Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: 2tDlfeIkh1kUXMCNocoLE4OuU5ShSwwWOgXOihylYn8=
Subject key identifier: 7B:81:65:CB:C8:57:54:8B:4F:FF:E5:13:33:5B:CC:9C:D7:A6:49:B6
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 019D389C35A29B71F74B42B8B3A0DD599853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 0522
Signing time: Sun 29 Mar 2026 08:00:54 +0000
Manifest this update: Sun 29 Mar 2026 08:00:54 +0000
Manifest next update: Mon 30 Mar 2026 08:00:54 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: meiu38zBpY9BkOfTJKdvMNHYlzzDQRnv8GoO+5qMnTo=)
2: 9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa (hash: 0rqJmTL+IHF4zuPR+5EuCzywtP32Y0FzvoOjmasnRjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:35:a2:9b:71:f7:4b:42:b8:b3:a0:dd:59:98:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Mar 29 08:00:54 2026 GMT
Not After : Mar 30 08:00:54 2026 GMT
Subject: CN=7b8165cbc857548b4fffe513335bcc9cd7a649b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:26:5c:23:0f:85:8d:87:af:f4:e1:b8:e0:
d0:41:37:12:b2:26:9b:9d:a9:0d:71:01:3d:4c:6e:
4e:7c:1c:e9:61:b9:cb:2e:4f:6b:c6:20:97:6f:02:
3a:ba:9f:2a:d8:63:08:c4:6c:81:82:9b:06:4a:5a:
ba:61:ef:ad:b7:b6:06:19:c2:ee:b3:a8:11:3a:50:
90:95:2f:6d:d0:05:70:e2:36:6a:de:b8:43:15:c5:
cc:c9:15:b7:38:05:fc:32:f9:ad:85:0b:ff:2e:f2:
03:53:cf:32:9c:86:25:b9:56:28:1c:e4:4b:2a:68:
9b:f0:26:9a:07:aa:d3:33:9e:3e:ff:3c:af:1d:67:
d5:57:22:19:59:46:46:6f:01:e7:eb:e0:8b:a7:49:
0c:34:11:2d:52:6b:59:35:b7:80:ca:5d:f6:3e:02:
af:d3:3c:40:f9:c4:51:7f:4c:87:36:20:b9:ef:48:
4c:1b:36:1f:d1:14:9e:b6:2b:e2:f6:d8:c3:b1:ba:
06:9f:c6:16:17:14:49:cf:ca:ff:c0:75:6d:2f:dd:
08:4d:61:4a:57:30:4d:6f:90:6c:9d:55:b3:2a:30:
1b:f3:b6:e9:d2:0f:9b:03:34:09:56:ab:0e:d7:6a:
d6:76:d6:03:e0:01:f7:70:10:97:53:ff:0b:33:f1:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:81:65:CB:C8:57:54:8B:4F:FF:E5:13:33:5B:CC:9C:D7:A6:49:B6
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:02:39:28:b8:3f:e2:6b:81:df:b7:01:e4:5e:57:e9:bd:86:
20:27:46:af:35:31:ca:cc:e8:88:56:6f:b5:b6:2f:bb:c3:bc:
ed:64:ae:d5:6a:f0:e7:5e:96:bb:10:b5:a4:19:3c:39:4b:20:
df:73:a1:a8:94:37:07:d1:d0:fe:83:ea:ed:ec:f2:ad:58:a5:
50:ca:4c:f3:7c:42:2f:99:3c:d8:7a:ac:c0:90:e8:cd:5a:a2:
18:d0:a8:91:06:e3:18:73:de:5e:08:0e:d0:24:26:0e:48:5d:
d0:9e:99:6b:1e:8b:ff:5e:ce:ea:b4:66:6d:bf:8e:60:e8:4a:
1f:2c:56:fe:24:58:c2:fc:0f:30:5b:95:c3:05:0c:9e:5e:62:
7a:bc:84:46:ed:c1:38:0a:96:00:e7:84:4d:25:9d:c4:43:1c:
79:9e:eb:76:79:5b:63:38:f1:95:67:0e:75:0b:3e:10:8b:ea:
86:e2:58:f5:01:53:ea:f4:1b:8a:dd:a7:05:db:5c:2a:ee:a0:
57:6f:83:6a:33:02:da:91:e8:ab:5f:84:99:99:f1:98:59:98:
56:1c:43:ca:f0:b5:06:8f:f8:33:d5:31:e3:99:e9:21:93:91:
c2:33:2e:15:c8:dc:5b:73:17:f3:01:47:58:32:2c:76:d2:dd:
a5:4b:e2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:13 2026 by rpki-client