Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
File: 7XZO39sbgh1dJayLeggKapBvprA.mft (raw, json)
Hash identifier: TQ7LVtqL4KduEUFd44iKEM5amSYEcQywm34op95j7e0=
Subject key identifier: 50:9D:A9:FF:FE:AD:CD:F6:80:52:A4:68:FE:DD:D5:81:3D:54:B4:94
Authority key identifier: ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
Certificate issuer: /CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Certificate serial: 019D382E0C832BC9F4610314A8B34414AB22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
Manifest number: 04DF
Signing time: Sun 29 Mar 2026 06:00:34 +0000
Manifest this update: Sun 29 Mar 2026 06:00:34 +0000
Manifest next update: Mon 30 Mar 2026 06:00:34 +0000
Files and hashes: 1: 5KdGE2jdbERGSAaTxotqmYnDHPE.roa (hash: kwZAjYwYGkcbs7JNQRRWwRi2Ovfq/Y4hHTxA0ovQfso=)
2: 7XZO39sbgh1dJayLeggKapBvprA.crl (hash: 5ueDtLQPMNaMbxpVTk4clTqnXWu03HD/CLyS4roeris=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0c:83:2b:c9:f4:61:03:14:a8:b3:44:14:ab:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Validity
Not Before: Mar 29 06:00:34 2026 GMT
Not After : Mar 30 06:00:34 2026 GMT
Subject: CN=509da9fffeadcdf68052a468feddd5813d54b494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:64:1e:4b:26:c5:64:fa:40:db:41:6a:bf:4a:
49:9e:63:5b:f6:15:f6:cf:f0:ae:d8:44:35:82:02:
62:1d:eb:9f:81:24:ca:f0:ca:5b:97:6d:c3:9a:2a:
fd:53:ba:06:7f:54:80:9e:3a:0d:71:9d:d3:e2:a4:
df:49:6f:e4:85:a4:44:2b:63:31:75:b4:d8:da:ba:
90:cd:57:71:9a:7f:19:8e:78:b5:ab:48:e1:96:2d:
b8:de:c3:52:a2:76:3a:90:72:da:67:ba:10:d2:c9:
9f:83:24:4c:99:59:ef:ce:ac:83:1c:29:f8:64:a8:
df:9c:e3:3f:cf:e9:ff:9d:32:7c:df:0f:53:1f:2b:
72:f2:a9:cc:04:97:f2:16:14:bf:b1:95:bf:91:e5:
15:3e:93:21:bd:57:16:4a:5d:32:42:73:d7:00:99:
e0:07:dd:f0:aa:56:ac:84:6e:fe:5d:42:1c:bb:9b:
fa:d4:16:16:5c:d1:19:89:14:bf:f4:a0:b8:c6:07:
98:c4:b7:57:39:c8:15:e5:4c:26:d2:5e:ba:44:c8:
39:dd:18:e8:c7:4f:dc:38:58:97:f8:47:17:49:b4:
d2:f6:0a:6d:74:16:ac:58:eb:04:1a:07:18:52:ae:
9c:00:ce:1f:bd:f2:bd:37:90:78:e8:d7:7f:24:39:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9D:A9:FF:FE:AD:CD:F6:80:52:A4:68:FE:DD:D5:81:3D:54:B4:94
X509v3 Authority Key Identifier:
keyid:ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e5:6b:d7:96:f6:1f:0f:f8:30:9c:9a:29:b6:b0:aa:c4:d1:
6e:6e:ec:f2:0c:10:2f:c7:07:fc:21:fe:db:2b:78:1c:2a:45:
86:e8:f0:08:ac:91:ab:b4:1f:1d:a9:54:d6:40:b3:07:3c:0e:
a9:cb:34:6b:40:13:ec:8a:28:d6:e8:c1:fd:3e:1e:57:65:95:
6c:a5:5b:bc:98:d0:9f:24:0d:fd:f8:45:36:3c:d6:95:c2:78:
70:b8:13:27:49:d8:c5:6a:3c:e1:25:4f:1e:86:4d:f7:1a:9f:
ee:9f:66:f0:fe:b6:e7:71:80:2f:64:f0:b7:9d:91:ab:fd:14:
3a:29:19:be:41:02:f7:a7:30:8f:9c:14:7d:09:5b:69:7e:e3:
62:a0:9a:e3:6b:b7:62:1c:58:ad:da:7e:73:3a:4a:33:56:fd:
42:50:93:bb:19:54:de:58:ce:35:26:8f:28:35:a2:05:21:cb:
80:65:f3:3e:f7:cf:bd:ce:07:b2:c4:f7:fc:6a:c5:9e:6e:bd:
81:09:2f:e9:cf:c7:72:02:37:1c:33:70:9e:3f:a9:ae:56:82:
e9:82:68:5d:ad:1b:fa:c4:95:b3:a4:60:73:e3:b6:ed:0f:fa:
71:9f:90:4e:ac:2c:45:54:38:48:55:31:85:cf:ff:cf:36:ec:
5b:ee:3d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:16 2026 by rpki-client