Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier: vkdfNqRJZwnzev37zWg3px8/3WC+i3b6+HafAFl25Xg=
Subject key identifier: 46:F6:23:AA:3E:05:13:19:49:EE:D8:AA:29:BB:39:D8:44:F1:1D:9A
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 019D3865AE4F4EA2050A8D98A5E18129A148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number: 0C88
Signing time: Sun 29 Mar 2026 07:01:20 +0000
Manifest this update: Sun 29 Mar 2026 07:01:20 +0000
Manifest next update: Mon 30 Mar 2026 07:01:20 +0000
Files and hashes: 1: 1-WOlFKgJ5fyuJ0mK_WXzxZSjJZ8.roa (hash: mA5SaPX5hOKD8NX3Hv1/uNqyTzg2PYZjKEyCT2Stnms=)
2: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: 4kJAS0gOcFpdhmRF0JuRisMoDYYrW8S1Ft1HSMpZFRM=)
3: qCla3aYy8lmkCd9GDBwAGdRopPY.roa (hash: yq0d/UWqcKfbvqZVTTAHu+E8rSvKS7DJ77n7pL88Lw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ae:4f:4e:a2:05:0a:8d:98:a5:e1:81:29:a1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: Mar 29 07:01:20 2026 GMT
Not After : Mar 30 07:01:20 2026 GMT
Subject: CN=46f623aa3e05131949eed8aa29bb39d844f11d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:6c:9c:8f:b7:a1:73:88:cf:50:b4:ed:3c:
aa:07:ac:84:7b:ba:86:b4:8d:b4:c3:42:d5:9c:3b:
a4:06:1e:4f:40:a8:fd:df:c8:fd:18:b9:3a:24:d6:
ac:0e:4b:04:d5:f2:4f:2a:ec:e0:6f:84:d6:b4:d7:
18:b3:4f:4d:3d:88:a5:e7:38:0c:c6:08:f9:65:b6:
3d:59:3f:c1:c9:00:0e:9e:de:7a:e7:d6:d1:48:1b:
c5:02:f7:db:8a:66:b4:3a:88:db:13:53:d5:13:a2:
21:c6:ee:51:b9:35:c9:d7:86:f9:4b:d0:ef:2c:f7:
d0:43:88:f8:c3:b2:18:88:32:a1:54:ee:85:ed:dc:
c3:ac:f1:24:c7:01:b6:98:27:07:b7:67:ad:88:ca:
c6:ed:80:3e:3d:7f:6f:40:24:57:3a:32:3b:49:63:
3e:13:21:2f:90:f0:a0:ae:74:4f:00:4a:7f:7a:92:
88:5a:0b:65:f4:57:84:52:df:98:58:c6:04:23:93:
a4:6c:bb:41:2f:90:42:bd:81:16:f0:7d:25:41:0c:
f0:a9:fe:bd:cf:14:97:0d:c7:2a:c3:5a:a8:84:94:
88:d9:b3:64:a4:83:77:95:c6:97:ea:73:28:b0:09:
83:67:4b:17:7a:be:e5:1c:87:92:65:f6:ab:6d:4f:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F6:23:AA:3E:05:13:19:49:EE:D8:AA:29:BB:39:D8:44:F1:1D:9A
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a0:60:56:ee:62:8d:0f:8d:df:98:29:3f:b5:44:ef:e6:0b:
a3:3c:96:42:12:49:6b:cc:76:28:aa:5d:d5:2c:a6:e6:98:23:
56:91:e3:56:1b:af:be:5c:55:d5:85:60:3b:a5:f9:e8:a4:f6:
21:8e:9e:5c:cb:de:b7:00:fd:a2:b2:76:b3:84:f0:fd:63:1d:
1f:55:6e:f4:f4:21:a7:3e:d0:3a:41:92:bf:84:ae:2c:63:7a:
00:b2:b1:d2:d4:bb:70:16:4a:74:06:87:d3:6d:92:d5:34:61:
23:44:29:32:39:68:60:41:ef:a4:1e:cd:38:99:ea:bb:d8:6d:
30:3c:2a:34:7c:1f:d0:79:4c:a0:84:70:dd:a6:e6:86:b4:6b:
1d:c0:36:44:fe:1e:ad:83:8a:af:3b:e2:c5:79:ec:0a:85:1d:
88:a7:d6:65:ba:5c:70:a7:9e:b4:2c:a8:ac:09:9e:33:99:bf:
e7:c1:82:7d:a7:c2:1c:75:b9:8b:d1:65:36:97:ac:26:4c:7d:
6c:85:5d:ee:7f:40:ae:94:1f:86:8c:18:73:dd:91:5f:8b:a2:
6b:e8:3b:f9:7d:f2:5c:d7:5d:ee:3c:b7:26:00:68:bf:1b:7f:
2b:2e:87:81:f9:8b:19:fc:01:4f:d8:be:8b:22:75:d5:17:80:
54:86:83:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:16 2026 by rpki-client