Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
File: 7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft (raw, json)
Hash identifier: 0hJW1l+c40E/mSwgUEUGFiBOKd9tIlhx7WLLXFBJrs0=
Subject key identifier: EE:A3:5F:FC:ED:6E:9C:39:5D:7E:71:8D:A0:94:2F:C8:FE:87:D2:CC
Authority key identifier: EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
Certificate issuer: /CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Certificate serial: 019D3A1CDFA0C3359FC2C4E1822B2E9F55CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
Manifest number: 21
Signing time: Sun 29 Mar 2026 15:01:03 +0000
Manifest this update: Sun 29 Mar 2026 15:01:03 +0000
Manifest next update: Mon 30 Mar 2026 15:01:03 +0000
Files and hashes: 1: 7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl (hash: 6rv6v4im0fDnS4dHyxbzqwqzUxJYO6DxC7mRYJIKf4Y=)
2: Rubo6-NbY96YPObrTra-uq3P8fU.roa (hash: ky/M0LbnwTKBtipN4E15VVxICNF2Xh8wtPVIJDRLAKs=)
3: rBifEteMiJ25R5DQDU12NebJRS4.roa (hash: zud/trrJppI6pE83KUPt6r47Ql1iRfoDUPjneuGZTLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:df:a0:c3:35:9f:c2:c4:e1:82:2b:2e:9f:55:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Validity
Not Before: Mar 29 15:01:03 2026 GMT
Not After : Mar 30 15:01:03 2026 GMT
Subject: CN=eea35ffced6e9c395d7e718da0942fc8fe87d2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:5f:e5:4a:b7:22:02:9e:9a:ff:df:34:b2:
9e:a9:80:88:60:7d:ba:24:7a:49:6e:36:46:94:88:
6c:ea:a3:c4:39:69:aa:e5:5c:15:fc:10:d8:f2:a5:
0b:1f:59:dc:c7:60:02:a7:42:eb:4a:58:c4:1c:b4:
f3:c4:27:37:f2:33:59:02:37:38:0f:2a:a8:e0:35:
64:12:5b:18:4c:94:ca:bb:0a:fd:cc:23:b6:9b:7d:
0f:88:6b:d4:c7:2d:02:06:a9:56:c6:c6:1c:c9:49:
5c:41:30:06:5d:21:3b:55:f9:8c:58:55:0e:98:56:
ea:e7:f2:f4:e3:ce:3e:e3:7a:ed:9d:64:9a:11:12:
da:af:97:d2:07:55:47:a7:70:02:fe:3d:bd:37:5e:
ba:38:20:9d:ec:ef:aa:13:d6:dc:b7:f5:a1:8a:db:
2a:d4:6f:db:f8:0e:1a:30:19:6d:20:0b:d8:44:ce:
f7:23:b6:2a:c5:dd:93:d7:9e:99:79:ac:26:1a:80:
49:2d:3e:46:3f:94:47:2c:00:a5:7d:04:78:b8:81:
13:4c:07:41:a4:88:94:eb:f8:f7:61:a0:8f:01:7e:
70:61:9e:fd:e2:17:fe:f1:79:c1:89:44:5d:49:e8:
ca:8d:7d:49:ac:60:15:1e:55:ef:a4:7f:47:5d:c7:
06:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A3:5F:FC:ED:6E:9C:39:5D:7E:71:8D:A0:94:2F:C8:FE:87:D2:CC
X509v3 Authority Key Identifier:
keyid:EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7e:01:7a:47:c0:5b:18:9b:50:97:7e:3a:fc:7f:64:2a:a5:
7f:da:1e:c6:f4:d4:48:26:50:c8:31:81:5c:7a:c9:a1:b2:b1:
58:4b:5a:b7:3e:29:60:df:55:05:da:11:43:30:fd:1b:e8:d2:
55:be:d0:e5:4c:33:4a:aa:9c:7e:d0:6f:97:8f:5b:b5:8d:38:
b6:92:66:4d:81:46:5f:12:a2:bb:ad:91:c1:9d:e4:f9:6b:0b:
eb:53:70:65:05:50:9f:12:d0:85:3f:26:99:29:01:16:24:3a:
65:bf:61:c7:e2:58:e8:88:ee:34:89:6b:23:47:1d:5a:58:7e:
d1:0b:a5:7c:0b:c4:a4:c5:cd:74:0f:df:67:82:75:43:96:47:
93:d4:84:16:d6:7b:9b:22:3d:68:14:d3:2f:de:9e:27:97:fc:
91:eb:b0:b6:e3:38:b8:78:97:91:ea:6d:cc:a0:1c:f8:77:87:
0f:82:41:1c:df:dd:d9:1e:1f:65:75:f7:73:68:28:80:31:ce:
cc:3e:3e:6e:f0:0b:48:ce:1e:2f:c4:53:f1:a4:28:ac:67:73:
6d:d5:bb:9f:c9:21:8c:53:cb:66:96:ce:87:3d:be:4a:22:77:
ef:41:2c:67:45:81:91:64:a1:62:c5:c9:59:54:8e:ca:ae:b1:
5b:ac:bb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:25 2026 by rpki-client