Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
File: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft (raw, json)
Hash identifier: kDzhwF2nMpFSYEA2b5BSkTdKxAjdTg5QaHM6rahzOU8=
Subject key identifier: 99:E9:F6:FF:F3:54:3B:AB:AC:4B:DB:AD:6C:54:AD:51:EE:EE:FA:4D
Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Certificate serial: 019D389C5D4FD7E1D3009B84B8251F768B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
Manifest number: 07EC
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl (hash: AKBOV+GYMs6aL3gLzaQLkvF/uXwcbF9CLI74wqHXcq8=)
2: s7-y41zPRmkHcrILtIvpGUfe7SI.roa (hash: k/m4SqHR3oYDvv5JTtyJN297BXfGfqcf9sOF+T2TJHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5d:4f:d7:e1:d3:00:9b:84:b8:25:1f:76:8b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=99e9f6fff3543babac4bdbad6c54ad51eeeefa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:87:7c:f0:9f:2a:67:a9:b1:b9:b7:67:b0:
43:9f:91:5a:b0:47:e6:21:80:e1:be:99:6c:bc:ab:
f9:7e:c8:a9:4d:0b:8a:e0:8b:98:4c:9e:4c:7f:f4:
4c:13:a2:5f:bf:84:12:2f:ff:a0:e0:cf:52:f3:57:
78:9c:10:ce:0a:a9:ad:c1:10:85:2f:9e:c0:af:13:
91:73:dc:e8:21:d7:3d:5a:7b:f7:4d:d3:c3:55:7e:
98:2b:3a:02:f9:d0:84:9c:e4:d7:c3:fe:d8:9b:2a:
b3:6c:c9:8c:1b:6c:aa:ec:e6:e5:3b:08:38:4f:bd:
39:d3:09:c8:1b:1b:62:d3:04:da:b2:5e:5f:f4:e5:
e9:c1:5e:81:7b:f1:5a:39:ac:8f:58:11:23:51:d3:
15:c1:3a:3f:0d:e1:59:d1:73:53:6c:04:d2:1f:18:
df:f2:c8:cf:a0:3d:51:07:60:6b:67:40:d4:10:75:
ec:74:b4:3e:c1:3a:7a:2e:3e:7d:b2:9e:29:3b:b5:
df:b7:c0:c5:03:83:81:d9:c2:68:9d:ac:ec:90:f7:
7f:2d:fb:44:90:09:f2:7f:6e:87:13:4e:f2:5d:33:
d4:8b:93:24:8d:8a:fa:bd:b9:a3:ee:55:41:41:ad:
06:f0:18:c3:3f:2a:aa:7c:11:f4:39:12:b2:96:67:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E9:F6:FF:F3:54:3B:AB:AC:4B:DB:AD:6C:54:AD:51:EE:EE:FA:4D
X509v3 Authority Key Identifier:
keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:12:01:94:f2:9f:01:08:2d:33:13:28:35:c0:a8:74:e7:6f:
b9:8a:82:36:6e:97:b3:01:9c:b0:ee:53:14:14:73:53:33:17:
ae:e5:02:12:7e:ab:69:8d:cc:f7:9a:dc:5f:e7:5a:b8:ca:a5:
42:71:9c:ab:ee:d2:a9:3f:31:a4:1f:70:82:c4:51:75:7c:8e:
94:e3:68:94:b3:83:4b:a9:af:3c:f3:ce:2f:89:a4:5e:98:2c:
fd:40:e8:51:72:b4:35:de:9a:0c:92:13:d0:4a:c5:1f:67:1c:
a7:97:db:6f:80:22:96:f5:1d:d3:46:d2:e8:f2:50:4d:d2:8f:
32:e6:73:fe:e2:99:ce:f6:88:d8:85:85:36:af:57:b9:79:96:
00:dc:14:00:03:62:36:bc:f5:06:4d:6a:da:9a:57:e9:14:99:
76:38:b8:e2:93:a8:d8:1b:83:12:56:9b:30:c2:2f:28:c7:ed:
7d:1e:87:5e:6b:2e:b7:01:6a:ae:d2:5a:64:36:e7:27:53:0b:
2f:7d:39:f9:e6:14:08:f2:62:cb:b7:07:98:07:76:0c:8c:f1:
ec:ce:08:4b:f5:00:0b:1b:64:a9:0f:7f:65:e8:9f:74:a4:ec:
87:f5:c0:da:e2:46:ec:a6:4f:ce:d4:59:ba:bd:4d:f7:9f:e2:
dc:38:49:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:46 2026 by rpki-client