Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
File: 7WUYxCbPxAgvuS7HQNfDx4glVjs.mft (raw, json)
Hash identifier: fbup0L7uvrq5Emb8VrkVWkBIzMkNPkgyUi6AcIz30Qk=
Subject key identifier: 4F:39:58:FF:A8:CF:92:F3:27:AE:98:C0:49:10:47:FE:FC:4D:3F:92
Authority key identifier: ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
Certificate issuer: /CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Certificate serial: 019D389C25E83BF7CD0DA7DAC4B268F5658A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
Manifest number: 0CE3
Signing time: Sun 29 Mar 2026 08:00:50 +0000
Manifest this update: Sun 29 Mar 2026 08:00:50 +0000
Manifest next update: Mon 30 Mar 2026 08:00:50 +0000
Files and hashes: 1: 7WUYxCbPxAgvuS7HQNfDx4glVjs.crl (hash: BOpHEnsGmFANVgOIhfjYsuND7jeSU+cI02Sv73oDBz8=)
2: Q9-NRTuMMnqARHq49_Cuxnzrpl4.roa (hash: NRZTfCUYWGj35ekHkCYEsq0YVn/edvt5CYrvQlwekLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:25:e8:3b:f7:cd:0d:a7:da:c4:b2:68:f5:65:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Validity
Not Before: Mar 29 08:00:50 2026 GMT
Not After : Mar 30 08:00:50 2026 GMT
Subject: CN=4f3958ffa8cf92f327ae98c0491047fefc4d3f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:81:8e:10:d8:83:2b:42:5a:ee:a7:fe:60:
fd:6b:c4:e4:ad:c7:54:be:c0:1f:01:db:ec:8e:5d:
a7:a1:35:17:84:be:e0:c2:60:45:08:54:b5:d0:03:
e2:59:28:d2:5d:87:47:a4:b9:ac:65:bd:5c:27:49:
72:b4:a0:67:d8:b3:31:7c:ff:03:cc:2f:66:55:1a:
d5:d6:25:7c:d4:06:b3:c7:84:0e:04:df:87:92:3b:
fc:02:05:b5:42:70:7e:fe:b7:f2:09:69:c9:20:15:
73:fe:80:49:bf:4f:be:a4:e3:0d:91:0a:cd:e0:ea:
16:26:67:3e:24:4b:8c:3b:d5:36:dd:ba:85:67:49:
61:80:96:38:16:6f:11:98:6a:d2:8e:04:39:bc:2f:
79:e2:9a:c9:7e:66:b0:76:a5:b6:e6:02:0f:e4:37:
a7:45:da:d9:a3:ce:e5:5c:ae:67:b3:f5:27:86:ec:
c1:85:09:14:d9:af:e9:66:2a:63:e8:18:68:d3:c7:
44:77:ad:f0:3c:29:f0:97:8b:c8:c6:7f:3e:e7:33:
fe:fd:00:51:55:af:a8:b4:d1:bc:3e:cb:0c:02:32:
db:e2:59:3d:b5:c4:b5:e7:35:38:25:fa:57:cd:89:
fc:81:9b:40:ec:65:12:cc:fa:06:0f:e2:a2:cf:bb:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:39:58:FF:A8:CF:92:F3:27:AE:98:C0:49:10:47:FE:FC:4D:3F:92
X509v3 Authority Key Identifier:
keyid:ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c0:b1:5d:7c:7c:75:36:c6:84:25:90:a8:f0:38:1f:3d:b7:
6f:10:36:c7:ef:e5:62:e1:77:d4:67:95:3a:90:29:d2:62:c3:
ae:f9:7f:25:3d:52:a1:f4:ac:ff:6d:32:f9:f4:16:93:9d:31:
6d:ff:d8:79:d3:5e:61:82:8e:25:c0:29:de:84:11:f8:95:7e:
15:b1:18:08:23:40:99:34:51:84:f8:5b:83:b5:6e:49:92:37:
14:cf:31:bb:80:df:d5:75:00:9d:b4:b3:47:7d:34:cf:40:6c:
d4:1a:5f:da:74:65:50:7a:56:e8:ce:6c:9d:6a:1c:a7:1a:dd:
40:a7:3e:21:35:13:5e:c4:cb:a1:0d:eb:9d:aa:6c:1e:9e:33:
64:d6:47:79:83:18:a2:af:cf:10:69:76:2a:3d:f7:ad:a7:4b:
3f:eb:5e:e1:d9:d9:b6:c2:a1:75:9e:da:35:16:25:cd:95:d9:
22:dc:f3:73:c0:34:ca:6c:67:6e:f2:8f:e7:d2:b3:fe:b6:20:
3b:39:35:51:c5:aa:2c:2a:6b:6a:b6:5a:77:d2:d3:61:95:dc:
47:5d:b2:5d:63:8d:db:81:b9:e3:a3:51:b5:df:2f:7d:49:15:
9d:35:7e:3d:1e:b5:1e:17:e2:51:e7:d8:8d:b2:92:d2:86:a9:
06:cf:97:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:33 2026 by rpki-client