:09:E7:B7:74:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:23:7d:b8:ae:8e:46:ab:06:b1:96:c2:4b:31:13:14:39:5c:
52:60:cb:53:70:e4:e2:45:4f:d0:9e:18:1c:58:e2:e7:a2:5a:
2a:e2:85:ee:2d:1e:9c:2a:7a:52:af:1f:24:e4:a2:c5:67:ba:
41:8e:05:09:a9:73:d6:22:98:d0:7b:d7:b7:31:39:79:9b:23:
a7:cd:8d:53:fa:7f:d6:90:66:77:a2:08:52:e9:38:2e:d5:92:
66:2c:62:1a:62:cb:18:c8:5f:3a:8c:c0:e5:b8:4c:4f:67:9e:
0f:fa:34:8e:d8:96:d1:da:35:e3:96:8a:02:06:2c:ce:44:53:
0c:5e:0c:83:3d:46:5b:e2:4e:b2:5a:d7:d3:e4:bd:53:45:f0:
97:45:fe:52:58:da:27:a5:e2:f1:ef:5e:e2:91:99:0a:38:f4:
c4:a4:3d:5c:57:46:ae:d6:16:73:0e:8f:01:97:23:bb:66:3b:
57:23:27:d4:20:4c:2c:98:ab:ca:37:b7:0d:3d:f1:5d:1b:1a:
c9:41:d2:78:27:8a:d4:5f:68:56:ca:91:d7:b1:9d:b6:c0:59:
2d:13:58:87:1d:04:fc:00:01:2d:83:73:0f:90:b2:62:28:ba:
91:c9:e5:76:8c:e1:28:4e:52:31:03:4a:8d:6e:27:bb:3c:49:
ce:f9:b9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:57 2026 by rpki-client