Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: FTyvtLnSuAiU1kIqVx35wEjjnVxd347szKbTqDcd0kU=
Subject key identifier: 76:1A:73:0B:72:E5:06:BB:ED:B8:AA:7E:E7:C1:D1:7A:54:25:19:20
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 019CE47EBDECB6409C7D8FA64992D47C5EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 00:00:37 +0000
Manifest this update: Fri 13 Mar 2026 00:00:37 +0000
Manifest next update: Sat 14 Mar 2026 00:00:37 +0000
Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: iK6xN1Bs60YtnoRVREKXEw2Qqrzd381jCC15P1+/YCk=)
2: _fXKYqOoOeAsBe3wfvstIhc1KgU.roa (hash: 6aMvK6MOhdOCbYvLk+UnSkhnsNfdyPHzti08/1dj5Nc=)
3: sW8W0-8WOsG0evmu2fYzqrWdI9U.roa (hash: aDuewNAM6XmzF96K8nKeS1R/6Pbon3faWwSXg53klfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:bd:ec:b6:40:9c:7d:8f:a6:49:92:d4:7c:5e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Mar 13 00:00:37 2026 GMT
Not After : Mar 14 00:00:37 2026 GMT
Subject: CN=761a730b72e506bbedb8aa7ee7c1d17a54251920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:21:a5:45:ca:8c:25:be:d0:cb:82:75:7b:a2:
19:66:92:6d:c6:6c:36:e2:3c:01:49:82:e9:8c:e2:
d5:a6:2c:86:1f:4f:0e:10:f6:aa:48:e5:f9:a4:73:
c7:26:48:98:af:01:a8:c3:46:43:31:be:0c:5f:c5:
bf:1f:1e:8c:81:1c:21:b9:63:25:18:59:8e:10:88:
69:d7:2f:5b:ac:20:fb:14:9c:da:6c:32:79:7f:bc:
25:bb:ba:8c:84:7d:0e:ee:79:b4:ba:97:a7:f7:28:
c3:5d:8f:21:49:c1:b9:d6:4a:fe:ff:dd:b2:ae:58:
0e:cf:2b:1a:34:b6:36:8c:30:f8:4d:65:a5:d3:a8:
12:5f:e6:37:5e:e1:bc:67:d9:62:fc:15:c0:46:e1:
0f:55:2e:c6:a7:9d:31:aa:ae:53:2a:6e:d8:65:ad:
71:57:cc:65:c7:fd:b6:61:ac:55:10:0b:d8:f4:44:
79:97:69:41:2f:7b:85:3d:f2:da:cc:76:6d:0a:d9:
67:00:d9:c4:1d:d8:b4:b8:b8:e3:9c:5f:c1:c6:0c:
35:b1:d0:ec:a3:1b:52:a0:41:5f:d9:ce:2d:00:76:
b7:da:1f:e6:ea:7e:d4:6f:16:87:82:2b:8e:55:cf:
8e:05:45:72:e1:28:93:e2:41:c3:eb:96:65:63:2f:
4f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1A:73:0B:72:E5:06:BB:ED:B8:AA:7E:E7:C1:D1:7A:54:25:19:20
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2c:fe:5e:11:8f:e2:39:0e:ce:e6:b0:13:d4:5f:42:b9:24:
eb:f9:f1:b3:db:d5:e1:55:10:1a:54:00:8d:c4:75:b1:45:5a:
7e:e3:13:a7:fc:1c:e9:8e:bb:19:83:03:28:18:d6:76:4b:8a:
c9:eb:4c:0f:be:d7:f1:cf:58:44:9e:37:ac:17:ae:25:d7:fa:
5b:dc:11:50:31:0a:fd:cf:97:30:73:dc:b4:14:ed:b1:7b:83:
1d:4e:ed:89:f9:15:1d:fa:d8:e5:e4:c0:bd:91:51:65:9d:a6:
a8:da:4c:95:5a:6b:70:76:93:7c:56:c6:37:01:0f:28:13:61:
12:2e:93:4b:ef:35:a1:1b:12:4d:c6:04:ca:9b:e2:0b:be:c2:
e3:6d:17:fa:2d:08:ad:de:0e:7f:d2:99:98:97:10:e3:71:47:
54:5f:80:ed:52:84:f4:8a:b4:10:6b:4f:de:14:ee:6e:6a:27:
09:e5:87:70:07:18:bb:94:6b:fd:39:96:4f:b5:d8:4b:2f:b3:
30:32:15:ad:69:12:ea:90:ae:3a:13:16:54:4e:e9:a8:23:34:
5e:51:f3:5a:01:7b:d9:bc:bf:4d:10:58:51:19:e2:92:35:7e:
62:ca:84:f3:8b:b8:23:bf:9c:8e:75:42:b9:0d:67:9c:c3:f0:
06:fd:a3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:58:19 2026 by rpki-client