Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
File: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft (raw, json)
Hash identifier: xq3+do+Eyw7hAdDAXCiqNwMA0OpWMCcFcJ7YNNZy5vE=
Subject key identifier: 2C:CD:02:3F:5C:9A:10:F6:88:59:70:F4:9E:23:D2:EE:05:F6:53:E6
Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
Certificate issuer: /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Certificate serial: 019D389BA8A88A6839667E096DDF96668E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl (hash: lXLKJRlXx4wGBxmn01v0nyZXmKas0zPqLUaE5+2ZACg=)
2: aTDLH8OzshREg-8mq0j-dLNvoVA.roa (hash: bWxd+gcoFiIXVBKwuiK0uKoGEVScpNqYAsExPghzTho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a8:a8:8a:68:39:66:7e:09:6d:df:96:66:8e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=2ccd023f5c9a10f6885970f49e23d2ee05f653e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:6a:8f:b0:0c:8c:37:6f:5b:a5:c5:2b:67:
e9:93:06:48:a5:ac:0a:39:c6:94:50:e0:28:a0:8c:
b0:27:20:1c:af:de:7d:9f:63:6b:64:39:33:b4:41:
a9:7e:38:b2:1d:c8:33:da:cc:03:af:d6:f6:51:66:
73:dd:61:2f:16:ec:22:a5:74:bd:23:e5:01:c6:cd:
59:0d:05:27:64:53:c7:54:82:7d:1c:4a:15:a6:0e:
23:ce:ef:2a:f4:6f:e2:7b:ac:07:60:65:a3:f4:e4:
80:8b:05:c0:f2:4d:3d:b0:0e:75:32:cd:b6:49:0d:
2e:39:4e:90:f9:3b:d6:e4:1d:ad:2c:a7:53:f6:0d:
aa:0d:fd:8c:f5:78:53:02:c1:44:cb:80:fa:b6:0f:
62:6c:96:8b:96:09:21:70:a4:25:a6:67:e1:64:b2:
65:78:5d:5e:e7:89:33:e5:07:d9:41:bc:48:ec:e6:
42:dc:ca:f8:0b:27:2f:db:64:e2:be:ee:9a:6a:cc:
ea:94:60:59:91:12:8a:8a:1b:82:72:d2:3f:ae:b1:
35:4c:93:57:a8:40:83:e3:d9:35:12:99:bb:11:22:
9f:90:9e:77:ce:e1:61:98:b1:ac:b1:aa:fd:09:74:
1b:04:ec:56:2a:86:a0:48:11:7d:1b:0e:94:69:2e:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CD:02:3F:5C:9A:10:F6:88:59:70:F4:9E:23:D2:EE:05:F6:53:E6
X509v3 Authority Key Identifier:
keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:17:5a:77:01:65:67:26:32:d4:dd:07:08:f4:17:ed:18:bb:
73:e3:1c:f8:eb:85:7a:e9:14:10:64:e8:59:e8:e3:5d:95:d2:
f7:e2:86:4a:ca:cd:28:56:3f:e9:1c:8e:9d:dd:6d:e3:49:20:
10:54:26:8a:48:a2:42:31:9d:1d:a0:68:97:9c:db:3d:53:bf:
0e:5a:a0:f3:a2:ea:a3:c3:94:d8:eb:8f:e9:71:2f:a3:14:1a:
ca:f0:51:ae:4f:ca:84:2e:5f:6c:1c:0b:78:8e:f0:01:69:5b:
c0:2a:eb:79:c5:35:16:04:eb:3e:5a:4e:82:5f:df:71:25:30:
33:a3:5c:2d:00:20:e3:db:1a:ec:49:53:8a:7c:40:77:ec:f2:
a5:66:ac:9e:ba:86:19:ae:0a:f5:52:85:b2:56:a2:a6:21:31:
76:41:08:db:dc:3b:dc:13:f4:6f:e2:a4:88:9c:0b:cf:37:3a:
36:cc:b7:b0:91:1d:5f:55:6f:22:8e:97:8a:b1:3f:b0:70:df:
2f:52:e4:75:91:a9:28:6e:33:b0:52:c0:22:b1:e3:66:bb:73:
52:29:51:f8:00:74:87:2d:d3:7f:6d:ef:a8:74:9b:06:2a:7f:
d8:4a:ac:c2:a1:60:39:a1:86:de:34:36:3d:58:24:ac:32:5b:
6c:a5:eb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:44 2026 by rpki-client