Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier: 77WaC1VgrNnZy0XH/i+EC+LTFr6hjyDvzTUbCFjTk/Q=
Subject key identifier: 86:75:8F:61:1C:3C:82:6F:A3:E3:09:BF:41:76:63:60:AE:74:5D:26
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 019D382DDBDA3A606B65CFF3528678540139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: Zq8S8A6UgCyu7cXDZ3hCV37Gz/NWicNAXfxHq0yKbHw=)
2: RwU9zWthyfSOUWuvsWlsVhpMbmQ.roa (hash: 74TavDCjufR6GUNTwdp6AJnNFnxix31gx+8KWS5C2g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:db:da:3a:60:6b:65:cf:f3:52:86:78:54:01:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=86758f611c3c826fa3e309bf41766360ae745d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:b1:03:7c:c9:91:11:64:e1:40:fd:cc:19:
87:b9:5b:08:d1:78:3b:f6:6d:0b:ad:7c:e4:64:40:
24:64:1a:71:18:1d:ce:ac:b5:77:01:90:fd:6f:da:
a3:07:8f:0b:98:ee:df:28:4c:92:c9:a4:3f:83:cc:
b4:ee:ec:c8:ac:e2:39:e8:92:d3:63:ed:ce:81:3c:
87:f0:19:7a:43:c0:17:b7:c6:3f:8d:ec:f7:84:28:
f0:eb:ea:29:5f:80:4c:f1:f7:1b:a4:9e:ca:fe:7d:
cf:c3:6b:2b:aa:7f:77:11:3e:b6:86:23:47:25:d2:
c6:9c:1a:b2:83:53:68:97:7d:2c:e3:dd:ea:c1:a6:
af:66:d7:87:66:c8:a3:66:5f:39:30:85:6f:af:e2:
a5:24:a2:de:f5:43:d5:f6:f7:c7:0a:7d:40:1d:cf:
bd:75:aa:4c:ec:0f:ae:81:81:75:22:e5:f7:32:11:
48:71:f9:bd:a0:44:5b:2f:7b:dc:4f:04:1b:45:2e:
75:a4:dc:15:ef:7c:60:5e:04:f6:d3:a5:ec:b2:ad:
20:cf:b8:60:d4:b0:b3:cc:da:1c:d2:7b:c3:bb:12:
96:7d:2b:da:51:b3:1c:c4:5e:a0:16:1e:78:66:dc:
d3:fd:fc:0c:58:c5:1a:d5:e2:43:48:a9:81:6a:7d:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:75:8F:61:1C:3C:82:6F:A3:E3:09:BF:41:76:63:60:AE:74:5D:26
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a0:e6:5b:19:f0:8d:34:cd:59:20:27:63:69:cb:33:23:cc:
5b:c5:8b:63:73:a9:0c:b2:70:f4:89:5c:6a:f1:da:c7:ea:4b:
7d:ab:ce:8a:03:8b:b8:3d:3e:32:c9:92:f6:44:d0:c1:3c:6a:
34:10:24:53:87:11:f9:56:e6:89:67:4e:82:c9:30:bb:33:3f:
69:2b:17:03:c8:47:9a:db:16:24:62:be:5c:7a:8b:0e:d2:21:
ef:a5:64:dc:80:26:61:b7:9b:90:34:73:2a:96:87:0f:2c:81:
59:40:1d:3b:3f:33:6b:45:94:dd:ae:0d:5a:74:76:72:67:68:
3d:22:44:3f:ee:c6:d4:9e:24:23:67:cd:5e:88:91:49:d7:2e:
2d:d2:40:fe:da:78:92:42:c6:8f:3e:32:57:69:56:5d:9c:d5:
ef:19:85:47:70:21:c0:5b:89:bd:83:fd:34:77:e6:7e:d7:26:
67:ae:47:a9:09:42:e4:5a:72:ce:2b:02:ef:40:c5:a5:06:66:
66:37:7f:29:1e:19:1e:3b:06:6b:50:d5:b2:7f:77:1b:17:f8:
68:84:81:73:c5:f1:fc:b4:3a:90:33:48:a2:c2:68:b3:07:aa:
4a:48:32:d7:9a:23:db:e3:b1:92:a8:01:e8:c9:61:3d:80:63:
ab:6e:95:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:04 2026 by rpki-client