Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: Mhqaiyox0yxFOLI6mjTzunrrKAqFTJAOT7RHnWAHXJE=
Subject key identifier: 27:3A:A2:22:34:71:73:50:02:3D:34:F0:3D:21:38:0B:4B:51:87:77
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 019D382E2FA54959B0CBE6D6162570F8225A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 0FFF
Signing time: Sun 29 Mar 2026 06:00:44 +0000
Manifest this update: Sun 29 Mar 2026 06:00:44 +0000
Manifest next update: Mon 30 Mar 2026 06:00:44 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: B4FufsGFzr046ZfY/Qc9gA1UGBQMPcDD5evW/ipLdVs=)
2: seylKk68qXKxhoBzXl7E0-tTkU0.roa (hash: 14ms6tysm87Rxm8W+2zvydPUm5MTtyrDqlszeDC47Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2f:a5:49:59:b0:cb:e6:d6:16:25:70:f8:22:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Mar 29 06:00:44 2026 GMT
Not After : Mar 30 06:00:44 2026 GMT
Subject: CN=273aa22234717350023d34f03d21380b4b518777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:44:16:61:53:5d:8c:f2:95:34:64:7f:11:ef:
f3:c8:08:6c:9c:7c:d3:d0:0b:90:ce:de:58:31:91:
09:31:a4:3c:9a:73:76:62:f4:bb:00:0a:be:f8:e4:
99:94:0e:65:eb:19:47:a7:24:2d:93:62:32:b5:82:
be:5e:69:7f:0a:8e:50:63:28:e0:45:bb:c0:e8:11:
a2:eb:34:2c:6b:48:1b:54:f6:af:5a:68:99:1d:60:
58:fa:c9:08:52:e4:2c:66:f2:be:e7:4d:ae:db:0e:
e4:0d:7f:6b:d6:08:ff:42:98:52:aa:e4:77:79:9c:
5b:b1:f9:0d:8d:78:2b:5a:04:d4:aa:42:38:1a:97:
46:15:90:b6:ea:10:ea:72:21:16:11:ce:d5:b3:1c:
17:65:de:7c:f8:1b:74:6d:ba:85:67:1d:42:ef:da:
6b:5c:58:e8:f1:c7:02:66:b7:0f:ed:d5:b4:8a:25:
d1:5c:b7:4e:e3:46:b0:43:0b:ba:ec:0a:21:75:84:
b9:3e:4d:a1:0c:99:14:df:f7:c7:25:81:a2:12:a7:
74:2f:b4:de:a4:a5:4d:ab:91:89:62:c4:2b:e8:6c:
8e:9c:61:45:3f:dc:0d:41:32:82:15:96:4d:80:76:
cf:42:11:2d:2e:62:42:19:7c:11:89:28:28:e9:a5:
64:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3A:A2:22:34:71:73:50:02:3D:34:F0:3D:21:38:0B:4B:51:87:77
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:97:a9:db:fb:c8:26:1b:0b:6d:52:7b:6b:8d:15:2f:93:55:
04:72:ab:a8:38:60:f2:6e:18:67:cc:b3:9f:fc:75:57:af:af:
cd:85:80:25:05:85:2c:1e:be:4f:df:f8:21:d8:12:0c:0e:53:
37:c9:c6:0f:23:80:90:1c:a5:87:71:5a:06:5a:69:1f:35:0d:
bb:b7:8b:a3:3e:e0:c0:9e:a0:07:a3:62:94:02:eb:49:ff:5b:
33:53:3e:5f:23:01:15:19:0c:23:82:e5:3d:1e:9c:9a:74:c6:
b6:16:0b:4b:9e:9f:64:24:b2:82:82:32:f0:34:42:3f:56:82:
ea:c1:00:1d:ad:8d:ee:44:79:fe:bb:38:98:01:09:3e:e2:3f:
50:67:38:0e:02:6d:a9:41:9f:fb:fb:98:c9:0e:a3:e3:a7:d2:
df:a5:58:ef:f0:51:fd:11:8b:13:1c:2a:69:bc:bb:b4:15:04:
55:9d:db:24:4d:f4:4a:b1:65:e2:34:e4:6d:f4:70:5b:9a:96:
a5:1c:a1:d6:67:7a:cf:9a:fb:a4:14:2c:c5:98:1f:db:05:e2:
b0:9a:05:71:b8:60:13:7d:2e:e6:c2:24:54:d1:20:b5:b6:1a:
6b:90:ad:35:31:3e:c9:da:90:22:40:e9:5b:b5:6c:65:a7:af:
a2:6b:92:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:34 2026 by rpki-client