Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
File: 7HB5DNzgwZKsiG89nvcl85lRg5g.mft (raw, json)
Hash identifier: XJQ6m6RsvKRrmt4LPzYpF+BYIFs2gObszBKQmLNSrVw=
Subject key identifier: F3:0D:BE:94:9F:58:ED:15:E9:20:BC:AD:0B:84:B0:60:3C:AB:16:C4
Authority key identifier: EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98
Certificate issuer: /CN=ec70790cdce0c192ac886f3d9ef725f399518398
Certificate serial: 019D38D2B96447FFAF21ED0BEE711F041224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
Manifest number: 0118
Signing time: Sun 29 Mar 2026 09:00:27 +0000
Manifest this update: Sun 29 Mar 2026 09:00:27 +0000
Manifest next update: Mon 30 Mar 2026 09:00:27 +0000
Files and hashes: 1: 7HB5DNzgwZKsiG89nvcl85lRg5g.crl (hash: odw0EBuHBvxM8VfeOoTi9tvhKc8fcmfqzg26AvcwoNI=)
2: SqwoZLt0wGfQ52uqKIyPq1MR0n0.roa (hash: 54gdg5z/WirnRdadVGX+GzAUp4jdY5Mqe47XSjLSOVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b9:64:47:ff:af:21:ed:0b:ee:71:1f:04:12:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70790cdce0c192ac886f3d9ef725f399518398
Validity
Not Before: Mar 29 09:00:27 2026 GMT
Not After : Mar 30 09:00:27 2026 GMT
Subject: CN=f30dbe949f58ed15e920bcad0b84b0603cab16c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:d8:43:a5:c6:b3:41:75:c1:60:77:eb:88:
87:23:13:35:e5:c6:a7:b7:9b:10:f1:42:7f:8f:3c:
03:f6:fc:d4:56:39:91:99:f2:20:5d:bc:c9:1c:18:
27:fa:53:44:0b:aa:61:2a:07:cf:52:cd:bf:cd:00:
7d:72:6b:db:da:3e:2b:c7:a2:dd:1a:9f:9b:ee:08:
3b:0c:9e:0b:17:0f:2c:e2:14:67:85:03:7b:af:8b:
2e:e2:b6:86:6b:16:34:aa:42:02:1a:94:59:d2:be:
7d:4a:a7:c6:f4:18:74:da:60:65:b2:c5:cb:a9:60:
20:5f:b0:a6:51:b0:b9:ec:11:ac:85:3d:6f:b9:42:
33:53:aa:99:42:0f:cb:b3:8d:19:e1:2c:fa:1b:dd:
93:b2:dd:2a:41:7b:bc:88:98:a2:9d:be:2e:c4:a3:
89:02:46:ad:d3:d4:76:02:cc:d8:f0:ff:bd:85:e5:
95:87:eb:ee:55:a3:dd:34:b1:b8:3d:b1:ad:cf:69:
9d:ff:37:f1:67:e9:cd:f2:a7:e4:cb:88:6c:97:56:
55:a5:34:55:02:fd:66:f1:36:a7:4b:dc:7f:b3:0f:
da:79:6d:b4:af:77:49:2b:0a:50:41:d7:45:74:50:
89:4e:ae:fb:54:25:95:b0:77:1a:bd:ac:8a:48:5e:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0D:BE:94:9F:58:ED:15:E9:20:BC:AD:0B:84:B0:60:3C:AB:16:C4
X509v3 Authority Key Identifier:
keyid:EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c2:22:5f:d7:18:64:9e:0f:96:e4:bf:3a:85:4a:9a:7e:a3:
a6:61:0e:32:26:e1:70:72:f0:59:6e:95:cd:f5:49:b5:6c:28:
b4:a5:e1:40:a3:c3:34:4c:cc:62:ef:7a:10:5e:ae:16:a2:ec:
9e:5b:7d:8c:a6:1b:5b:43:0a:d5:d5:f0:6b:e9:21:8d:d3:6f:
6a:dd:47:59:20:9e:1c:3f:24:c6:5c:24:28:16:d3:56:30:cf:
6b:92:7e:18:d4:e2:0c:26:3e:c0:ef:66:06:0f:9d:d1:48:6b:
a8:d3:d7:1f:e4:f8:35:1c:5a:97:b1:06:fa:d7:d4:4b:8b:2e:
65:ae:1b:7d:5c:69:23:0f:62:08:3b:f6:f1:4e:be:ed:e7:8c:
72:9c:56:66:e8:e0:0a:ed:5a:65:3f:9e:fa:72:22:42:23:b1:
99:97:12:ce:7b:3b:91:43:18:86:03:aa:56:9b:82:fe:e4:27:
3a:c7:54:1a:06:fa:9e:7c:2f:43:78:31:39:25:52:79:9e:82:
41:34:b7:7d:41:af:02:7f:23:ac:6d:16:54:9b:e4:fc:f6:4e:
d4:ae:d8:54:6d:a7:f6:f3:9d:95:e6:f3:8d:e1:ee:84:a1:90:
42:89:c8:9e:28:b0:bb:89:35:37:7b:06:18:7d:03:1e:02:4f:
82:69:8a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:23 2026 by rpki-client