Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
File: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft (raw, json)
Hash identifier: qQ2WynewsLrgusJhBo3aUMtS2yObwLnDWfmzfKhuzm8=
Subject key identifier: A8:36:00:2F:4E:9C:D6:E6:80:06:0A:FE:AC:AA:D7:AE:58:E8:34:59
Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
Certificate issuer: /CN=ed32ef0caf0a057529fb928f76962a7425390dba
Certificate serial: 019CE636BFC56B4B1F3E9DEE1CE78240BA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
Manifest number: 031A
Signing time: Fri 13 Mar 2026 08:01:13 +0000
Manifest this update: Fri 13 Mar 2026 08:01:13 +0000
Manifest next update: Sat 14 Mar 2026 08:01:13 +0000
Files and hashes: 1: 4ck5stj-Nruh5mOMgR2qNBplGK4.roa (hash: pnWvPZcJH3rubSBQDARfPzyblV+Aac+zG4Cuud9DAE8=)
2: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl (hash: 1WoeppC9TSUHKnnsujtIHFM0XTWzvcuvYE/AKKc119g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:bf:c5:6b:4b:1f:3e:9d:ee:1c:e7:82:40:ba:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba
Validity
Not Before: Mar 13 08:01:13 2026 GMT
Not After : Mar 14 08:01:13 2026 GMT
Subject: CN=a836002f4e9cd6e680060afeacaad7ae58e83459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:a1:58:ef:07:23:af:fc:d7:02:12:ec:25:
1c:7a:bf:43:f7:1a:af:0d:34:15:30:1f:14:99:13:
73:c6:ee:73:de:e7:34:e8:e3:86:f7:be:48:b4:d3:
88:68:59:47:4f:ee:07:d4:35:82:7c:1c:b0:d0:ed:
ed:62:83:16:8c:d6:c2:87:f2:7d:dc:55:be:bc:06:
4c:20:21:9a:48:37:7b:b7:e1:48:51:67:93:8e:d9:
5f:ca:82:c7:28:e7:a3:9e:0b:d7:ba:c2:45:c9:f1:
84:30:e1:79:f1:40:a1:a7:e8:95:8b:b1:ae:d3:ae:
af:60:51:92:82:f7:ba:63:98:0e:01:8f:b7:24:87:
a7:a7:cf:b0:fe:4a:82:89:cd:f1:70:88:b4:4f:fe:
46:e1:fd:46:bb:a5:42:2d:11:3e:1e:f6:90:8a:32:
db:57:31:46:fc:3c:cc:eb:9e:ac:ce:df:ce:15:a7:
c6:3d:66:e8:0e:94:ca:82:f0:e3:67:33:c1:a3:0b:
7f:22:e7:ac:2e:42:a4:11:ec:6f:91:76:a1:23:b8:
39:70:3a:98:c1:34:20:ec:f6:cb:7f:ba:be:00:8c:
1f:87:3e:d1:48:97:d4:03:e4:01:a8:37:17:ed:50:
f8:82:29:68:c1:81:83:e7:92:24:c6:ee:82:b3:4c:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:36:00:2F:4E:9C:D6:E6:80:06:0A:FE:AC:AA:D7:AE:58:E8:34:59
X509v3 Authority Key Identifier:
keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:20:48:1b:2b:12:18:38:fb:1c:13:fb:7a:e5:49:f5:d1:4d:
23:58:29:9f:0f:cb:74:67:85:7f:fe:86:b7:ea:c5:61:8b:31:
16:0c:09:bf:8d:47:ad:3d:4b:42:de:7a:3b:47:57:5e:06:6d:
88:ef:54:ee:8b:44:87:6d:7e:d0:d6:8d:3a:97:25:b9:83:0f:
d8:3a:ed:6b:c4:c4:61:73:fe:a8:8c:06:a1:26:cd:38:d6:af:
6d:0f:c7:fd:a9:97:01:d5:73:9a:a6:1a:60:b1:5f:02:52:60:
51:4b:5b:c7:b5:39:3d:b7:2e:5e:c1:4b:5e:af:d0:52:6c:c3:
3d:aa:07:0f:b9:14:81:73:52:c1:18:0d:35:ef:66:ba:38:3a:
bc:6e:6b:99:13:e5:70:fa:d6:1d:2a:f1:5c:78:74:4e:92:71:
64:27:b8:3f:9d:5e:74:fe:fa:f2:5c:04:5a:27:12:ca:42:5b:
c6:7b:41:88:17:ac:29:b9:04:c8:7f:d5:c7:b9:6d:e2:30:bf:
e9:93:c4:a9:27:e4:61:6f:b4:27:b7:9f:de:e8:7e:f5:22:7a:
00:48:b3:e0:bf:fa:82:7b:5d:b4:59:eb:21:2f:ff:54:aa:7f:
f3:ad:04:8b:39:1e:22:34:20:d9:a3:bb:84:f2:28:fa:2b:7a:
fa:35:c8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:58:53 2026 by rpki-client