Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.mft
File: f7UOfTt_0olM-3DklGCLMgzCFcE.mft (raw, json)
Hash identifier: bO92lNPWyvl/PZ7DzFYl6fq7cVGKy1nud2P0xbilTTM=
Subject key identifier: 36:DF:C7:69:FA:A0:7E:77:7C:2A:DB:3F:BF:83:DC:29:C4:F4:05:49
Authority key identifier: 7F:B5:0E:7D:3B:7F:D2:89:4C:FB:70:E4:94:60:8B:32:0C:C2:15:C1
Certificate issuer: /CN=7fb50e7d3b7fd2894cfb70e494608b320cc215c1
Certificate serial: 019D37F78284AA3BB2A0BE6F931930400CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f7UOfTt_0olM-3DklGCLMgzCFcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.mft
Manifest number: 01A4
Signing time: Sun 29 Mar 2026 05:01:00 +0000
Manifest this update: Sun 29 Mar 2026 05:01:00 +0000
Manifest next update: Mon 30 Mar 2026 05:01:00 +0000
Files and hashes: 1: f7UOfTt_0olM-3DklGCLMgzCFcE.crl (hash: NLbuctV2TLFQx5zCXr7V5rEFXhgslVfowDIIcZomQ7g=)
2: tCG1FeRfHW_nriK48nPwFZvr8aA.roa (hash: 1uIdhKpi1jrMe+aiCHw9SG1ZaSILM55F3BJ28+kk3Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/f7UOfTt_0olM-3DklGCLMgzCFcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:82:84:aa:3b:b2:a0:be:6f:93:19:30:40:0c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fb50e7d3b7fd2894cfb70e494608b320cc215c1
Validity
Not Before: Mar 29 05:01:00 2026 GMT
Not After : Mar 30 05:01:00 2026 GMT
Subject: CN=36dfc769faa07e777c2adb3fbf83dc29c4f40549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:8f:cc:c3:90:26:df:9a:4b:29:4f:ca:e0:
32:6a:a1:6b:09:36:c4:76:1b:b4:e5:25:1d:93:ec:
33:83:b7:8a:66:30:20:4d:da:cc:95:50:5b:59:46:
3f:4f:36:0c:7b:ca:12:02:8e:1d:3a:b9:11:4c:32:
34:60:31:1d:59:0e:36:d2:7e:a4:54:fd:5f:a1:df:
e1:09:31:79:3d:e9:e2:e0:a8:aa:91:96:df:17:ae:
7f:cb:a0:45:8e:1d:9e:f8:12:fe:60:f4:c7:cf:71:
6d:e9:b5:e5:5d:e1:74:71:d0:65:13:c4:20:f9:16:
c0:ca:34:76:0d:16:c2:5c:5c:05:83:8d:7f:b0:36:
d2:b0:7c:17:37:fb:1a:f0:3c:ad:bc:29:d0:75:f1:
d1:94:26:0a:8c:db:fc:b1:1c:1a:73:af:d4:d9:d4:
da:8c:a3:65:76:1d:18:93:dc:f4:22:c7:7d:a3:87:
8d:36:0a:1b:4c:d3:0a:ba:30:19:9b:25:f2:05:3f:
2b:6e:c3:d7:e3:30:d4:f6:e5:b9:6d:bd:9b:c6:0b:
b3:df:56:57:20:df:11:49:b3:40:03:a1:26:af:13:
75:5a:4f:40:f8:8b:4e:7f:85:f9:53:f9:d9:21:33:
16:aa:3c:35:09:9f:ad:bb:65:41:7e:4a:41:ef:a5:
bc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DF:C7:69:FA:A0:7E:77:7C:2A:DB:3F:BF:83:DC:29:C4:F4:05:49
X509v3 Authority Key Identifier:
keyid:7F:B5:0E:7D:3B:7F:D2:89:4C:FB:70:E4:94:60:8B:32:0C:C2:15:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7UOfTt_0olM-3DklGCLMgzCFcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5e:5a:a3:45:e2:5e:1d:26:05:b8:97:94:84:d0:7b:23:19:
b9:dd:11:05:1a:42:d9:48:43:3c:62:8c:8a:34:9c:c5:d6:bf:
bb:2e:f1:37:05:bf:93:bc:cf:58:53:c7:60:1b:1b:fd:c9:c7:
92:4e:d6:db:2b:0c:e3:4b:11:52:93:0e:9f:27:27:a4:42:8a:
13:ab:32:cc:c5:9c:d6:71:c6:fc:5e:9d:44:f8:02:d0:36:23:
8e:e5:78:89:60:91:b3:ca:ed:ae:c7:61:68:1b:15:f9:b9:d8:
17:16:14:30:33:60:2d:8b:34:7b:f3:0d:05:ec:f8:17:bc:52:
2d:5d:31:6c:21:c1:e4:37:7f:d8:1b:12:35:0d:11:c5:51:92:
33:4d:47:48:3b:1b:2a:25:4b:22:60:dc:64:7e:59:db:61:2f:
25:c9:97:65:95:6f:14:49:90:fa:f2:40:2f:12:7d:4e:2c:bb:
35:28:dc:10:19:67:3d:72:10:0e:16:f1:2e:1d:0f:f4:83:a6:
f2:f9:d7:33:a3:37:27:4f:8b:16:e3:f5:8a:b7:15:32:3f:5d:
74:19:4b:34:35:59:b3:69:4b:05:bd:e8:3c:8e:f4:5b:98:73:
a2:15:9d:c7:5a:c5:66:0d:b7:3b:86:56:17:09:f5:8d:2e:56:
a2:89:19:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:22 2026 by rpki-client