Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: o4J9Zk5Hs97qks3JGsMXVuccLVVyKbqhOavtieBJqWM=
Subject key identifier: 29:BD:C2:65:C4:FE:59:B7:42:25:FC:11:62:69:09:FB:20:19:1D:0F
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 019D39E59D817B5E6F509693CB3386DA78A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 1065
Signing time: Sun 29 Mar 2026 14:00:42 +0000
Manifest this update: Sun 29 Mar 2026 14:00:42 +0000
Manifest next update: Mon 30 Mar 2026 14:00:42 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: LmHWFDcr63PqgZW4j9lBDNiSeAgQTOoOjXc/p2dTk/c=)
2: rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa (hash: reSEL9M69wAKbL5gRtqeNyqy/DyxKPTT8rPI7JNy6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:9d:81:7b:5e:6f:50:96:93:cb:33:86:da:78:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Mar 29 14:00:42 2026 GMT
Not After : Mar 30 14:00:42 2026 GMT
Subject: CN=29bdc265c4fe59b74225fc11626909fb20191d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:15:7e:b6:49:96:b3:b6:41:49:b9:a8:64:eb:
d9:27:f7:1c:38:15:73:f4:49:44:50:86:4a:49:6a:
57:22:e1:b9:1a:6f:69:1f:4d:98:26:ce:2b:7a:8d:
79:b5:6a:8a:2a:86:ec:e1:47:9d:a6:35:bd:96:8c:
6e:0f:c4:5b:1f:28:fc:eb:1d:ea:1f:81:67:98:6d:
51:54:c8:d7:3c:3c:ab:f9:8d:d6:bd:3a:d8:c6:d9:
d5:d4:48:cf:32:84:f0:4b:c0:a4:9e:f6:70:fe:58:
bb:48:17:9c:33:3e:2f:2c:15:08:a7:14:0f:7e:ea:
9d:a6:8f:cf:81:9a:95:5b:32:f7:b7:22:8c:69:75:
d4:5a:b1:f0:34:ef:90:9b:57:f0:41:4c:da:9b:c5:
12:20:97:17:c2:a6:66:21:78:18:99:75:63:b6:bd:
7f:a4:87:d3:ec:66:6e:76:c5:b4:52:72:05:a3:41:
80:56:30:7d:d0:f7:2b:26:a8:de:67:f3:35:07:c5:
d1:8e:e9:51:82:54:2d:6a:83:5a:3b:ea:6c:06:71:
5e:e9:48:61:65:33:51:32:01:76:c8:d6:e9:08:93:
59:60:57:f1:a7:98:3c:2a:f9:18:4f:6f:c0:7b:ad:
34:01:83:aa:4d:ba:1d:cd:2e:ca:a6:5b:1f:60:23:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BD:C2:65:C4:FE:59:B7:42:25:FC:11:62:69:09:FB:20:19:1D:0F
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d7:04:5a:9a:c1:f3:99:33:69:16:83:a7:cf:61:27:c2:4b:
7c:09:02:2d:7d:58:6d:e6:0f:ac:81:45:cf:4c:7f:5d:1b:26:
f5:2f:02:c5:01:64:cd:a3:dc:1b:0d:9a:45:a2:be:9d:72:ad:
db:d1:16:9b:94:73:7a:45:d3:c0:83:d9:03:84:81:36:94:14:
49:9b:c7:01:b0:7c:20:c2:cf:98:24:e0:15:45:9a:81:bb:f9:
18:52:fa:69:74:3f:a0:5e:eb:c4:de:26:9d:a4:0c:9f:0f:8a:
cc:bf:5f:19:41:65:12:24:05:a0:66:c2:25:5a:0a:7d:d2:fe:
af:5d:8d:c9:29:5c:5b:8a:d3:bb:86:ba:cc:fb:1e:f6:ef:73:
9e:65:ee:3a:a1:e1:3a:0c:e4:0d:e5:ca:16:50:44:25:5d:f2:
91:3e:e3:df:12:63:b2:48:9e:c4:39:42:41:cc:8c:00:85:1f:
1e:b0:fc:18:46:08:ae:9a:a0:25:40:c9:c9:61:12:78:37:db:
ba:89:61:cb:24:53:22:03:d9:cc:a8:f2:50:6e:08:f2:ac:87:
dc:f1:99:78:f3:0a:6b:03:4a:f7:24:fd:c3:67:b3:68:72:17:
a4:d4:87:2a:61:1e:71:39:b7:82:a2:11:c6:c6:c4:64:03:57:
f7:5c:14:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:17 2026 by rpki-client