Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
File: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft (raw, json)
Hash identifier: jfKMe2e3eIMac8tIAo+cby9bNcQM+VCdfBOJMrjTrZY=
Subject key identifier: 09:C5:91:97:BD:CA:81:12:D8:4C:12:D8:9E:15:96:6C:44:34:1A:A0
Authority key identifier: EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
Certificate issuer: /CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Certificate serial: 019D38D2FB0BB6DF1D7E9C3CB2913FCB3586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:44 +0000
Manifest this update: Sun 29 Mar 2026 09:00:44 +0000
Manifest next update: Mon 30 Mar 2026 09:00:44 +0000
Files and hashes: 1: 1LtQ8yyQTy0Z9FcFRr_CRKY4wmA.roa (hash: ZIqC9QiveD2lOUDRGF1cl6cKWZLfSdgfnE3L9iB+Xuw=)
2: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl (hash: JSJGOLzdCylx7B5cDsN+9IHE9gEH7Ues2BzkhWDnHoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:fb:0b:b6:df:1d:7e:9c:3c:b2:91:3f:cb:35:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Validity
Not Before: Mar 29 09:00:44 2026 GMT
Not After : Mar 30 09:00:44 2026 GMT
Subject: CN=09c59197bdca8112d84c12d89e15966c44341aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:10:cd:2e:0b:45:bb:8b:ff:62:82:b2:e0:
64:ec:b3:03:93:c5:ab:30:73:49:ef:d1:c5:68:06:
90:f2:bd:f2:19:32:85:8a:f6:5e:28:f0:fd:40:02:
77:cd:d0:66:9e:13:bd:e1:f2:ef:5c:d1:7e:06:ce:
09:bb:4d:0e:bf:f9:ff:aa:f4:f0:ac:bf:92:3f:13:
e4:6a:61:0f:1f:03:9d:85:12:00:d5:48:e6:15:80:
c7:6a:bb:6f:f2:41:a9:5e:3b:d9:70:57:89:59:79:
5c:44:31:38:a6:f0:e1:49:98:81:fc:96:93:59:0a:
04:82:28:f5:5d:05:ca:11:3f:0f:c3:10:1f:3f:85:
88:99:76:3f:4d:e5:fe:3a:95:77:22:c3:6a:6d:b0:
e9:7c:6f:20:9c:b0:fe:80:15:1f:d2:30:23:4d:f4:
5b:1f:38:b9:d2:96:89:6b:e1:94:31:83:42:e7:91:
df:47:21:07:e2:4d:a4:43:51:a5:2c:15:a7:b3:4a:
1f:49:db:22:9f:a4:5e:de:c8:9d:8b:4e:3c:a9:e4:
04:db:39:8c:93:30:31:a5:ac:fd:ce:63:cc:39:61:
b9:19:62:72:c1:5b:17:fd:ed:1a:f5:c1:a6:c4:ba:
c1:4c:03:6f:c0:98:c8:be:34:72:2c:d8:d4:9f:1f:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C5:91:97:BD:CA:81:12:D8:4C:12:D8:9E:15:96:6C:44:34:1A:A0
X509v3 Authority Key Identifier:
keyid:EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5f:08:c4:13:16:94:30:7b:a3:a9:17:78:18:0f:de:9e:60:
f1:2b:2c:8a:45:8e:53:84:fd:a2:bf:b7:47:1d:4a:89:3e:bd:
24:5e:7e:8c:88:2b:74:4f:5a:f3:4f:32:41:fe:70:58:80:fb:
1b:32:7f:68:c5:f1:54:90:f5:5a:32:ba:87:e3:63:ef:d5:c3:
21:b2:c7:9b:be:54:74:00:58:88:7e:b6:2e:b1:4d:47:47:d6:
e5:8e:d8:e8:42:60:9b:a2:58:a4:c2:9b:66:d1:7d:1d:0e:ba:
49:7d:24:11:81:cd:c6:00:c3:8c:0f:72:32:c5:49:0b:82:f3:
b7:3c:2e:94:de:f2:e8:cd:2e:a1:10:46:5e:40:b5:92:d2:5a:
e7:a3:21:43:6d:70:94:ba:d3:ee:c4:74:65:1c:0a:71:c2:c3:
69:35:03:d0:4b:3e:4f:d9:6c:01:50:7b:9a:e7:fb:75:d7:c0:
65:71:e9:f8:ea:5e:2a:18:44:cb:1e:ec:b1:75:29:78:32:c5:
72:8c:38:1d:f0:c8:ba:98:c2:17:d7:f7:11:46:5e:06:d4:cd:
12:70:ff:50:bd:2c:a1:43:e7:a0:0f:64:e3:e5:fc:1a:52:7a:
68:51:04:37:0c:84:fd:6b:4c:a4:18:f2:00:1c:27:2c:9b:6f:
60:c8:70:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:09 2026 by rpki-client