Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
File: 7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json)
Hash identifier: kpLuXowVFVx8vEG6SMQ7/+9ebG3nR1XYesfHvcbaexE=
Subject key identifier: 10:34:C1:DC:29:17:A3:38:AA:27:DD:BB:AC:0F:0C:1F:17:DA:92:99
Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
Certificate issuer: /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Certificate serial: 019D386563EE2E9607F20A8F74DC7EC18F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
Manifest number: 12B0
Signing time: Sun 29 Mar 2026 07:01:01 +0000
Manifest this update: Sun 29 Mar 2026 07:01:01 +0000
Manifest next update: Mon 30 Mar 2026 07:01:01 +0000
Files and hashes: 1: 3MNxWlvYJ1UEreJxUOEEE9L47Ng.roa (hash: dV3Q++D9g4wj89CuXX4P3NnLKAaay8XuMVHolFZE0pI=)
2: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: qDpPCeXGSgFg3s0z+401cjDCiIVjq5kb1EDfHnsHYHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:63:ee:2e:96:07:f2:0a:8f:74:dc:7e:c1:8f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Validity
Not Before: Mar 29 07:01:01 2026 GMT
Not After : Mar 30 07:01:01 2026 GMT
Subject: CN=1034c1dc2917a338aa27ddbbac0f0c1f17da9299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:5a:30:cb:e1:cc:50:8a:a4:eb:09:6e:28:
ef:1a:ac:34:62:e6:9c:eb:3b:c0:2e:a6:6f:53:c5:
bb:51:27:bb:cb:df:b1:56:e1:68:11:f7:8d:57:1b:
61:46:c3:62:f4:70:9c:84:5f:8a:11:24:d8:67:02:
29:50:5f:0f:6f:aa:58:5b:54:64:57:eb:23:ba:09:
81:d9:3e:ff:bb:79:54:fb:55:cb:e4:23:f3:07:4b:
9d:35:0e:81:ae:1f:2a:2f:82:1a:79:75:f2:15:2d:
1f:18:d3:af:eb:48:db:e6:2d:2c:87:27:58:ef:c5:
b0:0f:da:96:ab:56:8f:0c:d5:90:d4:b2:3c:db:5b:
a4:b3:e9:56:fe:22:57:35:31:00:0c:e4:cc:48:bc:
d8:59:c4:00:05:20:a8:f5:10:71:9d:40:c1:ed:b6:
e1:90:b3:19:dc:1e:4a:18:82:73:4c:be:8e:52:5f:
a2:f9:ea:3a:24:84:f6:8b:05:4d:60:fe:79:23:59:
5d:86:af:ed:c1:61:33:98:9c:69:96:70:f9:f6:47:
dd:06:5a:61:1d:81:61:56:41:30:06:9d:bf:35:3a:
81:63:52:15:0c:ae:b6:7f:22:60:2b:2d:5e:43:65:
54:86:d0:2e:9e:27:2d:b7:d0:67:0d:aa:d6:97:0b:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:34:C1:DC:29:17:A3:38:AA:27:DD:BB:AC:0F:0C:1F:17:DA:92:99
X509v3 Authority Key Identifier:
keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:55:25:a4:2b:cb:90:d2:48:fd:1d:5f:02:8d:ee:0d:0b:f6:
53:94:b7:d1:96:ab:34:f7:bb:6d:46:7a:60:26:23:42:4c:a1:
85:8f:9b:ad:04:1e:e6:21:ff:ac:b4:80:94:42:aa:f6:e4:02:
d2:b8:0c:5a:fa:7e:06:62:d6:f3:4d:4d:18:18:fe:c6:21:1a:
be:ce:b2:6e:3e:e5:a0:5d:e8:5c:b3:a8:67:8b:54:b0:da:8f:
55:33:4f:5f:07:71:67:6a:2d:3e:12:b8:41:15:25:28:44:41:
9b:47:77:77:4d:8e:67:88:42:40:b5:16:d8:2f:a3:98:fd:8c:
63:b4:2c:ce:2d:2b:18:23:9d:97:c8:d8:ca:24:91:b7:a8:5a:
ae:a2:d9:53:e0:d3:8f:94:07:d1:13:e8:b2:e7:3c:fb:04:15:
74:90:fe:ce:af:cd:22:a9:20:d5:d9:30:67:14:d3:46:08:73:
3a:2c:ff:d0:0f:cd:26:be:4d:4e:2a:8d:5d:0f:9c:67:c3:09:
d2:54:73:4b:4a:62:c2:43:c5:74:32:df:5d:d4:e0:c1:c3:4f:
1d:67:6f:9a:ee:ac:a6:4a:3f:a5:23:ba:f5:bc:61:6f:1a:24:
43:2d:64:dc:2e:1e:ea:bc:93:1c:b2:83:b4:1f:68:90:4f:58:
35:f6:83:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:21 2026 by rpki-client