Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
File: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json)
Hash identifier: QP5Y+vVSlzJki/Z5T3DWAAv+4gybrZ4ABI68h1lXnSk=
Subject key identifier: 09:80:7E:E5:C3:3B:74:CA:5E:57:AA:CF:C4:04:F7:28:21:65:09:08
Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Certificate serial: 019D37C0A95D573FE0A8F6AACBEE668AAD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
Manifest number: 0604
Signing time: Sun 29 Mar 2026 04:01:06 +0000
Manifest this update: Sun 29 Mar 2026 04:01:06 +0000
Manifest next update: Mon 30 Mar 2026 04:01:06 +0000
Files and hashes: 1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: d4l9tUqrvg+RQOZObZuj6039KgEP93U/3y0YbHhsZdE=)
2: l1mFVAOuxHZKBwMbg64rZnUC-1A.roa (hash: b+iEU9Au8tIP5RGBvo59a7Rag467Ip6uQFWhSxkco+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a9:5d:57:3f:e0:a8:f6:aa:cb:ee:66:8a:ad:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Validity
Not Before: Mar 29 04:01:06 2026 GMT
Not After : Mar 30 04:01:06 2026 GMT
Subject: CN=09807ee5c33b74ca5e57aacfc404f72821650908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:8a:4b:6a:99:8a:65:a9:23:85:4b:c5:0c:
93:81:f5:27:9f:21:af:24:8b:77:55:bd:88:72:4e:
35:e2:39:84:7d:25:0a:12:a1:81:3a:c2:18:68:eb:
26:e8:e5:1b:ed:f9:3f:d0:a4:b4:f6:2d:24:c2:2e:
02:3b:e7:fd:ee:75:c8:26:1a:6e:5b:b4:a8:44:be:
d2:5f:78:ac:ed:ad:f6:58:fc:2b:fb:aa:32:11:99:
fc:9a:27:de:3e:d4:b3:ac:0c:3d:4a:75:74:9b:21:
9d:0c:8b:9e:d9:0d:6d:21:e7:6d:00:3e:b5:59:a7:
8e:1f:17:fb:3f:2c:4f:cd:d2:b4:69:dd:67:70:c9:
8e:52:be:a0:90:5d:c1:c2:8e:6c:07:61:82:b9:d2:
c6:92:1a:89:07:78:65:f1:02:2a:66:8f:3e:01:c1:
86:30:14:91:f2:3f:73:fa:90:41:7a:4b:c4:6d:15:
49:8b:1b:b6:78:4c:9f:33:4f:84:03:0a:af:46:11:
38:af:ac:ce:a0:f2:55:b1:85:dc:76:4b:ce:ab:ab:
cc:44:16:6c:f0:95:ee:2a:c4:20:71:ed:50:9d:f2:
b8:93:29:dc:c8:80:74:29:fb:4d:b8:d3:95:c2:6c:
6f:72:13:b6:41:9e:9b:df:52:7e:37:3e:1b:d8:77:
b7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:80:7E:E5:C3:3B:74:CA:5E:57:AA:CF:C4:04:F7:28:21:65:09:08
X509v3 Authority Key Identifier:
keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7f:26:ed:df:05:0e:b1:b6:ce:29:9a:4c:76:d3:af:1e:3f:
0b:1a:b0:c2:cf:fe:1d:ab:63:8f:a3:22:6a:4a:05:59:55:bb:
b5:15:3b:33:cd:1d:5c:89:9f:f3:3f:72:c2:e6:60:2a:de:b6:
87:7b:3c:b3:20:9f:b4:ef:d7:4b:b9:6c:8a:4f:41:6b:50:9c:
34:90:9c:d0:92:1d:a1:0d:8a:00:95:88:4e:5a:3a:96:47:52:
95:fe:ba:2f:97:07:9b:52:36:f8:e3:83:24:3e:8d:bc:a0:dc:
ec:c2:40:e0:af:5d:b3:68:40:d7:ab:07:77:5e:00:47:d2:b3:
a6:54:c8:c4:22:a7:85:42:73:0b:0c:bc:8c:f4:5e:f6:f7:29:
db:b6:67:4e:2c:9c:93:a6:ed:64:7e:ee:e8:cc:64:18:e0:61:
89:4c:9c:c7:2a:9b:13:ed:2e:22:60:0c:0e:d6:38:ed:61:5e:
55:94:5d:12:ad:85:c2:01:33:6d:24:f3:fd:c2:41:27:41:cb:
ce:13:0a:ef:e2:1c:0d:60:67:8d:ea:3a:9d:9a:4e:ca:f0:58:
60:c5:0f:8d:0e:35:9f:17:7d:af:a2:a4:dd:17:e4:42:e4:b8:
58:a5:2d:bb:02:bb:3d:63:8d:fc:37:e3:45:0d:18:b0:92:0c:
e9:d5:9b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:50 2026 by rpki-client