Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier: ThTXKSZn7pSsPhLX+GeRGU8TrGmcr9Rj44ep4t5qsps=
Subject key identifier: 47:68:85:27:6D:7C:D1:10:F9:F4:E0:05:64:C4:7E:46:14:38:49:E3
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial: 019CC8D0FC985599D7CA2FDF4B4C7C96AC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number: 0FC4
Signing time: Sat 07 Mar 2026 15:01:05 +0000
Manifest this update: Sat 07 Mar 2026 15:01:05 +0000
Manifest next update: Sun 08 Mar 2026 15:01:05 +0000
Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: rYlFaX1D7kcjNI0kA415sCkp9UWtiIqot9n/FoZM6eM=)
2: MF5bEoN5sg-nawNjAIcgKbPLo2w.roa (hash: Eoby9ocfXIo2ysG9Id22HAzaklocSsTXx7pabi0Mev4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:d0:fc:98:55:99:d7:ca:2f:df:4b:4c:7c:96:ac:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Validity
Not Before: Mar 7 15:01:05 2026 GMT
Not After : Mar 8 15:01:05 2026 GMT
Subject: CN=476885276d7cd110f9f4e00564c47e46143849e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:ec:e0:b6:da:62:1c:44:5c:f8:4f:3f:0a:
90:2b:1d:0d:82:b1:72:77:68:1d:1a:2e:5a:66:5a:
b6:89:20:ba:6c:86:ca:1e:66:61:cc:f1:97:c8:1b:
af:9b:08:be:c6:bb:4b:fd:83:18:34:2d:74:3c:dd:
53:10:44:d7:23:17:0f:b4:46:3e:b9:c8:0c:62:14:
7c:62:68:28:d6:fa:76:08:52:c0:03:67:1f:2f:1d:
d4:75:a4:59:b2:0c:82:2d:f5:6e:75:46:a8:ba:30:
da:c7:e6:94:9e:0e:2c:c1:6c:e3:4d:44:88:06:1e:
96:ba:ca:3e:13:54:6d:66:06:f1:49:aa:03:c4:fe:
96:9d:e3:19:60:b8:8c:0f:e2:d4:1e:d6:d4:61:03:
03:78:52:37:35:02:3f:db:f4:07:b4:bd:4e:4f:0a:
72:33:2c:6f:8f:e8:01:53:f2:a4:13:c4:e7:25:ba:
4e:97:59:7f:be:1e:cd:69:b0:24:5b:6c:36:71:a7:
1c:23:a7:d2:cb:96:1f:48:84:07:b4:b1:ab:2d:ed:
2b:a5:5f:08:5d:6a:5c:7c:4c:5c:76:20:0d:1f:f6:
60:87:b9:0b:46:ca:b6:63:b3:60:c9:c7:05:a9:a9:
1f:68:ad:a1:72:a3:ba:b7:97:db:23:43:60:c7:d3:
89:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:68:85:27:6D:7C:D1:10:F9:F4:E0:05:64:C4:7E:46:14:38:49:E3
X509v3 Authority Key Identifier:
keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:40:db:99:77:63:9a:67:63:89:57:9f:b2:44:a4:2b:64:2d:
e1:b3:4b:ee:6d:d5:b5:fc:db:44:2d:e2:3e:6e:86:68:f0:93:
f4:f4:0d:14:27:74:31:5e:07:01:e5:66:ca:c2:9b:76:a1:55:
8f:74:87:63:8c:b8:e1:85:e2:8a:b2:9a:4b:a8:51:03:23:16:
f7:8d:3e:66:d3:bf:dd:04:02:86:37:28:e0:33:97:76:da:e7:
08:d1:e6:a3:61:a9:cc:d1:92:5d:4c:00:be:2d:58:62:54:aa:
87:a2:0c:8c:fd:52:2d:99:9f:6d:57:f8:98:9d:ae:d9:d4:76:
af:cd:e2:a5:59:a7:b3:9f:ed:5c:55:96:2b:a6:6c:ce:1c:60:
2b:b3:4e:3e:a0:80:35:5a:73:25:c2:ff:83:58:c1:b6:38:6d:
ed:44:0c:00:90:11:8c:b6:44:af:52:f0:12:9a:ba:c5:d9:7d:
fa:56:5d:13:ba:7a:ce:59:04:46:ab:82:30:67:b1:6b:98:dc:
eb:f2:1e:05:6d:f7:35:3d:eb:ad:eb:8e:a3:ea:4e:52:1f:ba:
c5:17:62:ce:d9:05:88:f4:69:53:a5:6f:67:05:a9:30:29:7a:
96:85:2f:c3:18:ea:b4:5a:70:99:8f:97:eb:f2:29:9d:bc:ee:
7a:1f:67:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:02:14 2026 by rpki-client