Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
File: 7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json)
Hash identifier: sicA9lAnehC85Owlihi/GRSm/r04rG0G+fAgxgYA+Gc=
Subject key identifier: 60:E0:A5:05:A7:53:5B:3D:3E:AF:A3:EA:19:5B:6D:64:54:F8:35:D3
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial: 019D3909AA80A3CD7F788EB270D7DE6248FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:00:27 +0000
Manifest this update: Sun 29 Mar 2026 10:00:27 +0000
Manifest next update: Mon 30 Mar 2026 10:00:27 +0000
Files and hashes: 1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: K1tIPs3NnYg4kSGc1dEpiZEfHnca2FsDMbbBOuo0Vm8=)
2: Rrw9o3WCpwNOEYYVtK8wHu_QJkY.roa (hash: 6I0ghzBeN79J1UAgpVFm5cx7tXZBN44byXnGOpV99sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:aa:80:a3:cd:7f:78:8e:b2:70:d7:de:62:48:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
Validity
Not Before: Mar 29 10:00:27 2026 GMT
Not After : Mar 30 10:00:27 2026 GMT
Subject: CN=60e0a505a7535b3d3eafa3ea195b6d6454f835d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ea:96:74:76:61:93:53:31:9b:b5:1b:e1:56:
db:b2:73:35:02:b4:a5:5a:c6:ef:3a:7e:28:5e:4a:
70:12:af:6c:62:85:9e:40:8c:70:f4:4c:53:b7:7e:
88:58:c5:b2:ab:c1:1e:d4:27:af:44:c1:23:bb:59:
91:93:08:01:46:fe:cb:57:d0:23:55:f6:24:a7:f8:
2a:7f:17:25:fe:8f:e9:b2:14:1b:c6:33:6e:f3:81:
0f:74:8a:9e:1a:37:53:30:df:79:5b:97:22:c4:12:
83:5c:1a:cc:16:d7:a5:6a:cc:62:92:2e:ff:24:3d:
3a:6d:01:c5:91:19:70:29:3f:e6:17:2e:7a:01:d4:
ef:2f:37:32:48:51:3a:06:b7:01:92:4c:e9:2e:f0:
6f:70:ca:67:7e:ad:39:f9:8f:0f:38:0f:13:1d:ee:
07:6a:90:d4:72:fe:8e:53:69:7c:d6:a6:9d:0b:d8:
9f:4c:20:f8:c7:fd:a8:88:77:4c:e6:49:16:af:1b:
2c:39:68:ee:76:9b:7b:f7:40:32:04:97:f9:3b:99:
31:da:bc:2e:cc:f9:a7:bf:ce:06:1a:60:e9:a3:37:
af:ff:10:7a:f7:b4:91:37:a3:11:a9:e7:16:2e:3d:
07:0b:a0:ec:52:ad:ca:2e:a2:9b:b4:18:54:92:94:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E0:A5:05:A7:53:5B:3D:3E:AF:A3:EA:19:5B:6D:64:54:F8:35:D3
X509v3 Authority Key Identifier:
keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:64:fa:27:dd:cb:f3:d6:ac:3d:5a:51:61:e8:83:f9:90:7a:
c8:77:be:55:ea:6f:11:6d:07:43:58:29:18:c1:c2:67:8c:0c:
5d:86:38:a4:d5:71:53:ed:68:31:be:60:c3:94:18:dd:06:73:
c9:3a:cc:0a:40:b1:7a:63:f3:40:14:33:6a:b0:c8:f6:6a:89:
f5:40:9b:71:42:92:8d:c9:7e:6a:df:ae:39:e0:40:55:5b:ee:
df:f5:99:61:54:88:78:c5:8e:05:f0:bd:41:0a:b2:fb:6f:20:
e0:a5:2a:a0:98:55:5a:f2:94:38:0e:97:21:77:73:c6:72:3a:
45:b6:42:91:31:5e:f1:42:ac:c4:53:8a:da:99:15:ab:37:4d:
fa:13:bc:da:eb:b4:78:e6:22:42:be:ed:db:fe:e9:e8:af:35:
b2:d2:fa:a1:7e:bd:2f:18:6d:5f:46:61:b7:31:ff:cf:cc:41:
60:44:a4:b9:e8:04:7c:fa:59:f8:4a:f4:0e:f1:da:48:1b:f1:
bb:56:34:d7:09:24:12:b5:d9:dd:fd:60:fc:8f:fd:36:9e:58:
bd:2c:ec:5b:d1:16:a6:39:23:ac:a1:06:ad:94:5c:8b:14:fe:
5a:15:bd:27:f7:ed:05:d9:dd:4a:cc:b1:54:95:18:be:e5:8c:
fb:f8:c8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:22 2026 by rpki-client