Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
File: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft (raw, json)
Hash identifier: 6PsE92ualKgYIJ/WdsVisdQ/tiABfiXneKxhcmBsNGE=
Subject key identifier: 77:C1:BA:E4:47:6A:69:0E:D5:04:3C:0F:E8:8F:9F:B7:D9:0F:D1:3D
Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
Certificate issuer: /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Certificate serial: 019D24713097439B1BB9234A82D77CB27E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
Manifest number: 07D4
Signing time: Wed 25 Mar 2026 10:01:30 +0000
Manifest this update: Wed 25 Mar 2026 10:01:30 +0000
Manifest next update: Thu 26 Mar 2026 10:01:30 +0000
Files and hashes: 1: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl (hash: rYTwSVj8vs8RKwtusk2wUHU+rgZllcsukTbVeIhrRto=)
2: XOqhNOZxOAhHFkz4hARIcbp-d5A.roa (hash: 4hL/1mxlpdw2Hk9JU1ljcj2USapEcK3wvUAzct7W9FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:71:30:97:43:9b:1b:b9:23:4a:82:d7:7c:b2:7e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Validity
Not Before: Mar 25 10:01:30 2026 GMT
Not After : Mar 26 10:01:30 2026 GMT
Subject: CN=77c1bae4476a690ed5043c0fe88f9fb7d90fd13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:e2:30:55:bf:23:f9:78:20:39:d5:4b:a3:
e4:ed:96:9e:8b:19:c3:e9:ee:2d:a3:05:bd:41:4d:
1b:31:20:99:0f:ea:77:94:f1:a9:20:d2:d5:c9:a5:
ea:7e:75:6a:96:a9:b4:2c:78:9c:44:cd:0a:74:54:
a8:2d:61:0c:95:ba:ab:57:36:5d:48:5a:68:cb:07:
c8:dd:53:c9:6c:6c:42:f9:b5:9b:be:39:44:fb:71:
8a:46:46:3d:81:f8:4b:fc:9f:6b:b3:f8:21:bd:20:
2d:4f:1a:99:fe:d8:b4:be:79:e7:e8:c3:b7:d7:29:
bd:b6:a9:2b:2e:1a:d0:e1:75:c4:8f:16:27:f9:0b:
f0:c3:b1:ad:6d:eb:d8:fb:93:43:07:a8:99:6a:b8:
28:f9:f0:8b:1d:41:ee:7c:7f:d5:8e:ee:a8:40:7f:
87:e3:b5:0d:88:8c:e9:56:35:bf:07:f8:96:1f:66:
d6:da:22:92:75:bd:68:ae:91:0e:e6:af:55:f0:5e:
37:f0:32:32:e5:e2:d7:ac:54:c0:ed:4c:e3:16:14:
78:9e:4e:a9:dc:e5:04:26:5d:33:78:7a:ba:47:36:
80:10:2c:4e:48:9b:c9:20:0a:46:61:14:07:a6:47:
33:4f:d2:64:78:7e:1a:6c:59:4f:21:14:b0:7b:16:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C1:BA:E4:47:6A:69:0E:D5:04:3C:0F:E8:8F:9F:B7:D9:0F:D1:3D
X509v3 Authority Key Identifier:
keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:82:10:54:d9:fe:e2:01:f9:8b:1a:33:5f:f1:bb:57:e4:a4:
61:6a:b3:d3:c6:c6:d2:f6:94:a3:77:59:58:d2:1d:9f:37:ff:
d7:57:5e:94:ec:81:31:b7:47:52:63:d5:2a:31:32:24:4d:25:
54:ca:f6:b2:02:6c:f2:53:8a:cb:5e:08:3f:90:2a:7a:b6:ea:
90:42:ef:6b:2d:12:93:27:47:8e:02:e7:b9:f1:17:50:34:3a:
d2:60:4b:20:4b:f4:21:2a:42:9b:fa:89:7f:eb:f4:0f:b2:9c:
6f:3b:30:99:af:6d:85:cc:f9:3d:24:a6:f7:76:fd:3f:83:67:
4d:1d:d1:18:67:99:8d:7c:07:2b:90:67:3b:0f:5a:12:74:db:
04:57:0b:b8:ed:8d:78:c5:aa:55:2c:db:3a:8e:45:3e:68:2f:
c6:4a:32:e8:24:05:a4:c4:04:48:dc:96:fc:e3:3a:6c:db:69:
4a:b5:4f:9a:5f:3a:9b:f5:06:df:87:8c:ce:59:f8:92:a7:25:
51:ca:48:28:a9:84:fb:e6:fc:1d:6c:bb:9c:f7:cd:a2:01:94:
f1:a9:a9:31:66:79:70:b3:c1:3e:dd:61:80:98:01:6a:d9:a3:
b8:7b:3f:fd:27:f1:b4:66:ea:1c:c9:e9:35:b2:f8:0a:9a:5d:
05:e8:3d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 19:32:56 2026 by rpki-client