Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
File: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft (raw, json)
Hash identifier: LT4vhswiI8UtFs3Xucpq4qCNNio9en5iqE1zdIOEQIk=
Subject key identifier: 76:35:4D:6D:7F:64:1F:B3:A1:5D:AE:8C:8C:B3:5E:FD:4B:09:EF:AE
Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Certificate serial: 019D389BBC01B5208F23224148267C87346D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:23 +0000
Manifest this update: Sun 29 Mar 2026 08:00:23 +0000
Manifest next update: Mon 30 Mar 2026 08:00:23 +0000
Files and hashes: 1: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl (hash: EKNvPatDjXTt/Z55OuUrnft5rx76Bz/qa7+Yj1AkYnY=)
2: R-TR2lMlqd-ajoqANh8z83K14Gg.roa (hash: LL4D//R1+/zSqsNzLuVii4RDHBXLV7iA5YOQo+LHbz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bc:01:b5:20:8f:23:22:41:48:26:7c:87:34:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Validity
Not Before: Mar 29 08:00:23 2026 GMT
Not After : Mar 30 08:00:23 2026 GMT
Subject: CN=76354d6d7f641fb3a15dae8c8cb35efd4b09efae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:63:1c:17:93:ee:ce:29:35:ad:4d:64:ea:
b6:9d:8e:ee:0e:e1:59:78:55:cb:66:8a:48:1a:7a:
84:36:ec:2b:4e:f2:04:8f:64:fd:69:0c:3f:f3:42:
9b:1d:15:68:45:78:9f:27:f5:18:84:e9:7b:80:30:
b0:52:62:d8:d3:33:74:2b:44:4f:6e:8d:19:1c:36:
34:78:e0:28:c1:33:9d:cc:ef:36:3c:84:05:48:e8:
10:79:af:87:79:fb:a2:73:0b:0c:f6:90:f1:43:48:
d2:44:14:25:13:cb:0d:31:3d:db:69:59:16:ef:5f:
da:a5:26:7e:ca:66:f7:be:d4:a0:eb:f1:d9:f4:61:
d7:bd:57:77:2f:4a:87:45:f6:ab:bf:e1:72:e6:50:
48:ca:8a:1d:bb:e2:1d:45:e0:d1:92:51:b4:c3:34:
f6:40:a6:eb:cf:31:bb:a3:b5:29:30:69:55:1f:b6:
e5:25:72:63:d5:0d:34:70:46:06:1b:d2:9c:b5:66:
3b:4b:04:50:cf:87:0c:52:4e:5f:cf:2c:da:0a:e6:
93:2b:a3:c2:1d:34:69:0a:f4:38:91:2b:0c:a0:b7:
68:6e:84:60:bd:22:1c:13:e7:84:ce:ef:9b:96:2a:
8c:84:f4:1b:89:00:56:bf:10:fb:0f:0e:6b:d0:75:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:35:4D:6D:7F:64:1F:B3:A1:5D:AE:8C:8C:B3:5E:FD:4B:09:EF:AE
X509v3 Authority Key Identifier:
keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:73:5a:f5:83:d0:b4:56:2c:33:fc:65:f8:75:ea:6f:9f:f4:
c6:47:98:a6:3a:ff:f0:85:4e:ab:57:cc:f5:14:2a:fc:4f:38:
b9:da:fb:d4:bb:2b:30:59:0d:f3:84:f6:58:07:50:40:cb:02:
57:94:72:c4:46:5a:fd:3f:2c:e9:9a:39:22:1a:ca:c7:c7:09:
d4:0c:6c:a0:69:78:cb:55:92:08:49:95:68:0a:31:67:01:8b:
0e:16:8d:14:80:7c:ee:1d:d1:36:0c:f9:23:23:df:d9:88:71:
c6:a3:1d:0f:84:85:7b:cb:a0:2d:d9:07:a0:88:a6:17:5f:10:
a8:c8:0b:1a:ba:8b:cb:88:c4:4d:ef:b7:41:0e:b2:2d:1b:7c:
e8:4a:f5:d2:50:03:f1:ac:3f:6d:3d:93:d6:bb:c1:03:a3:13:
7d:85:0f:f6:94:d4:23:9b:bc:92:ed:f6:a3:5f:99:eb:b9:d2:
fa:8a:e5:e8:03:d6:0f:bf:8a:5b:78:31:07:13:6f:6e:1e:44:
bd:09:5a:05:94:d4:a9:97:f5:15:b6:8e:f1:23:31:c9:f8:2a:
3d:7a:75:0e:08:e4:18:44:d9:d4:83:4e:f4:f5:a2:50:ae:8e:
e5:88:e8:4b:ac:52:b9:42:9b:8f:a5:58:27:fd:10:46:51:aa:
c0:6a:53:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:24 2026 by rpki-client