Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File: 7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier: wcQ0SbJjBHuK0JZPj1k5C88/agFLhs30Vp6OF1rd9Yw=
Subject key identifier: 86:30:60:51:48:66:80:18:9F:DD:77:29:82:56:E9:64:C5:AE:85:80
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial: 019D371BAE030855EF5AE31E24655797430F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number: 0CF4
Signing time: Sun 29 Mar 2026 01:00:54 +0000
Manifest this update: Sun 29 Mar 2026 01:00:54 +0000
Manifest next update: Mon 30 Mar 2026 01:00:54 +0000
Files and hashes: 1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: fz8NyM6yL+CbdTXm2lpGnZ/UPSpMdz4Qm6DMVIdwlXw=)
2: Mt1633RiBIpuKnZW3jSMaHpSdRI.roa (hash: 6BNDp2CLnyhsZWA//die5Cd+w8BRp6sCkxu8tySEnX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ae:03:08:55:ef:5a:e3:1e:24:65:57:97:43:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Validity
Not Before: Mar 29 01:00:54 2026 GMT
Not After : Mar 30 01:00:54 2026 GMT
Subject: CN=86306051486680189fdd77298256e964c5ae8580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:7d:4b:b2:4e:28:01:fa:35:cf:77:d7:00:
05:e0:bb:a1:58:1c:b6:c0:e4:19:c6:fe:6f:75:d5:
6b:e7:e9:fc:c1:93:cf:ac:7b:17:00:07:56:f2:94:
ef:09:d1:52:c7:3a:bf:2d:3d:5c:e3:e4:ff:00:c0:
e1:5f:26:2d:ed:06:3a:95:25:1e:33:48:89:b7:95:
f1:24:89:0d:e7:86:83:84:d3:69:41:68:0b:a0:4d:
86:5e:eb:d9:ff:8c:83:6e:de:15:50:da:f7:b4:d1:
8b:a8:e6:c3:38:c0:55:98:21:5d:89:ab:37:e0:d9:
31:9b:3f:14:60:96:91:74:91:37:25:88:51:39:f8:
82:03:1c:e4:6e:c5:ea:bc:80:40:e3:7d:5b:9d:0c:
dc:c4:dd:65:8f:b8:f5:62:83:f6:ea:c3:f2:9f:d4:
04:fe:f6:25:68:e1:0b:eb:6f:9e:f6:94:59:05:02:
3e:fa:e3:f5:28:e9:49:f6:3b:cf:f3:f8:83:dd:ff:
17:65:bf:75:dc:fc:4c:06:9c:ac:27:82:90:63:07:
a7:5b:61:39:15:be:ea:cd:98:f0:e0:04:e1:c8:69:
39:22:06:4d:8b:02:fd:4f:2e:ad:8a:df:7b:cf:e0:
a2:e0:df:b6:39:8d:00:1f:11:64:b3:93:9f:56:a4:
a0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:30:60:51:48:66:80:18:9F:DD:77:29:82:56:E9:64:C5:AE:85:80
X509v3 Authority Key Identifier:
keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:11:32:59:0c:e1:3b:9c:95:86:fe:c7:78:d2:d1:bb:c5:bb:
55:1b:c0:50:6f:f4:8f:38:e9:a5:61:fd:b6:e5:4d:aa:78:86:
32:3d:bf:3b:9d:1b:e2:50:40:b0:8c:9d:6f:4d:ed:81:68:9b:
50:77:e9:e5:c6:27:3c:8e:9c:f0:c9:a1:49:58:76:a2:fa:8a:
63:0c:d1:84:ee:f7:b0:05:54:59:22:63:01:11:f7:67:90:d7:
0b:a1:c2:b2:66:fd:91:43:32:15:b8:22:e5:0f:57:88:85:1d:
12:2d:4b:90:d6:4c:2f:6b:e8:9f:f0:c4:c8:ed:bb:a9:29:fd:
c7:41:57:0b:fc:c3:d8:4f:e5:3c:7f:fc:f5:c9:c7:ff:88:87:
fb:d5:22:8e:1d:18:b6:38:10:ef:b2:78:20:15:98:6c:51:34:
96:60:fe:d0:d2:0b:6e:dc:67:6e:1e:23:04:fe:2a:6d:04:b7:
ad:f8:db:73:67:e2:ad:b0:47:7e:08:2b:51:48:0f:01:0b:51:
94:ad:1d:8f:5e:a4:a3:9e:7a:23:65:0d:e9:6d:2a:d5:0c:ae:
4b:1f:72:a4:ab:4e:1b:22:5b:15:24:50:8a:82:8d:df:5d:5a:
cf:27:b8:48:b7:c3:2a:dc:4d:4f:9e:af:e2:28:11:7e:28:dc:
d6:c9:6d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:16 2026 by rpki-client