Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
File: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json)
Hash identifier: XEw4gEzwk6sr2jyUnxCBRq4JrC1ZSysZofrKfCu2IrE=
Subject key identifier: B8:01:03:8D:E2:2C:1F:D8:84:19:6A:FA:83:DB:09:4C:8B:29:6D:87
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial: 019D39098F1CC54A61CCC2B496ECE20DBD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:20 +0000
Manifest this update: Sun 29 Mar 2026 10:00:20 +0000
Manifest next update: Mon 30 Mar 2026 10:00:20 +0000
Files and hashes: 1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: Ehj09HYY4AojpIU0CKr/g7qG7xZaspSBdbr2oJKqNsM=)
2: edQgb1OKZzdIqpTZCvd7y06flso.roa (hash: YslE6ABxgM2nK0S1WncJ01AbUDV4x4LC73+qD5UxVEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:8f:1c:c5:4a:61:cc:c2:b4:96:ec:e2:0d:bd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Validity
Not Before: Mar 29 10:00:20 2026 GMT
Not After : Mar 30 10:00:20 2026 GMT
Subject: CN=b801038de22c1fd884196afa83db094c8b296d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:b9:c1:71:20:56:5f:86:a2:3a:c4:4f:08:
d6:6b:b5:81:12:a0:49:25:f8:27:7a:fd:34:3a:93:
2c:cd:1a:77:d6:20:cb:8b:29:3f:16:42:bd:bc:e2:
f7:b5:8d:45:05:d9:68:01:2c:74:62:f3:bc:b2:99:
68:cb:af:11:d9:e1:bf:22:23:d4:6a:95:c0:b5:c3:
84:07:59:53:a1:fd:db:93:76:e0:f6:0d:4a:a5:d8:
1c:3c:e4:4c:7b:bf:6a:65:81:a5:48:29:dd:76:b5:
23:e2:49:84:88:35:e3:f6:44:fd:ef:9a:e2:e8:6d:
f9:89:2d:67:d1:5e:47:ee:be:61:34:55:45:57:45:
3e:a1:04:89:c8:f1:34:b5:19:0e:22:4a:89:4b:09:
99:cb:b9:f7:77:e8:36:5c:05:fe:30:ba:ae:50:5d:
e3:7f:9b:bc:8e:e6:4f:88:1d:0f:7f:a7:56:0f:81:
3f:4b:ef:01:62:96:8a:84:c2:af:8f:6b:a2:66:e8:
f0:f9:3a:e2:09:59:6f:a4:7c:3c:38:86:80:33:83:
0f:e5:79:66:1b:91:36:59:25:1d:5e:22:19:42:56:
3a:ef:f4:d3:10:22:f4:9a:9a:95:fa:a0:be:9c:5c:
f8:a4:16:92:71:81:0e:74:b6:3c:98:c5:3a:8e:87:
25:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:01:03:8D:E2:2C:1F:D8:84:19:6A:FA:83:DB:09:4C:8B:29:6D:87
X509v3 Authority Key Identifier:
keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a4:44:af:bc:95:eb:27:8e:b3:73:bd:df:5f:f4:7b:2c:f5:
44:19:17:79:d8:29:d8:a8:60:5f:69:18:99:f0:84:c3:de:51:
52:a6:10:d6:7e:cc:b6:72:68:c1:83:9d:2e:d3:8e:ce:f6:01:
21:5b:a3:40:19:32:f7:56:20:09:cc:03:a6:da:6b:51:40:a6:
c8:b0:94:7b:23:fd:1f:15:b0:43:71:c7:bd:34:75:6e:a3:57:
10:37:1b:ba:f1:58:70:19:ac:ac:6c:42:49:a7:1e:38:cd:fe:
9d:0d:b1:d8:3e:99:4e:09:da:40:c5:52:83:6a:37:a8:24:8f:
19:cc:5d:e4:80:f4:36:99:02:45:db:48:e4:0f:00:87:0d:32:
95:83:a8:f0:21:30:c1:21:57:61:b3:2f:ce:17:02:43:58:1d:
c0:40:a1:4a:cb:87:db:69:ae:c3:6b:2f:7d:62:5f:75:86:73:
db:fa:b6:ca:cd:8a:41:e6:68:d1:c7:fd:33:78:33:cd:ce:62:
9b:98:bb:b1:ff:3c:18:7f:6b:62:49:24:71:9c:99:7b:9a:e3:
37:3c:a2:99:9f:7b:aa:b8:cc:d9:0d:d4:2d:2e:d4:04:34:dd:
7d:f1:e0:b1:f0:2c:63:35:f3:6d:17:f2:02:7c:4d:53:2b:29:
a3:3d:b9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:44 2026 by rpki-client