Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
File: 7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json)
Hash identifier: qzvRHAx/1C4cuyJ6U+QKPpG0xIJQEvSAZe8I5p/YCRo=
Subject key identifier: 72:38:A8:DA:75:3F:77:95:2C:AB:15:DA:15:C1:51:4D:38:0F:21:6F
Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
Certificate issuer: /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Certificate serial: 019D37525391CD6E497847BBC5769F17967B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
Manifest number: 145F
Signing time: Sun 29 Mar 2026 02:00:35 +0000
Manifest this update: Sun 29 Mar 2026 02:00:35 +0000
Manifest next update: Mon 30 Mar 2026 02:00:35 +0000
Files and hashes: 1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: FoF+HwA6I3RsmDPByaDKjtg4DABfsJ/Mc1EtaIdzLsU=)
2: bPSO6MwxWbbuX5pl75RHEJata0Y.roa (hash: AjyNVlFJkmNLyTmsoSE4kMhHz/W3/3nMb2xQxom7aZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:53:91:cd:6e:49:78:47:bb:c5:76:9f:17:96:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Validity
Not Before: Mar 29 02:00:35 2026 GMT
Not After : Mar 30 02:00:35 2026 GMT
Subject: CN=7238a8da753f77952cab15da15c1514d380f216f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:7e:87:09:50:c2:60:fd:f5:e5:34:0d:c1:
b7:84:b0:03:a3:df:c6:79:cf:0b:20:51:a9:d1:e8:
1f:02:db:75:79:1d:a1:3e:9d:e7:f1:d0:f0:b9:e1:
67:74:c3:86:66:8c:cd:cd:97:e0:e8:40:5e:2f:47:
64:ea:a0:58:a8:52:0d:40:be:83:dc:8e:ae:ef:55:
10:52:67:d2:c6:d5:89:17:a9:0e:93:69:ae:e4:f0:
bc:c4:e6:cd:4a:e1:0f:df:a4:0d:df:21:3c:28:c7:
fc:98:a5:4b:d5:6b:7e:9d:ec:f1:10:f0:12:57:1b:
ad:fc:63:a2:86:1a:09:d6:aa:bb:be:26:d5:36:30:
5e:3b:59:f7:59:52:da:22:52:c5:b7:32:d1:31:15:
d7:3c:7e:9d:ff:dc:27:2b:de:b2:1b:4b:f0:f8:70:
31:a3:a2:ea:6e:94:b9:f0:53:e6:59:7d:c7:24:bd:
5e:ed:51:3d:65:5e:05:e0:37:85:d5:a8:6c:3c:56:
b3:d6:0b:95:2d:20:14:1c:46:cd:4d:fa:7f:1c:06:
d6:8a:71:a9:1d:71:87:16:37:1b:c5:0e:c5:1e:6f:
b7:e8:ad:bc:10:ca:65:e4:0f:db:18:3a:4c:ce:f1:
0e:cd:52:93:c5:9b:36:0c:df:4b:d3:6d:54:a0:45:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:38:A8:DA:75:3F:77:95:2C:AB:15:DA:15:C1:51:4D:38:0F:21:6F
X509v3 Authority Key Identifier:
keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f9:c8:d7:21:1c:1c:a1:60:df:2f:c0:07:0b:1e:dd:6d:6e:
fa:f6:ef:49:6c:7a:3f:0e:7b:56:3a:04:6c:52:a0:af:17:7e:
69:96:7a:03:19:9c:31:5e:27:e2:1a:ac:2b:36:66:52:9c:58:
7c:e0:1b:e7:29:b6:1a:0d:65:68:47:83:2d:3e:07:d9:72:82:
d2:2c:fc:46:29:e1:40:b1:a9:6d:32:4f:b2:00:d5:4c:32:2b:
9f:68:d9:89:4d:5d:0d:d3:16:14:ae:16:8e:42:cb:ff:ac:d7:
85:da:b7:be:b9:34:8c:0f:75:97:03:b4:92:e0:e9:c5:b3:44:
fe:de:39:d0:56:ac:b6:eb:44:13:eb:c7:84:39:d0:82:7e:01:
99:97:86:54:f1:fb:c7:3d:a9:29:b7:01:cc:4c:d8:1f:f7:7e:
2d:d4:77:6f:04:9b:18:2f:17:d0:b6:98:a1:75:08:5d:9d:12:
75:b0:ed:e0:f9:6b:a8:51:a0:ad:d4:e8:56:0b:97:88:5b:f0:
02:5e:4b:15:e1:8a:96:43:da:bd:4c:ec:c0:3e:fa:ff:6f:ae:
e9:af:33:4d:79:92:6d:6a:fb:d9:b5:7c:3d:7a:03:6b:5f:c2:
d0:e0:31:5b:37:2d:06:19:18:78:24:f3:fd:15:5d:9f:74:43:
9c:03:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:38:59 2026 by rpki-client