Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File: 7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier: 12XdyFIw+CY3zdyi4F91iKTAiCB2x5jNebLKHPbYleY=
Subject key identifier: 33:D7:77:EB:30:11:DE:FA:F0:D0:7F:C2:3E:8E:08:F4:74:EA:F9:27
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer: /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial: 019D37526AFDD7DE1A146D93D90064E990D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 02:00:41 +0000
Manifest this update: Sun 29 Mar 2026 02:00:41 +0000
Manifest next update: Mon 30 Mar 2026 02:00:41 +0000
Files and hashes: 1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: 8od/JO7ledQMNY6sAKPbEfXcp51jP6P03J3TbziLNso=)
2: _osGDzZycVvwVO8jk7tST0-kMuc.roa (hash: V5At1uVjWkeBJy6WzVu631/zeJQGqErhpfeeQ5kY2uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:6a:fd:d7:de:1a:14:6d:93:d9:00:64:e9:90:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Validity
Not Before: Mar 29 02:00:41 2026 GMT
Not After : Mar 30 02:00:41 2026 GMT
Subject: CN=33d777eb3011defaf0d07fc23e8e08f474eaf927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7d:f0:3c:e3:0a:28:4a:a2:09:ea:18:3a:b7:
45:66:11:f8:41:86:1b:9f:7a:58:20:61:5b:16:eb:
1b:69:28:2f:b1:73:12:36:28:6d:c7:36:58:8d:1f:
c0:43:17:a2:19:42:b9:e7:6b:47:7f:1b:67:2c:d9:
4b:e5:cf:f4:07:85:8d:8e:a7:61:b2:50:6c:c1:85:
b9:4a:a4:ba:04:59:56:d7:36:5e:15:0f:05:c3:6d:
b9:23:f3:42:2b:72:16:11:2e:0b:78:f1:b9:96:b0:
75:fd:6e:e3:a2:1a:42:da:b9:b8:06:be:e0:15:75:
b7:47:54:b6:64:e3:bd:c8:3b:6d:76:73:18:5b:32:
67:76:8d:eb:6b:55:ad:ed:ad:ce:5d:0d:3d:75:d2:
a0:8d:c1:c7:d8:67:51:99:b4:0a:3f:6e:de:3f:76:
1c:88:e7:17:12:66:61:b8:6d:6f:6e:6a:65:4b:6a:
25:3d:ea:7a:e4:03:5f:34:73:9d:6c:dd:de:1a:d9:
aa:c9:6d:fe:4b:76:3e:37:60:9e:33:9d:25:95:55:
9b:1f:64:e8:13:05:f5:30:80:35:35:6e:03:57:a1:
9e:94:cf:5e:f7:99:73:1a:6a:fd:16:d5:08:85:29:
ac:44:10:e7:db:40:39:aa:29:f5:da:07:eb:80:58:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D7:77:EB:30:11:DE:FA:F0:D0:7F:C2:3E:8E:08:F4:74:EA:F9:27
X509v3 Authority Key Identifier:
keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d4:69:bb:6c:fc:8d:1d:3a:3e:ec:1c:74:67:77:5b:65:f9:
1f:57:f4:2a:12:ae:27:1a:53:8e:8a:49:5e:a2:62:65:2d:86:
ce:95:8a:f1:ab:c9:be:b5:01:59:4f:50:90:d5:57:a2:1b:52:
bf:43:d5:2a:b3:74:13:5f:09:43:98:40:bb:82:f7:a0:84:02:
18:e4:f8:4d:22:4d:ea:40:a4:8d:bc:0b:ca:dd:a1:52:ce:70:
09:9e:5c:7f:a7:27:2b:79:0b:8e:8e:71:2f:1c:30:ce:31:29:
0e:82:a6:11:57:9f:72:37:f5:83:f0:ea:78:59:da:2c:f3:72:
fe:0f:5f:e6:58:7a:4a:12:13:a0:0f:5f:bd:ea:85:87:6e:22:
f5:a9:f7:a7:79:0d:31:8b:1c:28:ad:39:22:b0:ac:3e:92:b7:
66:ed:b5:db:1d:d6:e0:6e:28:4d:ef:d2:d9:c6:26:93:c8:34:
38:d4:59:9e:25:b5:34:1c:06:37:52:68:78:2a:8d:21:d0:fb:
00:97:02:eb:da:e4:fe:f8:57:ea:0c:fe:18:18:9c:0c:5e:e2:
18:3e:07:ad:6f:12:98:63:71:8a:f9:d3:35:50:c9:f7:2e:26:
a8:c4:70:73:9e:e8:07:d2:73:be:67:cd:b2:13:55:3b:48:35:
ae:ff:35:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:15 2026 by rpki-client