Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
File: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft (raw, json)
Hash identifier: DXnhJA9TqVYTtkU0naCyjq2WJ3Wm6YqmsQdwqKAJNnU=
Subject key identifier: 9F:B9:B6:BF:C6:C9:43:EE:D3:10:EB:5F:FA:EB:26:1B:FF:3F:35:EE
Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
Certificate issuer: /CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Certificate serial: 019D37F7A4FE50D72EF30560F3548A953FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
Manifest number: 0EFB
Signing time: Sun 29 Mar 2026 05:01:09 +0000
Manifest this update: Sun 29 Mar 2026 05:01:09 +0000
Manifest next update: Mon 30 Mar 2026 05:01:09 +0000
Files and hashes: 1: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl (hash: g5M+EDfFBzpauugMo/z5xuXPxOzxDUVEMgAaIV2iQUo=)
2: 9oOBFeGSrwdju604vrWfdCoTauM.roa (hash: pd4ZMcD0zoZVQx34tpixPFz8KnUMJc8/XoRGbitBdPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:a4:fe:50:d7:2e:f3:05:60:f3:54:8a:95:3f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Validity
Not Before: Mar 29 05:01:09 2026 GMT
Not After : Mar 30 05:01:09 2026 GMT
Subject: CN=9fb9b6bfc6c943eed310eb5ffaeb261bff3f35ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:c4:fa:19:2f:e7:b4:6e:ff:c2:e9:c8:99:
f6:68:97:3f:06:f9:ce:ab:20:a7:c9:8b:ee:80:0f:
f0:92:df:8d:bd:5e:85:ec:b8:f0:18:8f:5d:b3:86:
21:34:7d:ff:3e:94:48:53:e9:b8:98:f3:c7:e8:b7:
aa:7c:06:05:f3:68:63:80:79:63:e9:9f:47:8a:e2:
59:62:5b:91:76:de:69:9d:87:68:4a:cd:34:5a:e2:
6d:db:4c:7e:8c:a4:0b:ed:7c:f5:35:7a:2a:c9:4f:
d8:60:25:01:53:94:aa:d2:6f:9a:03:e1:3e:d7:7a:
9d:9e:b8:0d:48:d5:71:6e:3d:3d:2c:96:be:ad:b0:
df:88:b1:e1:c9:fd:50:6e:93:b5:89:a4:57:57:5e:
b3:e0:20:4f:f5:6a:11:96:16:46:85:4e:2d:9a:52:
0f:18:72:99:1e:4d:23:b7:02:81:58:d3:e7:cb:69:
37:79:9a:5d:38:4c:36:f8:e4:50:f4:f9:b8:cb:42:
57:ee:90:f0:e1:71:48:7c:58:a5:98:56:b1:e3:d8:
a4:62:70:e0:ac:55:d6:00:d5:95:28:92:8b:f6:28:
39:78:d5:55:9c:3a:47:0f:ae:d0:e7:71:48:81:10:
4c:21:51:6d:e7:fc:08:82:c6:31:33:ab:e0:78:e0:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B9:B6:BF:C6:C9:43:EE:D3:10:EB:5F:FA:EB:26:1B:FF:3F:35:EE
X509v3 Authority Key Identifier:
keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:93:69:7b:45:d4:a8:06:d4:4b:d1:06:6d:7a:7c:df:13:20:
ec:e1:df:8d:3f:e4:57:93:e1:d8:46:78:e5:cc:d7:2c:d2:17:
d0:02:12:4b:1d:49:48:2f:43:f3:d5:64:59:ae:0e:f5:08:c8:
f5:c4:d1:e5:b4:02:38:1a:ca:a4:3f:87:2d:ed:29:ee:00:61:
1f:3b:4c:50:6e:c7:cd:b7:44:73:71:44:38:97:fa:86:28:08:
f8:0c:67:f3:fb:99:89:0c:3c:15:67:0f:ec:f0:dc:a3:cc:f1:
91:fb:ed:91:92:1a:bc:e5:e9:b6:fc:22:5f:a5:cf:e8:7c:fd:
08:fe:fd:7a:b4:f1:22:5b:02:90:fa:b5:43:80:43:1b:bf:f8:
f5:cc:09:65:f1:02:28:13:3d:cc:18:a3:e1:10:c7:b1:5e:1f:
86:b9:22:73:fc:ac:d2:42:0d:00:4e:61:e1:56:8d:a0:25:87:
36:54:61:02:ba:99:a1:dc:f3:6c:ee:22:78:5b:ce:19:1c:62:
a0:5e:28:3e:06:d9:81:55:4b:bd:d1:3b:7e:d0:39:e3:80:e2:
72:67:66:e3:f0:3f:ac:a9:2c:11:4b:fd:38:1b:4b:5f:68:a6:
3e:ef:75:44:6a:f4:da:2a:ef:16:19:58:97:b4:0c:df:54:f6:
e2:d8:99:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:21 2026 by rpki-client