Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
File: 7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json)
Hash identifier: sxuM8E3/fGgfD0bGwD75hnCT5ifbvm1YemGP4EiNick=
Subject key identifier: 66:D3:A3:90:62:BD:B5:F9:EB:08:78:9C:F8:D9:30:3B:88:3D:20:36
Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
Certificate issuer: /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Certificate serial: 019D3977B4419B44A3EC59B0D5C061183148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
Manifest number: 0B5C
Signing time: Sun 29 Mar 2026 12:00:39 +0000
Manifest this update: Sun 29 Mar 2026 12:00:39 +0000
Manifest next update: Mon 30 Mar 2026 12:00:39 +0000
Files and hashes: 1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: 0yUrnn0+aAngEkbZP78r8aEOF/mzhSOSkQ+GeLBMo6c=)
2: smfmsIUF9u9g8NgIU5ofNUq_OII.roa (hash: 4JsRlal2vIPYDa8QmogXl60LTzkl5mPgzweZiKuoNtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b4:41:9b:44:a3:ec:59:b0:d5:c0:61:18:31:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Validity
Not Before: Mar 29 12:00:39 2026 GMT
Not After : Mar 30 12:00:39 2026 GMT
Subject: CN=66d3a39062bdb5f9eb08789cf8d9303b883d2036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:0a:34:08:37:1a:b6:0b:c7:e2:79:c0:38:
e6:16:66:bb:f7:7b:9d:70:97:5f:ae:2c:71:34:1e:
74:47:28:60:0c:ca:7c:fb:7a:41:84:37:26:b3:42:
7b:a5:96:fa:01:05:47:e4:77:f7:51:ec:03:6d:50:
f4:24:bd:6f:a9:81:6d:cb:6f:45:af:9a:61:af:4e:
37:07:16:8b:28:54:25:1b:05:55:f3:f5:6e:52:77:
cc:23:47:16:1c:ee:94:2d:ed:6d:28:45:09:31:95:
fe:47:0c:d0:0c:a3:a3:d9:3a:d5:7c:4e:f7:52:b7:
57:bf:c6:4e:a1:07:d9:31:e0:9c:97:be:f0:5b:cc:
f4:f8:94:cc:25:bf:57:42:9d:c7:9d:e4:00:75:4f:
82:84:36:b2:24:1f:d6:81:72:fe:d2:4f:cc:11:70:
ae:82:30:7a:8e:22:fd:7e:02:29:e5:b7:f1:f5:ff:
6d:19:da:ff:02:e0:02:3d:88:5e:ca:5e:88:a0:ae:
41:aa:d6:46:bb:f4:36:b5:9c:81:3e:bb:7d:5f:3d:
e1:62:2c:38:d4:9b:da:b6:53:e7:ce:d4:ee:a5:72:
fe:b5:d7:95:b9:90:6b:4a:a2:03:6c:b9:fe:35:06:
74:85:f8:29:bf:35:f2:b5:b9:33:23:a3:87:8e:a3:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D3:A3:90:62:BD:B5:F9:EB:08:78:9C:F8:D9:30:3B:88:3D:20:36
X509v3 Authority Key Identifier:
keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:59:71:65:f0:0b:2f:1f:34:5e:47:87:fd:44:68:45:a5:a9:
70:36:b8:65:53:d7:57:76:c0:89:34:f1:2a:ae:a9:39:77:4b:
79:fa:f3:58:21:2f:a6:f8:58:da:ef:67:a0:42:2f:6e:72:95:
fd:16:e8:b3:00:7f:26:85:26:4c:2d:95:b5:45:b5:64:80:37:
e1:b0:f3:2b:e7:1f:16:ff:6c:9f:5a:de:c4:a7:65:06:22:63:
ee:85:0b:f5:90:88:ef:4e:40:58:6f:1e:2d:99:9e:b2:c2:56:
da:fa:32:4c:bb:f4:6a:09:0a:50:0d:15:67:30:06:c0:42:f4:
86:88:49:af:a7:2c:e5:f1:b1:52:e4:23:42:59:3d:f9:09:77:
51:34:cf:50:7d:fd:42:fe:8f:c9:67:d1:4e:ec:98:b6:ae:e0:
31:cb:c8:3e:3c:dc:6a:bf:d9:45:0e:24:be:8b:3c:c9:0b:7a:
b1:95:f1:78:1c:c8:67:51:d0:7f:f6:63:56:80:8d:d0:dd:6a:
69:54:bb:58:7d:6f:46:38:31:4c:23:2d:31:5b:88:eb:72:5e:
8b:4c:55:58:ec:0c:8c:15:0e:cb:9b:f9:ff:fd:2e:dd:0f:ec:
b8:db:72:f9:e9:19:f7:65:9d:02:ee:c8:3b:ae:14:d2:08:5e:
84:91:6c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:47 2026 by rpki-client