Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
File: 7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json)
Hash identifier: S+MH1HKnl8zEKaQ0p4CzIqUENErncMDftewsnWchrGA=
Subject key identifier: D7:58:D7:7B:D4:76:11:D3:6B:BC:B2:FA:35:E8:BC:32:25:D9:39:43
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Certificate issuer: /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial: 019D37C0B61987CA9AC0C2845C92ECED25C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
Manifest number: 17BF
Signing time: Sun 29 Mar 2026 04:01:09 +0000
Manifest this update: Sun 29 Mar 2026 04:01:09 +0000
Manifest next update: Mon 30 Mar 2026 04:01:09 +0000
Files and hashes: 1: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: kpFuSPpUbP0kXVyWl2TRRpt+TmzJDQRV4l2mGrVyDkM=)
2: WxQ64uv-zX-eye9sRlN7C2cRqwI.roa (hash: H3Nchr9jYSxejrjh37X3oEL6arcb0RjMrAm9O9pSwMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b6:19:87:ca:9a:c0:c2:84:5c:92:ec:ed:25:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Validity
Not Before: Mar 29 04:01:09 2026 GMT
Not After : Mar 30 04:01:09 2026 GMT
Subject: CN=d758d77bd47611d36bbcb2fa35e8bc3225d93943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:dc:e1:a3:dd:05:62:75:04:9e:4a:86:96:
d0:9f:33:46:1e:fe:39:a3:e4:da:73:ed:56:2a:a1:
e1:7f:3a:a8:d3:d6:54:a2:b5:5d:25:8e:ea:0d:8c:
59:83:f4:ff:76:ff:91:09:17:d4:2d:34:d9:7d:96:
00:25:f8:6e:7c:01:b2:45:ec:b0:20:36:2e:e7:47:
c5:4c:ad:57:18:a4:91:4c:dc:2e:e4:67:78:af:72:
d8:44:4a:1e:17:16:f4:97:e8:b5:e7:62:67:21:0d:
6d:67:70:94:da:de:28:92:fd:c0:88:e9:c2:c9:e7:
43:a6:bc:b9:fe:70:3f:7a:bb:67:58:ba:c9:19:43:
ce:8e:31:09:d7:60:b4:7d:bb:51:b0:6c:ab:02:e8:
b7:fa:3a:27:b0:dd:02:8f:f4:be:65:b2:87:b8:03:
69:b9:ad:6d:d4:1b:40:a5:5d:78:62:9a:6c:88:d3:
fd:09:0c:8f:98:a7:32:4d:2f:e0:91:b8:ab:8e:06:
6e:f1:09:17:d2:f6:ca:42:fc:ad:7f:55:b3:10:c5:
aa:e3:af:54:58:4b:e8:4e:76:ca:c1:75:7e:1e:ac:
f7:08:19:43:1d:74:6a:0f:ad:07:ef:c2:33:65:0f:
45:74:4d:03:97:58:31:de:65:83:f1:95:b5:d5:50:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:58:D7:7B:D4:76:11:D3:6B:BC:B2:FA:35:E8:BC:32:25:D9:39:43
X509v3 Authority Key Identifier:
keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:87:09:a1:db:cb:07:b1:ad:6e:95:cd:57:46:df:ba:a8:bf:
e8:b4:44:64:61:ff:d8:cf:b9:2a:33:94:dc:d7:80:e3:f5:e4:
1c:b0:16:0a:18:72:69:a5:1a:f3:06:aa:a0:2d:ca:b0:cf:5a:
55:8d:0b:ca:71:62:54:fa:91:ab:af:7b:39:42:64:c7:e6:96:
7a:2a:eb:ed:49:27:fc:8a:1b:df:04:dc:33:4b:33:85:f1:97:
4c:67:c2:6f:2c:de:2d:21:06:93:79:e1:05:80:97:a8:35:f4:
02:be:4f:29:24:01:43:5c:b4:6a:a8:24:ee:51:4e:89:8c:62:
fc:a5:df:19:4c:af:34:fc:a6:be:fa:7d:64:15:85:33:0b:6f:
e1:b9:1d:4d:71:d2:55:ba:2b:7d:ab:79:40:a5:7e:52:56:51:
d5:cc:72:c3:e2:58:a4:d2:1b:ae:75:9a:bc:86:d3:9c:b0:6f:
2f:8c:a5:b3:3e:e8:81:d2:0b:45:af:61:70:75:11:4c:25:d9:
29:9a:be:9a:39:fa:a1:d3:82:d2:03:15:bd:54:cb:69:95:4a:
bc:1c:62:a2:99:f7:fa:9d:e4:f4:2a:d2:19:c6:70:9d:19:c8:
51:ac:df:f6:2b:c3:12:6a:75:23:a2:47:13:c9:cc:04:5e:2c:
25:ee:c4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:24 2026 by rpki-client