Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
File: 7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json)
Hash identifier: ZibqealJayCjSCHryzCbsDFmrVwxL0Ii4kO0B6QdsGE=
Subject key identifier: 8D:36:BC:F6:06:1F:9A:4F:09:99:AB:3C:FB:DE:49:D2:E1:DD:71:BC
Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Certificate issuer: /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Certificate serial: 019D39AF6C9B0C5A853BA5323681B91B4D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
Manifest number: 10F6
Signing time: Sun 29 Mar 2026 13:01:31 +0000
Manifest this update: Sun 29 Mar 2026 13:01:31 +0000
Manifest next update: Mon 30 Mar 2026 13:01:31 +0000
Files and hashes: 1: 6-BuOHHPnpUOqlNuA0hQWIC3UUY.roa (hash: Ab97lavd/imuV8no1ybPZidS69ZM1uRf157tLeK/rjM=)
2: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: GfbPyHoWFmAAYYNkmYm8w/1aUouhCUY6Xm7vsIvRfEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:6c:9b:0c:5a:85:3b:a5:32:36:81:b9:1b:4d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Validity
Not Before: Mar 29 13:01:31 2026 GMT
Not After : Mar 30 13:01:31 2026 GMT
Subject: CN=8d36bcf6061f9a4f0999ab3cfbde49d2e1dd71bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:a5:9a:62:f8:b0:ad:cf:7c:1c:38:6a:f6:
28:6f:ba:2f:3f:87:40:cb:f8:45:cc:d9:59:77:be:
34:53:c8:07:89:57:6b:eb:2f:5e:2c:7d:ed:f1:9f:
39:36:a8:a9:4b:50:ca:eb:36:59:89:aa:c0:02:9f:
f4:3d:f5:57:ab:5b:88:9c:17:27:ca:7e:c3:6b:69:
ff:0d:7d:26:ba:b9:17:43:65:98:6a:5b:d4:87:ff:
1a:28:a7:c7:10:9d:7e:c9:a9:cd:26:23:e5:c3:d5:
33:69:20:ff:8e:9c:3c:e0:59:0c:19:aa:fd:ec:ea:
7c:bc:7b:01:b5:f8:87:90:08:82:c0:a8:67:db:a1:
a9:77:20:dc:86:fd:8f:b1:8c:bc:b7:75:75:e3:b9:
94:af:af:f3:f9:7f:cc:88:45:0f:8a:c4:56:77:ee:
ed:dc:8f:bd:fa:e6:03:c1:2e:9d:88:6f:0a:44:86:
bf:12:2a:8c:e9:21:70:e2:82:9b:e2:f6:37:b1:b2:
c4:99:ce:3b:49:af:cf:fb:01:e5:56:dc:45:2c:b0:
df:7a:6e:cf:fe:b6:d6:05:7f:b7:91:36:3a:ab:48:
eb:aa:f9:10:8c:eb:70:be:ed:f1:ed:c0:b5:a3:39:
91:3d:66:b2:d6:e2:bb:e5:35:59:07:33:98:b7:f8:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:36:BC:F6:06:1F:9A:4F:09:99:AB:3C:FB:DE:49:D2:E1:DD:71:BC
X509v3 Authority Key Identifier:
keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:13:48:f4:ec:60:33:4c:db:1d:d5:e7:5f:15:05:65:64:40:
eb:95:1e:38:a9:95:8d:f9:f2:cc:f0:64:77:a0:20:c7:90:4c:
be:d0:2c:b5:83:fa:2e:2b:96:60:d3:13:5e:11:0a:ed:a0:19:
00:0c:82:d3:e7:1c:49:26:fd:c1:5c:a7:c2:25:af:58:81:40:
3e:0a:7c:0f:d2:e7:e8:51:e1:44:5e:a2:1b:01:78:cf:ea:fb:
e4:80:b6:29:6f:c6:93:86:21:50:38:ac:18:1b:e9:93:66:fb:
4b:26:44:a6:de:e0:ea:fd:14:73:ff:2b:c0:41:fd:67:b4:a4:
2d:93:83:a0:ce:35:8a:27:61:b3:37:8b:6d:f5:24:54:b1:9f:
98:38:62:55:e2:5c:57:36:31:f0:3e:92:9c:62:a6:bc:d3:ce:
ac:ac:d1:e6:38:99:f9:04:dc:d3:99:1a:6c:65:d2:2b:33:e6:
3e:d6:df:8d:a0:57:af:ea:7f:2c:8a:57:74:42:1e:27:6f:58:
47:c7:bf:94:db:b4:e4:2a:3d:6e:2e:a9:7f:45:fe:f4:92:fc:
46:64:00:15:d7:c1:f9:cb:ed:cb:0e:d1:63:c9:29:fb:98:c8:
9b:85:d2:34:ee:e4:2d:79:80:e2:be:ae:fe:97:39:ed:1a:62:
cd:fd:7d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:11 2026 by rpki-client