Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
File: 7N86SgXzcFD3wDedNPT0gUvSCd8.mft (raw, json)
Hash identifier: a/xFGp0VNagFJdLExbQeo9yS6IdRFHIryKALuLcTrjE=
Subject key identifier: 8C:88:38:33:33:8E:19:54:30:FA:A2:DF:5D:A4:50:C6:2D:A6:D3:13
Authority key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
Certificate issuer: /CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Certificate serial: 019D371B28E1F97A22EB6B8FAF97AB6160CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
Manifest number: 03E8
Signing time: Sun 29 Mar 2026 01:00:19 +0000
Manifest this update: Sun 29 Mar 2026 01:00:19 +0000
Manifest next update: Mon 30 Mar 2026 01:00:19 +0000
Files and hashes: 1: 7N86SgXzcFD3wDedNPT0gUvSCd8.crl (hash: o0DeyafYXizAD7Q4iv6BNOZPMGng8m4SI9hMDm/Rmqo=)
2: HRNjMQScROeFTp_2rmfTV1Pqr40.roa (hash: 66mHtRw/URStOe2xC3SxpwCWQ3KY1R/KgZMB+PrJKAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:28:e1:f9:7a:22:eb:6b:8f:af:97:ab:61:60:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Validity
Not Before: Mar 29 01:00:19 2026 GMT
Not After : Mar 30 01:00:19 2026 GMT
Subject: CN=8c883833338e195430faa2df5da450c62da6d313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:6e:ff:b9:5b:6c:3f:3e:c0:83:2b:0d:50:
f8:e4:83:65:6e:9b:73:ca:42:a8:2b:59:37:e6:c9:
1d:dc:84:8e:93:07:c0:c9:22:18:c3:81:db:1b:35:
69:71:5b:c6:95:d6:83:e8:60:88:72:33:72:6f:e5:
0f:60:c9:4c:a7:ba:c4:87:fd:8c:f5:ad:0d:55:8f:
89:ea:82:a2:8e:e1:7f:70:76:d1:82:cb:ff:ac:fc:
88:41:18:3b:4a:91:82:93:3a:ca:e7:e5:77:de:c9:
dd:41:60:db:22:a4:c6:1e:89:08:5e:52:e5:94:18:
34:0b:0d:fd:84:07:b3:44:1d:8a:e6:39:48:bc:f8:
f2:55:49:98:78:8f:f9:18:6c:2e:f8:8a:12:7b:3a:
5e:2b:af:85:b6:39:a1:07:40:b7:6d:91:76:2f:86:
da:82:e8:7f:38:02:90:8f:da:12:b0:87:a5:fd:05:
18:a0:f5:50:5d:cd:e2:bc:20:0d:a3:03:62:25:0f:
e3:7d:62:be:79:c2:46:f2:49:8b:d5:31:cf:2a:01:
66:b4:9c:6f:b4:27:e5:7d:90:1e:41:e7:15:3b:ad:
87:7c:b9:14:11:0d:0b:5c:37:7a:3c:9c:78:1f:4a:
81:20:0b:11:fd:1e:9c:d9:b6:6a:d8:7f:79:19:d2:
cd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:88:38:33:33:8E:19:54:30:FA:A2:DF:5D:A4:50:C6:2D:A6:D3:13
X509v3 Authority Key Identifier:
keyid:EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f8:d0:ea:4b:75:e2:2b:81:22:c1:91:10:d8:e0:0a:86:2a:
fd:3e:a6:cd:a0:5b:0f:e8:7a:20:53:71:7c:f5:2c:d9:18:4c:
fa:88:31:36:ae:5b:a3:8f:84:2f:29:f7:40:96:73:0b:d5:6f:
74:f4:71:dc:d3:94:48:9c:04:60:d8:59:e8:c8:63:7c:e0:07:
52:09:32:77:2c:39:7c:24:64:7a:cd:24:29:a3:c5:43:2e:27:
8b:e0:c1:08:eb:61:19:d4:95:8e:da:2d:f5:a9:fd:06:b8:24:
3e:df:c5:57:d2:86:b9:16:d1:e1:ca:26:70:35:9c:48:26:f5:
0f:ae:93:02:df:cf:cb:94:47:ba:99:59:d9:c7:8f:59:db:7b:
02:aa:b0:09:eb:b6:e4:aa:77:ce:89:95:87:4c:7e:f0:aa:a3:
0d:05:ee:50:d5:85:ee:f8:09:ce:6c:2c:cf:56:19:2c:e3:4e:
dc:d3:de:7f:52:4e:e8:66:17:83:fc:b0:ee:b7:a5:3c:b0:57:
16:60:87:a0:5c:fe:c6:05:a4:a1:7a:86:2e:a5:a6:ae:a6:1d:
11:38:87:be:a4:a5:3c:e2:33:e9:35:37:d0:6e:bc:da:10:54:
4b:3e:65:db:d9:16:11:9c:9d:73:5e:1b:96:f6:d9:f5:3f:4f:
e7:ce:6a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:11 2026 by rpki-client