Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: 0Okdn10dC9JCeSNRuzg8L4rP3Utn+pcrJmIapcvh1f8=
Subject key identifier: D5:ED:86:E6:2B:4B:29:E6:0D:43:83:6F:4A:D7:D7:D3:C1:CD:9D:88
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 019D3977FCA9178B8A630F27E7AE6FE62507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 1017
Signing time: Sun 29 Mar 2026 12:00:57 +0000
Manifest this update: Sun 29 Mar 2026 12:00:57 +0000
Manifest next update: Mon 30 Mar 2026 12:00:57 +0000
Files and hashes: 1: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (hash: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0=)
2: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: 4LsQw+zlRVMvOQ3HcnW+Bpe3be01Cew94DKOPZkYbpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:fc:a9:17:8b:8a:63:0f:27:e7:ae:6f:e6:25:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Mar 29 12:00:57 2026 GMT
Not After : Mar 30 12:00:57 2026 GMT
Subject: CN=d5ed86e62b4b29e60d43836f4ad7d7d3c1cd9d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:40:ea:b6:32:72:53:f9:4c:c0:73:64:41:
b0:d0:ba:58:d2:d0:12:34:c7:f1:35:28:97:e9:ce:
ad:65:b2:93:13:48:f1:88:26:cc:a7:3e:b3:ab:a1:
eb:d8:c4:19:4c:81:47:3b:90:de:0a:7d:18:af:de:
d2:df:6c:a0:e9:bc:04:43:e2:93:16:16:8c:da:b8:
d4:e3:9f:98:60:38:57:fd:26:33:f2:59:9e:92:01:
de:6d:51:be:2e:32:6f:4d:c3:9e:aa:55:e1:89:1e:
b9:d7:be:26:bf:86:57:1e:23:e2:2f:d1:e8:85:52:
52:d6:eb:0f:a8:59:d4:63:3f:0f:68:2d:b9:bf:94:
21:01:b4:45:31:e2:d0:b2:e4:ff:ca:7a:b0:fc:5a:
45:02:29:5b:f4:7b:49:f6:1c:22:ee:76:d3:8c:51:
82:e2:ca:66:3f:13:bd:b1:75:56:40:8a:1e:5d:2a:
bd:7e:40:e5:3e:44:58:51:42:e1:74:7d:7f:eb:45:
94:a1:67:4f:82:02:4f:11:14:f1:49:c1:31:e7:f2:
00:a2:21:d0:30:7a:bb:cd:f0:c2:7a:84:0d:24:0d:
8b:6b:3c:c9:42:9b:8b:3d:d1:76:37:ae:3b:11:92:
2f:78:ea:1e:f9:d2:15:32:fd:95:24:a4:71:f7:a2:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:ED:86:E6:2B:4B:29:E6:0D:43:83:6F:4A:D7:D7:D3:C1:CD:9D:88
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b4:34:4a:70:17:ff:22:e5:d3:a7:20:75:48:f1:85:41:67:
7e:14:65:44:43:85:73:8d:19:1c:25:b3:f9:62:ba:fe:c8:d1:
df:b5:d7:41:25:73:93:f1:3c:fc:5d:8c:b3:40:a4:77:1b:85:
75:e7:3c:aa:34:a3:3c:ac:31:3c:b8:fd:51:58:b6:c9:0d:18:
70:10:5b:ad:4d:c1:19:b8:2d:63:5a:3b:09:a8:17:91:6d:77:
e7:83:3d:71:d1:43:96:08:1e:1d:50:c2:8b:89:1f:45:b4:97:
86:ba:77:30:cc:2c:67:ed:42:8a:40:b6:a9:8d:76:ce:17:9f:
6f:d5:09:fa:58:83:81:ce:96:5b:22:a3:65:59:f7:4f:93:bd:
bf:bd:a1:15:d7:0a:e8:2e:5d:10:1e:60:85:ed:83:6b:5e:31:
0e:90:28:a2:8d:fd:c4:50:9f:70:1d:94:ae:e8:80:c4:57:70:
b2:3f:0b:7f:0b:6f:87:2c:a1:30:fb:00:9c:04:12:1f:6c:89:
35:e8:59:c3:e3:56:51:11:eb:31:8b:90:df:ab:48:5a:46:6e:
2e:cb:79:df:51:18:61:1c:1f:06:c3:fc:0a:dd:d7:d1:55:3f:
9f:80:cb:5d:f2:b2:66:cf:16:fc:00:73:22:5e:56:d0:b9:51:
29:a5:0c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:28 2026 by rpki-client