Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File: 7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier: ehT7bH6DY+a8gOCd/jOa3U2JXxoFVrdskn4SKMDWcCo=
Subject key identifier: 3F:3D:C8:78:F2:91:E0:04:0A:CC:A3:91:ED:A2:14:EB:1B:B4:CD:DB
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer: /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial: 019D39E57F304B63CF857624748B6228FB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number: 1824
Signing time: Sun 29 Mar 2026 14:00:34 +0000
Manifest this update: Sun 29 Mar 2026 14:00:34 +0000
Manifest next update: Mon 30 Mar 2026 14:00:34 +0000
Files and hashes: 1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: jPSHU0hm75tlicFAgJyh/LymRTs4tbJmFFtPKES2pJA=)
2: guibBNdYNmYjs3BhZ4d37Us7C4k.roa (hash: ERVCfgK3qCQAc++yH8oVuuxPI5EAT0LJxo2iXgCuAbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:7f:30:4b:63:cf:85:76:24:74:8b:62:28:fb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Validity
Not Before: Mar 29 14:00:34 2026 GMT
Not After : Mar 30 14:00:34 2026 GMT
Subject: CN=3f3dc878f291e0040acca391eda214eb1bb4cddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d6:28:ce:25:30:57:76:f5:d5:bf:3d:16:d2:
ac:9a:5e:dc:ce:f2:d8:20:43:0d:61:fd:aa:a7:c5:
a9:20:23:8c:5f:b3:9d:42:54:03:e5:d2:bf:a9:8d:
4f:19:fc:c5:6d:90:9a:8a:80:47:06:4b:cf:b0:99:
25:85:44:cc:67:92:89:65:28:4c:3d:97:af:b6:7b:
76:b5:7c:0d:6b:14:46:bd:14:1e:27:c3:16:7c:1e:
53:6b:88:b6:f9:95:73:dd:97:cb:be:b7:33:41:4a:
27:32:dd:ac:9b:38:ce:55:21:ca:d6:02:10:8a:32:
0b:87:20:30:c4:43:86:30:0c:c1:75:e1:26:07:cb:
ee:4f:f4:02:a4:40:0c:95:c3:eb:e9:5d:8b:eb:9c:
1c:3c:79:b6:01:7c:2c:4a:f9:dd:a6:da:7b:c5:b8:
30:c1:51:5e:86:51:ee:38:7d:40:40:4e:75:90:f4:
0d:37:a2:1d:ff:e3:73:a5:b5:55:a6:7b:30:f9:97:
0d:55:5b:db:cf:96:53:1d:66:ea:d3:02:2f:6d:e1:
aa:fd:e0:53:22:d9:bd:ff:be:5b:87:4a:e2:b1:d5:
03:87:51:09:65:10:99:87:cb:c7:1d:28:95:9e:d3:
1e:51:dd:4e:3b:10:09:06:d5:7b:c4:a4:60:7c:0c:
87:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3D:C8:78:F2:91:E0:04:0A:CC:A3:91:ED:A2:14:EB:1B:B4:CD:DB
X509v3 Authority Key Identifier:
keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:05:c3:38:5b:19:63:dc:ed:04:62:31:9b:da:54:c9:6f:97:
ea:a8:9d:c4:99:2d:c6:2f:e1:db:4a:13:67:ff:ec:d3:43:03:
73:54:67:fe:70:21:38:8f:81:9f:f2:fb:1e:6b:8b:b9:26:43:
63:68:22:5e:36:6e:cb:dd:af:89:e2:a1:e6:81:b0:ca:0a:f3:
31:9b:e3:af:36:6d:2e:43:d8:7b:0c:c4:e6:08:f4:ea:08:2e:
87:d2:22:3e:ea:e0:27:0c:bc:bb:1a:a4:e6:ef:d2:96:44:3b:
de:15:5d:17:69:78:1f:33:cc:6e:a9:4b:c1:b1:df:f3:98:4e:
4d:f8:0e:b0:0c:13:55:aa:44:9d:c8:eb:4b:f4:d9:65:f9:57:
60:5a:e6:f1:c6:dd:0d:ca:b1:6a:d4:8f:65:c7:49:ff:33:ba:
37:12:50:39:b0:4f:7b:4b:77:4d:26:a4:75:bc:c7:38:d4:23:
65:42:94:78:d2:21:d0:c6:09:11:e9:f1:33:65:04:95:2b:02:
19:b9:cd:35:c7:5e:b4:cd:7f:11:62:ff:2a:f4:d9:e8:92:66:
cc:aa:15:88:12:48:6d:86:46:b1:3e:a5:5e:45:c0:30:8a:54:
6e:60:d2:44:90:15:90:d8:2b:5e:3e:ff:ba:aa:d4:21:8b:4a:
9b:25:c7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:29 2026 by rpki-client