Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: kEMKBAmVzvSq0hl+m9IOBCNgXsnwEtS9JW1o1X4KH9E=
Subject key identifier: F5:62:EE:0C:34:02:F5:47:34:30:73:3A:92:70:D8:09:8D:28:65:60
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 019D38D2D32AD123324EB32869F84789008A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:33 +0000
Manifest this update: Sun 29 Mar 2026 09:00:33 +0000
Manifest next update: Mon 30 Mar 2026 09:00:33 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: gGyeach9JdER4lA6NRn9isdFI7PClpt3uSVFGa6NagU=)
2: NE1cSr4PhSWQqxI3RwadUkiTzr4.roa (hash: gTOFfm6+4dqvFvqDPuHaiv7nUh/TeTbmvELpqBUfVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d3:2a:d1:23:32:4e:b3:28:69:f8:47:89:00:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: Mar 29 09:00:33 2026 GMT
Not After : Mar 30 09:00:33 2026 GMT
Subject: CN=f562ee0c3402f5473430733a9270d8098d286560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f5:c8:9c:96:8f:18:87:93:12:9e:c9:84:d1:
59:8c:ee:63:50:c6:72:96:59:82:09:b6:32:b6:ea:
0d:aa:3d:16:f6:d7:f7:57:56:20:d3:3d:ae:87:d0:
43:21:b6:09:83:ff:b4:1d:49:2c:55:88:9e:a7:44:
5b:7a:d3:3f:df:78:88:eb:5e:50:50:b5:53:36:50:
5e:a1:cd:3a:02:92:ce:51:80:0f:be:15:38:7d:38:
98:70:ac:ec:a8:9a:40:76:99:25:44:7c:5d:7d:03:
25:d4:26:6d:99:cf:1e:c1:ba:c2:0b:1f:a5:02:c8:
97:97:0e:0a:11:b2:40:56:14:80:e7:a5:c2:95:73:
8d:d5:0a:83:dd:9f:d5:60:24:51:12:e0:97:59:59:
83:33:06:98:e1:c1:34:dd:c7:b6:54:c2:38:be:08:
df:2b:bc:14:05:da:2c:4a:5c:55:8b:0c:15:1a:55:
fc:9e:67:58:5a:12:6a:15:32:5a:09:31:48:51:e6:
e3:eb:1f:73:e6:d9:c8:2f:79:50:b0:44:16:3c:3e:
bd:a3:6b:d7:27:ce:d3:5a:f2:17:ac:9c:b6:94:b5:
bc:25:b5:ea:e6:93:ac:7f:89:a4:08:6b:d6:f7:37:
ce:8b:b8:4d:87:d2:c8:34:f5:f4:73:59:41:a2:1e:
be:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:62:EE:0C:34:02:F5:47:34:30:73:3A:92:70:D8:09:8D:28:65:60
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:67:1c:31:13:36:7a:16:79:db:a5:cf:f3:6d:78:24:4f:a6:
a6:56:73:d8:62:1f:e8:2c:89:5d:37:f5:0d:ad:50:c7:d7:8c:
29:3a:de:87:e7:06:8c:1b:e7:c4:6d:39:bb:0d:f3:ff:62:1b:
6d:70:84:5f:c6:24:25:5f:77:c2:07:d3:57:fa:c2:eb:97:22:
c1:f2:8f:54:c8:e1:04:4e:10:0a:c3:46:04:d0:b8:ba:15:0f:
69:40:68:69:b5:fd:f4:46:80:67:b9:bc:48:ba:a4:93:71:92:
11:79:a1:29:dc:eb:d8:66:4e:01:b6:a7:53:09:77:49:86:52:
77:5b:3e:21:49:01:9f:d7:ce:65:14:25:0d:7c:ba:f3:9a:de:
12:a0:15:35:10:15:a2:70:b1:c0:7d:2a:a5:b7:94:0b:d3:67:
16:d8:4e:b9:18:d8:6d:8b:15:5d:e7:e9:40:43:2f:ef:a9:43:
63:fc:f1:69:cc:81:ea:dd:0f:86:71:52:c6:d6:a2:61:0f:7c:
b4:88:4e:f4:5d:8e:91:04:1d:fd:50:1e:4d:bc:b4:f7:bc:c0:
13:3b:06:dc:9f:95:8e:0e:15:03:97:e5:68:1e:15:f1:65:89:
58:d5:1f:a9:28:a6:2d:56:7c:de:8b:3e:c4:6f:ff:bf:6a:f2:
f8:2b:63:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:30 2026 by rpki-client