Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
File: 7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json)
Hash identifier: BOI098u8M27aplQZXmooSOncFqk/gVKfa/DvFa09hik=
Subject key identifier: 43:4B:FA:C9:A9:25:20:30:3A:86:C3:6C:F6:5A:50:4A:07:49:2E:AB
Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
Certificate issuer: /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Certificate serial: 019D36E531C942584E7803535F1906A28D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 00:01:23 +0000
Manifest this update: Sun 29 Mar 2026 00:01:23 +0000
Manifest next update: Mon 30 Mar 2026 00:01:23 +0000
Files and hashes: 1: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: FhUsp0qHmwFuzkScFd8MSSrA/TNmKXdlf61XhzM6ZjI=)
2: zlNsdLQAtO6TKIpveiYDahXGOtc.roa (hash: zWs8jQOETQ5X0XyX4yP+smjLWA31kMqZBSgEABnieXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:31:c9:42:58:4e:78:03:53:5f:19:06:a2:8d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Validity
Not Before: Mar 29 00:01:23 2026 GMT
Not After : Mar 30 00:01:23 2026 GMT
Subject: CN=434bfac9a92520303a86c36cf65a504a07492eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:79:b2:6a:68:08:4a:ed:54:0a:6e:d8:91:
e4:fc:76:94:a5:d6:03:fa:07:e0:26:8f:76:e3:da:
65:c3:5f:6b:99:7a:49:fd:3e:de:3c:fc:34:cd:89:
5e:ec:b8:d3:05:e7:34:14:7d:74:af:78:c6:63:cd:
ea:7a:e8:49:ce:ac:da:c6:56:90:e8:e9:98:44:62:
b6:fa:e5:85:0c:54:0d:ca:78:10:88:3d:b7:8d:7f:
b0:52:ec:67:e8:30:7e:1d:f7:1b:24:dd:6f:05:b5:
1f:9e:4f:ff:93:19:48:ef:79:4c:83:4f:c8:2a:79:
6a:3d:43:30:b5:10:7d:91:7d:2e:01:69:f1:41:55:
39:9d:51:36:c0:fa:4d:01:78:49:0f:7c:8e:09:bb:
5c:a5:d3:52:d0:85:c3:cd:a7:3c:88:27:55:5e:02:
d1:03:a7:bf:57:21:ca:ec:fd:e7:f1:30:3e:a0:84:
10:b4:b0:18:59:c1:e2:99:83:0d:9b:69:6b:1f:fc:
ab:97:9c:93:7d:51:c2:c1:15:f3:61:9c:a4:75:f7:
3a:33:4a:95:f7:e2:19:64:20:3a:8c:4e:46:15:7e:
3e:b0:e5:ac:65:4a:07:08:44:e1:86:6f:f0:70:b7:
f6:09:34:0a:96:66:0d:ff:6b:56:be:de:30:de:b3:
b5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4B:FA:C9:A9:25:20:30:3A:86:C3:6C:F6:5A:50:4A:07:49:2E:AB
X509v3 Authority Key Identifier:
keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:37:a0:31:b9:8c:46:55:21:df:ae:83:f3:74:86:43:23:c7:
85:7d:c7:52:19:7f:18:ca:4c:6e:0f:eb:b9:ca:f6:64:d7:08:
d9:5e:73:f6:5f:e3:1b:fa:db:e9:05:1f:5b:97:05:9b:30:28:
4e:8e:37:77:ab:4c:b0:c6:e4:39:35:5f:93:a8:71:4f:22:b9:
7f:86:cf:ae:0a:c8:1e:14:3e:d6:ba:b9:db:b4:e5:57:9f:6f:
dd:26:73:25:05:02:57:57:78:55:c2:47:b8:d1:94:bb:68:36:
a7:36:e2:44:60:8c:7d:6b:f2:4e:35:5e:e5:3a:a7:3e:9d:59:
32:1d:c2:56:ec:f2:93:75:4b:33:73:31:0c:d2:2d:4c:8d:77:
90:2f:68:fe:0b:d2:98:52:12:b1:12:d3:a6:52:32:e4:d3:d1:
9b:0b:cf:4e:dc:bf:4c:fc:f9:4f:20:5f:9d:1f:ae:6c:aa:86:
e6:9b:0a:77:df:bc:24:3e:1d:e6:1b:f6:04:23:fa:1b:77:77:
d7:86:f8:cc:53:e2:71:52:05:ed:82:0e:1c:7e:e6:0e:09:6e:
2f:ab:75:6f:d9:7c:6e:48:00:56:47:0c:06:04:f4:84:2f:ba:
74:3b:4c:d5:76:25:53:7f:a0:9d:6a:6c:31:39:f9:4c:e4:e8:
8d:e5:28:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:18:30 2026 by rpki-client