Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier: Hkm1ML3/HO1UkVmVogGGpwUg/4+nhDtrYE/1Rxv64OY=
Subject key identifier: 67:DD:21:53:20:05:41:12:33:05:7B:8D:54:1F:21:80:47:C1:50:03
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial: 019D37BFFE1E56A05F96E383758E6DF57ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:22 +0000
Manifest this update: Sun 29 Mar 2026 04:00:22 +0000
Manifest next update: Mon 30 Mar 2026 04:00:22 +0000
Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: ZaxONDp6nX8Lbb+pw2SIObVGwldTZUE6QW7RwE1z0pE=)
2: TPFA9ANmjeizoRraD4Ig8TEK1SU.roa (hash: kT6UPV2xN7mmP7EqC+AR1+y3Fgn76QDWPblq40BQx1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:fe:1e:56:a0:5f:96:e3:83:75:8e:6d:f5:7a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Validity
Not Before: Mar 29 04:00:22 2026 GMT
Not After : Mar 30 04:00:22 2026 GMT
Subject: CN=67dd21532005411233057b8d541f218047c15003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:ad:be:b4:00:5b:14:74:9e:11:9e:c0:fa:
b7:44:98:c1:02:75:0d:61:5f:f4:07:5a:f7:19:4e:
fd:48:25:a3:32:28:42:e3:c1:6b:b4:c9:f3:8a:7e:
15:4f:ae:e0:9b:9f:e6:3b:52:e4:71:e0:0b:d0:fc:
aa:ae:b4:78:78:50:e8:ea:a1:ec:80:76:e5:64:a8:
6d:a8:32:7b:a8:32:f4:a4:5f:51:e9:2e:91:21:82:
8a:30:ca:3c:a3:25:d9:41:46:86:0d:f9:ce:ca:ce:
be:f3:7c:17:5d:92:0d:54:56:82:f9:42:aa:7f:3d:
51:d0:bb:4c:de:f5:1e:7a:c2:d4:27:c0:d7:77:e2:
04:71:46:29:10:6b:15:cb:69:b3:e0:bc:75:51:77:
de:ad:83:c8:86:15:2a:14:90:b6:d6:fa:da:03:2b:
31:bd:c9:a0:df:ed:0c:ec:bf:46:72:5a:80:8d:15:
2e:bc:83:12:df:57:ea:67:8d:a8:da:15:d2:23:5b:
ee:ec:1b:4a:44:8a:e1:31:02:7c:bf:df:c8:9a:20:
79:2b:2b:b3:ea:72:fd:c7:c2:ef:6b:af:7b:57:93:
13:d7:b1:5e:6f:99:24:32:6a:13:52:6c:75:98:dc:
46:d1:4c:06:8a:95:f0:90:e2:7c:bd:e2:cc:2b:02:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DD:21:53:20:05:41:12:33:05:7B:8D:54:1F:21:80:47:C1:50:03
X509v3 Authority Key Identifier:
keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:44:f4:28:90:07:c7:f2:9e:d6:8a:18:35:ce:bc:3e:43:cb:
57:ca:9f:cc:a6:cd:93:ed:52:3c:2f:f4:ad:71:96:46:69:d7:
bd:ed:c7:a5:81:3f:1b:da:2a:a6:b1:df:ce:d7:89:49:90:27:
43:70:e9:9a:74:a8:cf:5c:63:d4:9f:41:4d:a2:f1:e5:ce:7b:
78:0f:ee:1a:bf:5b:2e:9c:8b:72:67:df:ba:31:8c:6f:d9:50:
62:fc:32:f6:77:20:00:96:28:83:bf:56:17:8e:5a:de:3f:b9:
65:5a:28:26:b6:86:32:e1:0d:a3:50:94:d0:cb:1f:ae:c2:82:
b5:f5:29:14:23:df:2d:6a:48:2e:0d:9d:3e:57:a5:55:82:1b:
48:07:4a:3e:52:95:53:85:17:b4:bb:7e:a8:ce:3b:2f:f5:91:
65:05:a2:cb:d1:6a:77:98:96:2d:30:be:1a:2e:11:10:1f:ba:
22:8a:19:81:78:fc:a2:cb:c5:43:b4:85:d3:4c:c2:0b:8f:4a:
cf:c2:ae:8c:c7:f2:d5:08:1d:02:9d:c7:3e:a4:6a:6f:8a:52:
2b:2f:25:20:d9:9d:72:82:5d:76:2f:59:11:3d:36:b3:dc:2b:
73:23:4f:ea:5a:84:4b:2f:b2:64:8e:46:c8:03:4d:68:6b:86:
b6:cf:ac:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:19 2026 by rpki-client