Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
File: IS7ROxq32gkK7kL2rt3f27FWpfg.mft (raw, json)
Hash identifier: vnWGrgctda4rlCvAR3t10LgFGsfXZnHQULd/LAiMZcA=
Subject key identifier: 7F:20:B0:2D:69:41:9C:74:51:6C:B9:1D:16:EB:EF:33:37:1C:61:95
Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
Certificate issuer: /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Certificate serial: 019D37F6FD1E913C80C63BC9CBFC7FD8B3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
Manifest number: 10A7
Signing time: Sun 29 Mar 2026 05:00:26 +0000
Manifest this update: Sun 29 Mar 2026 05:00:26 +0000
Manifest next update: Mon 30 Mar 2026 05:00:26 +0000
Files and hashes: 1: IS7ROxq32gkK7kL2rt3f27FWpfg.crl (hash: kdu4S46pJm/DioSbJuwYRQfb58pOeSYeGiP5ALy4r4c=)
2: VI1Pdat37Jv7tPxYGIsry5LOD7w.roa (hash: ZvnfeGRZ4e6seCSPIniU9Klu2LcfEkoX8a9oOIfdFRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fd:1e:91:3c:80:c6:3b:c9:cb:fc:7f:d8:b3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Validity
Not Before: Mar 29 05:00:26 2026 GMT
Not After : Mar 30 05:00:26 2026 GMT
Subject: CN=7f20b02d69419c74516cb91d16ebef33371c6195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:01:94:fb:ae:d0:e1:8e:7b:7f:94:5f:fa:fe:
5e:b6:be:99:b9:7f:7b:4e:44:0e:02:70:53:b2:d6:
89:25:da:f7:e2:04:88:fc:4f:ba:3b:02:b7:73:2a:
e6:45:11:55:5d:bd:70:0c:0c:a7:b3:6a:ed:33:96:
6a:a9:9f:6b:8b:c8:ba:47:d6:9d:aa:fa:8a:5d:22:
35:b1:0a:b8:a0:d0:47:43:de:a7:4e:c0:90:0d:09:
87:27:dc:6b:84:56:4f:2c:d4:d0:7e:cf:86:bf:24:
2e:69:53:a0:6d:8c:a9:7b:34:2a:38:90:a3:99:e6:
f9:02:10:e6:61:5b:10:f8:e4:ce:bd:f9:1a:f6:7f:
e2:e1:aa:13:1e:12:e6:84:b9:77:4f:f6:55:7b:97:
86:2f:47:5c:86:e5:eb:ca:74:f1:45:df:c1:43:15:
3a:0f:10:09:b3:09:38:9e:2f:7e:39:19:b0:a2:b6:
0c:79:60:13:ad:8b:89:15:26:01:2b:3c:f0:ec:92:
54:8f:8c:5b:3b:76:10:4a:51:5f:10:7c:ab:81:40:
62:10:80:d8:42:6e:a0:cb:39:e0:62:c5:62:28:57:
e9:ca:6c:ef:16:b9:06:2e:0f:e2:e4:3f:65:cc:b2:
d2:85:dd:ca:2f:25:09:a2:7e:bc:0f:f6:71:cb:d1:
18:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:20:B0:2D:69:41:9C:74:51:6C:B9:1D:16:EB:EF:33:37:1C:61:95
X509v3 Authority Key Identifier:
keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:eb:e3:ac:a9:a8:19:90:36:f0:11:94:ab:02:a3:d3:72:d4:
d0:f0:97:d2:00:1c:0a:f4:3a:46:c5:20:6c:dc:4c:39:31:92:
09:eb:df:55:c7:0f:7f:86:e2:e6:47:e9:56:c5:80:80:7c:80:
ee:72:2f:64:cb:e7:e8:53:74:d0:04:c0:df:d0:8e:db:b8:ed:
ac:57:b4:6a:3d:3c:07:fb:83:3d:28:4b:d1:ff:d8:6c:19:e7:
31:c7:fc:fb:58:8b:d1:a9:b1:73:58:35:eb:fe:d8:5f:b7:1d:
3d:96:c5:51:1f:7b:e3:33:14:05:ca:ce:ad:97:58:d9:ed:03:
ed:d1:e0:b3:bc:a2:16:f9:fa:a8:cc:ac:23:9c:d1:13:99:cd:
eb:24:98:f7:c5:10:f4:85:73:5d:87:73:b6:c9:af:44:a2:b1:
ff:ed:1e:eb:d0:60:03:c3:6c:d7:fb:fa:ed:4d:9e:62:57:1f:
64:a3:c8:a3:4c:c6:6a:15:a6:e6:7f:a8:ad:23:dc:41:d7:ee:
bc:84:1d:01:84:2e:c7:64:b3:c5:79:86:dd:6d:ee:33:b8:d8:
bd:2d:59:71:e0:d0:71:e6:94:7c:a7:8e:47:9d:62:b7:73:a8:
1c:bb:ef:d0:0c:b2:70:4b:3e:e6:cc:44:fe:c6:ba:19:1c:ad:
9b:db:94:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:21 2026 by rpki-client