Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier: v9tx7qBxPndPRmhjZngQBR77qPdvOmviOwvE9zVyEFk=
Subject key identifier: 2B:7E:54:54:76:A8:32:EE:F3:0C:58:3D:BE:E1:C8:27:E8:FF:56:22
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 019D38663F4A297BEACDDF43B145FA141114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number: 0DEA
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: oyciebgDOz5gkY8m+lakH4aVxh67AVNNYV4E/wKQryI=)
2: _bZKuF7AFVv9FOPtEDmaIyaLkgc.roa (hash: /OjfGerjj4MNTsCbNROwrp1Es3nNekhRr//F8a0HSXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3f:4a:29:7b:ea:cd:df:43:b1:45:fa:14:11:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=2b7e545476a832eef30c583dbee1c827e8ff5622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:64:47:ce:2c:bf:31:6d:41:32:1e:94:37:25:
e5:e7:f1:0e:71:b6:bc:c8:54:be:c0:55:07:75:7c:
a4:49:15:90:b5:50:60:64:52:c2:44:3d:3f:02:e9:
b0:25:8e:df:a3:a3:ac:ef:bd:59:2b:e0:8b:31:9e:
08:df:67:02:64:f5:d8:d5:e3:5e:5f:d5:58:87:f3:
50:50:a0:dc:7c:5a:60:12:b6:34:b3:07:ed:30:27:
4e:f9:60:3a:77:1f:1d:38:37:05:43:aa:b3:bc:22:
d8:54:5b:5e:26:fa:b9:08:2f:3c:66:15:e7:7f:ac:
0e:8f:48:58:78:76:94:1b:b7:d0:18:33:65:49:92:
aa:09:fe:d0:fe:09:32:9f:11:d1:39:b9:df:2c:f5:
85:b4:ed:ee:90:f3:20:40:8f:a2:70:59:11:4b:05:
c6:4b:f4:0b:58:ef:f8:f9:67:fc:2d:20:a5:50:36:
36:6d:da:8c:c6:42:68:75:ee:f1:4a:2b:73:2b:d6:
e2:e6:c9:28:1e:d5:87:3c:9b:4f:e7:b9:eb:d5:47:
7e:4e:aa:c2:b7:dc:15:7f:c7:b5:99:d3:e5:d5:fc:
2f:2a:67:a6:c9:0d:6b:56:61:8c:c6:d8:b3:0e:60:
63:f4:44:53:5c:d9:41:b5:cf:31:d0:8c:9a:4d:73:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7E:54:54:76:A8:32:EE:F3:0C:58:3D:BE:E1:C8:27:E8:FF:56:22
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d7:b5:16:66:46:9e:4e:ef:91:77:be:fa:66:b6:39:e2:b1:
6f:58:f9:59:bc:8f:85:db:3f:5e:7f:a3:03:f0:00:4a:49:e8:
be:8d:2e:5b:9b:fb:32:e2:c8:b3:6a:b9:43:63:61:6d:fc:39:
d1:f2:a0:bb:57:f1:41:65:cf:9c:97:17:f4:57:16:9d:26:31:
0a:1e:71:81:b1:99:e8:c1:fa:4b:9d:29:22:00:86:fa:82:6c:
f2:24:9a:34:4d:98:47:80:20:7b:dd:6d:51:2a:a1:e2:5f:09:
ab:7f:43:36:a2:09:85:cc:44:38:a7:c0:ee:0a:6e:f2:13:9b:
cf:8a:04:e0:b9:ac:07:f1:44:ad:41:37:61:9c:ff:2a:5d:ae:
f2:ce:d3:20:49:af:36:5e:2b:0b:87:7b:a2:36:af:9b:a0:b5:
7e:d9:9f:0e:89:59:18:8e:70:6d:6e:b6:15:1c:73:22:a8:4f:
b4:f3:79:66:19:97:da:49:ed:d5:d1:89:e3:c9:35:23:80:80:
87:3d:06:cd:d6:b8:65:c1:13:8e:7c:8b:34:99:e0:4c:e7:48:
0c:42:85:6d:95:12:47:fc:00:53:27:93:49:de:25:31:e1:25:
2c:c9:c9:13:a3:db:c8:2d:1f:89:52:63:69:60:d5:2a:75:c2:
4e:b9:6b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:09 2026 by rpki-client