Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier: zXLlVDkY2AWwFXK/cXihZQ9pPLByurWUlTJzaNiUmx8=
Subject key identifier: E2:9D:96:D7:7A:35:B7:16:4A:22:27:D1:EA:E7:48:DF:30:93:A9:89
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial: 019D39413EF8717C8586ADD69B6E6B54E102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:01:10 +0000
Manifest this update: Sun 29 Mar 2026 11:01:10 +0000
Manifest next update: Mon 30 Mar 2026 11:01:10 +0000
Files and hashes: 1: 5M_dzDXzTB3Y0brCjbUvwSZRed8.roa (hash: IY7K+wfx2bW1m/Ix+hlJ62XrT+AVkyx4H7HyP9JrVMM=)
2: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: t+GItCHHnVVX7OHf0/elNibNq+zfwqH/9dsY9NTArM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3e:f8:71:7c:85:86:ad:d6:9b:6e:6b:54:e1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Validity
Not Before: Mar 29 11:01:10 2026 GMT
Not After : Mar 30 11:01:10 2026 GMT
Subject: CN=e29d96d77a35b7164a2227d1eae748df3093a989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:a3:27:14:81:e1:f0:b0:dd:52:ab:da:70:
a0:a8:79:5e:7b:ac:ba:70:12:2f:36:5f:a4:11:3d:
d5:f7:29:2c:65:69:55:05:ea:44:2a:a5:45:66:76:
7d:62:22:1b:4d:5e:63:d1:81:eb:60:26:8a:55:e2:
1c:22:90:db:0b:ce:08:36:83:58:7b:24:56:8d:d7:
a1:1a:7e:f1:a1:49:1d:ca:66:a4:6b:64:63:00:16:
c1:a1:81:a5:7f:93:b7:92:42:00:5d:d0:20:06:35:
b1:b3:7b:e7:b9:1d:34:24:2d:dd:c8:0d:ef:53:24:
88:fd:07:b5:fa:f0:ac:95:3e:78:b5:19:51:76:93:
55:32:ec:1d:97:3d:e0:31:5d:e9:47:38:94:67:34:
cd:1b:5d:cf:98:cd:e6:f8:13:14:77:59:9d:41:a4:
bb:8c:1f:d9:3b:c2:96:f2:9e:68:74:ec:ff:68:c9:
38:d1:c1:6e:60:7d:98:9f:6d:7f:df:fc:43:39:dc:
dc:0a:da:7b:67:1c:3b:92:12:e7:f8:ee:be:4d:3e:
40:24:58:69:4d:80:5e:9f:3a:aa:78:d8:9c:3c:27:
f4:50:d9:6f:68:b0:4f:9a:01:f2:1b:8e:5b:7b:e7:
d7:e6:39:9a:7e:51:b9:d3:f1:80:56:bd:0a:56:61:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9D:96:D7:7A:35:B7:16:4A:22:27:D1:EA:E7:48:DF:30:93:A9:89
X509v3 Authority Key Identifier:
keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ee:d0:ce:f1:7c:8f:b2:4a:9e:7f:31:60:57:8d:d7:a7:2c:
a9:40:aa:e9:4f:69:d5:4d:d6:94:16:0d:f4:df:5f:44:2b:21:
15:8f:84:4b:ae:e9:5a:b8:de:c8:f8:dc:f9:14:3e:9e:10:58:
bd:20:dc:de:79:1e:3a:eb:54:84:9f:97:2e:ba:4f:00:ff:dd:
22:d1:ce:31:99:1f:d3:25:19:c4:e7:6e:c7:5b:8f:36:a7:03:
74:15:23:f9:59:cd:61:fc:0a:8b:21:a5:97:7f:4e:33:be:31:
02:b9:3d:96:08:ca:51:69:9f:f0:97:3b:11:9d:87:04:9d:b4:
e9:df:ee:50:b8:e8:b0:6a:35:28:a5:c2:e2:17:8a:33:be:9c:
09:f6:db:84:3c:a3:4a:9f:85:53:1b:cb:f8:9e:a7:c7:ae:a0:
bd:48:bd:02:10:4f:93:14:28:da:ba:56:5a:40:a0:3b:db:0d:
0a:81:11:bc:ae:f7:52:0d:f8:e9:bd:34:a3:38:61:ff:6f:4d:
50:12:ba:d6:81:3a:83:ae:ec:80:3d:37:fa:96:9f:4e:46:fb:
02:05:f2:e0:1c:3d:02:0d:67:b7:37:0e:75:66:86:6c:2c:51:
47:d6:96:eb:2d:4c:43:08:f0:70:c9:0a:06:07:e5:eb:1c:15:
ae:5f:0c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:07 2026 by rpki-client