Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
File: 7hgkJLSEGX3DBFJAktzdmS_L5L4.mft (raw, json)
Hash identifier: DY9oi2z59nTTi/Fz0dVi1z7YAVzNihtGNLncNl9srJo=
Subject key identifier: 88:08:E7:EC:9E:70:B9:43:60:D4:B8:71:D7:4C:00:AC:36:1C:B3:8F
Authority key identifier: EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE
Certificate issuer: /CN=ee182424b484197dc304524092dcdd992fcbe4be
Certificate serial: 019D386634CF94CC6F3268B44C9FECC9B4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: 7hgkJLSEGX3DBFJAktzdmS_L5L4.crl (hash: nTBCm3qmiQXtiIMsCaZ2lnJPsFpLnNAz0UeXFTveAvc=)
2: AqgdamS7ykTc5_HqfSgHZzg-Qso.roa (hash: DOyihYhY01+95T0gRT92vlpyvdeigYu6nAKnqJSzkek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:34:cf:94:cc:6f:32:68:b4:4c:9f:ec:c9:b4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee182424b484197dc304524092dcdd992fcbe4be
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=8808e7ec9e70b94360d4b871d74c00ac361cb38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:fd:aa:a7:0c:7e:de:d0:b5:35:bb:2e:bd:
55:e5:65:7b:e2:42:dd:85:61:12:e3:b6:f8:e5:9b:
92:79:0d:37:2f:83:9e:de:cf:e1:a6:4b:ac:c5:44:
ee:4e:e1:d8:ae:1c:35:07:99:0d:ca:69:e4:71:b5:
89:86:79:15:4c:a6:ec:20:cb:7f:4d:58:9d:18:95:
e4:7b:14:6e:72:04:21:ee:68:30:15:08:b0:bb:45:
ca:d7:da:9e:63:86:cb:ff:6a:d9:f5:78:98:38:92:
dc:79:8f:92:db:bf:32:9b:cc:40:a6:76:d6:d6:3a:
d4:f5:bb:07:a5:07:77:49:b6:0c:26:1a:21:fb:50:
8c:bb:c2:2e:6c:47:48:6d:12:22:d0:d8:d5:d5:39:
0b:ac:3f:60:62:dc:33:8f:25:e7:1e:49:73:4c:60:
e3:95:4a:21:d5:75:65:ab:1f:30:02:70:0f:d5:45:
d7:bb:8c:ca:35:22:3c:61:f5:24:30:2d:bd:fa:71:
04:4f:91:01:df:01:54:be:a2:db:a7:44:2d:59:72:
c9:83:55:c9:ad:cf:c9:5e:d8:5f:fe:01:85:db:ae:
13:e6:91:b3:ae:6b:3d:5e:84:3d:1e:d5:23:e8:ad:
d6:45:7f:d8:c8:cb:a7:0f:a7:ac:b1:e0:3b:52:e2:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:08:E7:EC:9E:70:B9:43:60:D4:B8:71:D7:4C:00:AC:36:1C:B3:8F
X509v3 Authority Key Identifier:
keyid:EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f2:6d:d8:2d:6e:e7:ff:59:82:9d:dc:59:05:c2:41:d1:86:
fd:6d:96:bb:52:99:ed:50:35:06:8f:93:d3:c4:7b:95:e6:ff:
67:95:ee:1e:5d:c0:ef:bd:c6:e0:69:2c:15:88:2d:e9:a3:97:
54:0c:aa:f5:93:f8:15:3c:da:c3:20:23:a6:56:36:bc:6e:1c:
60:5a:06:33:69:69:cc:55:9a:9c:67:30:4a:bd:35:3d:f7:a5:
61:3a:29:e0:25:25:e7:08:af:1d:62:7e:d1:ff:1a:7c:ef:51:
a7:73:b4:62:61:61:a0:4c:77:bc:95:1e:6e:61:5f:10:6e:bd:
74:bf:08:f9:f5:68:36:b1:3d:4d:68:a6:17:68:9f:bd:3d:bb:
97:40:16:b3:62:3d:b9:af:4f:2a:20:4c:9b:0c:03:4f:c8:ba:
c4:38:fb:c6:6c:04:d1:ea:39:3e:3f:86:ea:08:f8:86:a9:49:
7b:be:7a:fb:90:74:63:45:5e:8b:bf:2c:a2:60:e2:4d:fa:8f:
d2:53:e3:2d:fd:93:9f:f0:44:b7:ae:09:2c:3b:bb:5f:68:0f:
e9:7a:58:ef:40:e9:30:72:ce:b7:19:9a:24:51:4a:15:ce:6e:
c9:70:07:44:0d:2b:60:a1:46:d5:80:39:d1:50:a1:2c:dd:0b:
f2:b7:8b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:32 2026 by rpki-client