Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier: xRZ9pmtZ2+FOT9O6LwtA8z6kr/IZ4qOoZT5D7Ei56AQ=
Subject key identifier: C7:F4:59:B0:56:05:DB:72:F3:A8:E5:52:B7:68:42:A1:5A:D3:31:1A
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 019CE10FEF2C2BA421450229B5FA2243D77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number: 03D6
Signing time: Thu 12 Mar 2026 08:00:43 +0000
Manifest this update: Thu 12 Mar 2026 08:00:43 +0000
Manifest next update: Fri 13 Mar 2026 08:00:43 +0000
Files and hashes: 1: 6_ZblNm9ZRmYGkapxWHWsVXv62A.roa (hash: l1m5QGoRdp/fQXdkGDAgYT7UXYr7yNDfK4bT6u+JkJo=)
2: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: bdNy4lNB/SwQWUNNExYIeZfDerHNZy4ROtMTL/b0tJ4=)
3: nnVHZXt9DivgToJiSfHRWDPCX58.asa (hash: /8k8/1a46VaQnelGrFv4w1ybQa3EbefqWYHF9uEGkc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:0f:ef:2c:2b:a4:21:45:02:29:b5:fa:22:43:d7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Mar 12 08:00:43 2026 GMT
Not After : Mar 13 08:00:43 2026 GMT
Subject: CN=c7f459b05605db72f3a8e552b76842a15ad3311a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:e0:a5:17:fb:43:2b:ab:e6:17:4a:c3:76:
9f:6d:41:4e:60:73:b7:a8:12:23:d8:99:2b:08:df:
8a:4f:6e:b0:9c:fa:9a:49:94:b9:0b:59:9c:9b:94:
cd:be:d7:34:42:c7:4a:c7:ae:09:b1:11:c1:22:8b:
af:27:49:3c:75:0d:21:f0:a6:4a:7c:ac:ea:4e:cc:
86:67:35:c5:ee:8d:dc:9f:3b:ea:92:4e:fa:3d:d4:
15:b0:87:4c:3f:f5:62:22:c3:f6:7d:d2:9f:17:68:
0f:50:98:a4:63:33:fb:95:d0:dd:40:7f:00:f6:62:
72:db:2d:0d:02:90:fd:c9:90:27:04:92:03:4f:fc:
d4:65:78:c2:3e:d7:68:11:4c:96:41:c9:06:0e:0d:
39:6d:20:86:b1:e1:20:58:69:20:a9:c4:aa:96:af:
06:f0:67:10:67:07:ae:44:36:79:49:a5:95:b1:7a:
02:f6:44:3a:23:65:a4:34:ae:a6:5b:ad:c2:21:3a:
ea:8f:d3:bb:a8:f6:13:24:ed:a3:04:f9:e3:c3:c1:
1e:95:05:da:06:cb:76:c1:07:69:57:a3:ea:7b:62:
50:1b:e3:00:90:76:ed:1e:82:0e:44:26:74:b3:8e:
b5:21:c6:ac:e2:b3:7a:99:bd:d7:e4:de:55:54:00:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F4:59:B0:56:05:DB:72:F3:A8:E5:52:B7:68:42:A1:5A:D3:31:1A
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:11:c6:bb:90:85:49:d4:1a:40:5f:ed:09:56:ec:46:e2:e4:
9b:f6:14:92:31:9e:9f:02:16:fe:78:b9:2a:49:eb:ff:24:b4:
3a:af:f7:5e:fe:44:31:c2:10:da:41:70:68:6a:7c:1f:58:c5:
3e:6a:7a:57:f4:e9:3b:43:de:c7:54:29:ef:24:20:8c:66:43:
38:d4:d0:97:29:6c:1e:57:52:0d:82:28:9f:d5:77:51:72:46:
d7:2d:2d:b5:b6:58:29:96:e6:fb:cb:e5:61:6f:75:fa:f0:f3:
ab:f8:b0:63:16:a0:e5:d0:dd:96:71:2b:c9:0a:5f:d3:be:ea:
5c:ed:30:1c:63:d1:ad:36:90:c5:5b:2b:a6:71:3d:2a:53:d9:
99:ea:7b:60:8f:68:80:de:fe:c2:28:f9:79:f4:5a:3d:24:22:
d6:be:da:42:f0:6f:89:c5:ff:7a:35:09:12:87:6e:9a:d5:50:
ff:d4:d5:e1:dd:8d:2d:85:7c:10:3c:66:af:e7:b1:73:20:c3:
44:08:8e:0b:ac:69:fe:7c:31:b3:d3:e9:56:16:f7:f2:a1:a9:
7e:db:37:ec:1b:4b:d7:d8:6c:1e:6b:9b:31:f5:ed:8b:78:44:
1e:7f:98:83:26:a0:96:55:34:59:33:c2:e4:c3:a3:3f:6f:3a:
f4:d4:17:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:40:33 2026 by rpki-client