Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File: 7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier: Q/4W8wjCuzyBKs4wn+k+ipzvWDzHDDEx2NDhOBI5zd4=
Subject key identifier: F3:A4:CA:C0:F2:2C:C8:AD:8A:3C:C8:10:DC:CB:6E:D6:F2:AC:89:74
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer: /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial: 019D38660DD79D8BA05192D57AC2D5D38DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number: 1257
Signing time: Sun 29 Mar 2026 07:01:45 +0000
Manifest this update: Sun 29 Mar 2026 07:01:45 +0000
Manifest next update: Mon 30 Mar 2026 07:01:45 +0000
Files and hashes: 1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: SUHTL0/PgOnqFWclc+4B4MnRTFwfauKP3wvXbiChxiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0d:d7:9d:8b:a0:51:92:d5:7a:c2:d5:d3:8d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Validity
Not Before: Mar 29 07:01:45 2026 GMT
Not After : Mar 30 07:01:45 2026 GMT
Subject: CN=f3a4cac0f22cc8ad8a3cc810dccb6ed6f2ac8974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:05:8e:e0:e0:70:36:5a:77:b0:ed:80:88:
70:1c:32:bc:88:fb:9f:af:17:09:94:55:14:b3:07:
b1:13:d6:49:70:4c:21:38:b1:f5:12:8d:2d:28:5c:
c1:f2:47:1d:03:9a:94:32:19:80:42:05:c2:e7:b2:
8c:57:6b:18:c9:f9:40:c8:4a:2e:9d:db:3a:13:50:
b5:c7:8b:21:9f:15:0f:f6:f5:cf:34:aa:67:f9:7c:
6c:2a:32:b4:60:5d:e2:b6:39:d1:ab:73:71:90:f8:
a9:bc:ad:e5:b2:e0:e9:0a:1c:51:84:50:e8:e3:37:
dd:b5:c7:ff:09:c6:e9:fd:5a:da:da:fd:a3:e5:ed:
6a:27:f3:17:c4:5a:86:f0:ca:18:f2:cb:d6:b6:16:
fc:35:89:48:24:92:ce:30:6c:b6:fa:4a:e3:4b:f4:
d7:23:c7:fc:e7:9f:9a:82:2e:b9:23:4f:8e:4b:05:
2c:4e:52:aa:51:a2:df:87:7e:2d:9d:bc:63:7b:e5:
28:5c:00:57:7e:cf:bd:65:e1:47:9c:21:57:91:99:
38:1e:69:81:7e:c7:12:94:3c:62:75:24:1c:98:3c:
b4:aa:81:a4:93:a3:b3:14:c0:07:a5:de:76:e5:d7:
38:96:54:2f:4f:27:14:bf:77:c6:87:83:0d:11:28:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A4:CA:C0:F2:2C:C8:AD:8A:3C:C8:10:DC:CB:6E:D6:F2:AC:89:74
X509v3 Authority Key Identifier:
keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:41:cc:7a:e1:38:4f:63:ab:12:c1:64:3a:a5:54:8b:f6:66:
59:40:c4:77:15:9d:0c:dc:ac:48:41:b2:d6:16:5f:a7:c6:ba:
52:ee:29:c1:ba:92:6b:e7:f7:c2:c6:07:a6:4d:99:a4:1c:ee:
a9:06:ad:75:2f:4b:59:c1:8a:79:60:61:36:36:c0:ec:5c:ff:
41:b6:51:01:17:04:39:41:4b:6d:16:b8:bb:8b:83:7c:23:49:
fd:00:0f:21:c3:c8:34:3e:55:be:6e:20:6f:0a:da:f8:60:e3:
33:46:0f:0a:b0:ed:31:62:f1:8e:93:0a:fe:1c:19:a4:22:ae:
d3:22:a1:f0:41:37:fc:42:21:47:b0:64:51:ba:1c:0a:d2:92:
b3:30:5f:24:d7:c8:d1:50:7b:ad:0b:65:50:0b:80:a3:4e:bb:
b8:9b:2f:34:81:93:7f:b8:0f:4d:51:32:35:05:ef:0a:e9:6e:
8b:b3:f1:22:3b:77:af:e3:c1:e6:f6:19:da:6e:8f:8f:e9:97:
59:91:7d:15:f1:67:42:d1:72:d3:91:1c:4e:2d:e2:bf:f2:10:
bc:34:29:f0:a0:5b:4f:78:c9:41:f8:4a:49:b2:5d:39:40:6e:
db:75:67:95:f1:c5:43:1d:ff:79:ee:de:0a:e7:a6:15:2f:d3:
90:d0:0d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:33 2026 by rpki-client