Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft
File: x7cn_mQvVCkYabzx8pF-D1O-vSI.mft (raw, json)
Hash identifier: 0J9sHPppcrbUVb2wQeIZweBFWXSuH4uh+XE/KJXw49I=
Subject key identifier: E1:DC:F5:0C:9A:13:A6:A1:BB:C2:7A:39:2B:B8:0B:1D:AC:CD:60:C3
Authority key identifier: C7:B7:27:FE:64:2F:54:29:18:69:BC:F1:F2:91:7E:0F:53:BE:BD:22
Certificate issuer: /CN=c7b727fe642f54291869bcf1f2917e0f53bebd22
Certificate serial: 019D37895A8C733FC97609BC4DD526455726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft
Manifest number: 02A8
Signing time: Sun 29 Mar 2026 03:00:41 +0000
Manifest this update: Sun 29 Mar 2026 03:00:41 +0000
Manifest next update: Mon 30 Mar 2026 03:00:41 +0000
Files and hashes: 1: Alqm6hdLImAofyOgSBLXoU01L9c.roa (hash: CbAWqtGKbTFX20r/jX9Q3U9RdXcetq1ze06n11nz/3w=)
2: x7cn_mQvVCkYabzx8pF-D1O-vSI.crl (hash: 2DeIRi5ODuVXWy96FXcvVpnXUsalI03YNW7tVGY8iIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:5a:8c:73:3f:c9:76:09:bc:4d:d5:26:45:57:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b727fe642f54291869bcf1f2917e0f53bebd22
Validity
Not Before: Mar 29 03:00:41 2026 GMT
Not After : Mar 30 03:00:41 2026 GMT
Subject: CN=e1dcf50c9a13a6a1bbc27a392bb80b1daccd60c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:19:b2:51:97:e1:94:be:74:7d:73:61:b9:
75:fd:89:c6:67:5e:f2:4e:d5:22:22:d4:b5:c1:91:
26:e6:7c:6b:9b:7e:8c:f0:26:f1:65:b8:37:63:bc:
ab:f9:57:61:43:ff:c7:0f:0d:b9:05:89:b6:10:f7:
1d:b5:55:ab:b0:85:af:8f:e4:3a:9a:59:6a:c1:f5:
ff:33:aa:e3:fd:ee:81:18:4d:52:b8:e8:37:a6:26:
c4:48:3c:d3:da:e5:06:c5:43:40:06:fd:0e:14:35:
82:8c:18:5b:13:93:d2:3c:e4:82:5c:f5:63:35:df:
18:c4:3d:f2:cb:f3:59:e2:67:4b:6f:72:d4:70:29:
53:61:03:64:0a:83:54:be:49:2e:b6:9d:12:09:ee:
4a:ea:83:ed:d4:db:2c:89:f0:d7:e7:25:ba:be:15:
41:aa:78:fd:d5:13:34:ba:6a:4f:bb:e6:34:a8:62:
a5:c4:73:e8:ce:0e:61:fd:c8:39:e5:fe:99:88:60:
57:a6:22:44:52:5b:58:06:df:25:88:ce:e9:20:6b:
c1:76:ce:6a:44:6c:94:50:37:b7:b6:ee:4a:9a:e8:
1f:8f:01:20:74:bd:66:13:26:e3:b9:c8:68:d5:fb:
2d:6d:5a:36:84:81:1b:db:ca:db:83:ce:dd:ae:ba:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:F5:0C:9A:13:A6:A1:BB:C2:7A:39:2B:B8:0B:1D:AC:CD:60:C3
X509v3 Authority Key Identifier:
keyid:C7:B7:27:FE:64:2F:54:29:18:69:BC:F1:F2:91:7E:0F:53:BE:BD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f1:65:8d:92:ea:9e:e7:1c:a2:a7:31:e6:fe:7c:04:d3:ee:
19:68:89:e7:2f:a3:29:9c:1f:e6:6b:f3:87:be:e6:e0:18:4b:
69:0a:fd:1b:1b:29:d4:cc:b6:d0:90:14:2f:10:cd:b0:2d:69:
15:ef:3d:b9:45:15:3f:4b:a7:36:98:f7:08:06:39:21:85:90:
8f:45:b3:44:10:e5:1b:66:d7:d4:0a:09:2d:b6:af:c3:f4:f3:
93:8d:28:83:3e:9f:09:f6:19:75:27:4f:e1:a4:e0:3e:84:f8:
a2:52:f5:08:0a:40:d3:8a:d4:fa:d6:cb:5f:b3:70:65:1e:c8:
4a:45:4d:0f:27:09:5c:29:b8:43:5b:ae:06:95:aa:77:f7:3c:
cf:9c:12:72:8c:4a:3e:3c:1e:02:0a:3f:83:80:a8:b4:02:7f:
6d:a1:79:17:47:4e:db:57:95:92:8b:5f:97:b9:d6:fe:3c:e4:
bf:5e:63:58:a3:9b:68:c2:8c:39:a0:df:b0:90:5c:b3:0b:d2:
5b:19:84:ce:03:17:04:4d:51:c5:01:c6:fb:be:a6:5a:4e:42:
be:da:93:1a:61:bb:bd:b2:8b:bd:86:09:2b:45:38:8b:9c:11:
cb:30:06:5f:f1:9e:49:02:6d:ad:98:2a:8a:f3:d1:56:2c:f6:
f8:ac:05:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:43 2026 by rpki-client