Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
File: 7jd-2foR7BmVVVl2LeBHpabrFKg.mft (raw, json)
Hash identifier: HR82SLlHA9BL3Sw1O2dymtJR9fQBJGHoV35y6CGaDbk=
Subject key identifier: C4:69:AF:0D:0D:5A:1C:C0:A1:00:95:98:5C:CE:B6:32:2E:67:60:25
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Certificate issuer: /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial: 019D382E3B89791DE6BA2AF70007210968EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
Manifest number: 0E28
Signing time: Sun 29 Mar 2026 06:00:46 +0000
Manifest this update: Sun 29 Mar 2026 06:00:46 +0000
Manifest next update: Mon 30 Mar 2026 06:00:46 +0000
Files and hashes: 1: 7jd-2foR7BmVVVl2LeBHpabrFKg.crl (hash: ebXxVJAzHNvFy0vdVg5Lzt9YWu4gyFDeJ6g41lJMJvQ=)
2: j6vNoMCJY2rJNTcFiFrK6BxceW0.roa (hash: Qbby+Zxos/Xwy+CO76y4SUXqNg4YubZrm7ece+VByCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3b:89:79:1d:e6:ba:2a:f7:00:07:21:09:68:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Validity
Not Before: Mar 29 06:00:46 2026 GMT
Not After : Mar 30 06:00:46 2026 GMT
Subject: CN=c469af0d0d5a1cc0a10095985cceb6322e676025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:a4:cd:12:63:e1:f8:42:d4:36:51:21:52:
28:5b:10:7b:3a:3c:9d:02:f1:47:78:ad:84:ac:a6:
9a:4f:60:ce:03:cc:5c:b6:7f:27:33:b9:c9:61:9a:
a7:18:21:d4:6a:87:ec:c8:28:cc:c6:5a:a0:0f:a4:
11:df:6d:ff:3a:4e:af:46:b1:63:74:22:6e:3c:e6:
1c:bf:34:5f:75:ab:3e:91:b6:20:34:02:21:fd:5a:
55:a7:ea:50:34:e0:ed:bc:ec:a8:fc:b6:89:34:7e:
c7:cf:f8:04:40:be:a2:4c:2b:82:2d:96:2d:0f:c2:
ad:61:c7:8b:ec:0a:33:56:a9:7d:6c:a9:61:5d:c4:
61:d5:32:8a:dd:90:78:ec:df:00:ea:a1:9a:c6:8c:
21:19:65:cd:12:af:4b:fb:51:c2:93:4d:23:1b:89:
ae:89:43:79:e7:54:2b:58:a8:08:75:c9:c8:49:69:
75:9f:8a:d5:ed:08:16:93:d3:6f:17:3e:23:38:c7:
3d:77:0c:9e:b3:df:a1:de:d3:57:fe:ac:75:9a:c5:
d1:33:39:64:e5:85:f4:c4:41:6a:b9:30:42:a5:46:
99:46:2b:a0:f3:df:b6:dc:6c:0c:62:03:76:66:bd:
40:b0:10:2b:dc:3b:6f:d0:7d:a0:cc:8b:ed:62:07:
15:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:69:AF:0D:0D:5A:1C:C0:A1:00:95:98:5C:CE:B6:32:2E:67:60:25
X509v3 Authority Key Identifier:
keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:94:31:be:7d:e3:95:38:fb:70:ec:f1:98:53:b7:52:16:30:
4d:bb:5a:12:bf:86:84:e0:77:75:bf:4c:43:41:04:7b:94:b6:
04:17:19:23:3d:43:f4:8e:1a:87:6b:72:4b:ad:2a:28:ad:be:
65:de:6a:1b:79:57:4a:47:1f:86:78:2b:60:44:64:f3:6d:fe:
fc:e5:68:5c:6a:e9:ea:16:55:16:eb:a7:72:ab:88:86:ac:27:
fa:ab:c5:35:24:8a:57:32:bf:c3:16:47:3f:69:6b:3e:49:ab:
dc:fa:47:8b:a7:1b:d4:f6:36:ad:07:2b:61:1e:24:11:75:da:
95:35:84:f5:5f:ff:09:2e:0a:60:8f:ef:72:71:ab:d2:97:91:
50:d6:5b:24:9d:9c:67:9a:2b:d8:0e:1f:72:15:3c:b0:e5:5d:
bb:74:1a:d3:ec:f2:8a:74:9d:4e:8a:cb:6d:6b:84:5c:a2:a8:
9b:3b:b8:87:88:ec:2d:c3:87:79:11:d5:85:40:0c:c5:b6:bd:
44:ee:8b:78:e1:0b:9a:e5:a6:7c:63:f3:3a:d6:5f:d4:b6:a1:
d8:c0:63:36:b4:c6:1d:aa:7c:ad:c9:14:6c:b6:cc:c0:27:42:
01:f1:3a:ef:00:fd:25:d9:71:0b:ed:64:ce:65:52:b1:7d:30:
ea:51:8d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:51 2026 by rpki-client