Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: 3scxD2Iq/9MLx9E/Xd0uUFmbci29kWloVestBsyMJKo=
Subject key identifier: FA:18:5D:B6:C5:65:53:BF:13:36:44:3A:E7:38:A7:B8:94:FD:06:F9
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 019CAC4722400339A9CD3C0EC814F60C9C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 16FD
Signing time: Mon 02 Mar 2026 02:01:08 +0000
Manifest this update: Mon 02 Mar 2026 02:01:08 +0000
Manifest next update: Tue 03 Mar 2026 02:01:08 +0000
Files and hashes: 1: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: 9iCEeRyLDD2cU9T2t6Y/wDGLL1TJzdE6+OZ6cnn/4V8=)
2: m5yvHicFnXm_Esifvf9nJ43HYjM.roa (hash: 2UG9meAu50+1K4RYnFNAIuouwlkL5D4Ox6KRSauQKrc=)
3: rI-1eY7TtxFeY70hEXPRG9r4SUU.roa (hash: 3yzUSLFgFbapDsLKTnHWd+eZDAnjuQ4IsvzD3dpVDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:22:40:03:39:a9:cd:3c:0e:c8:14:f6:0c:9c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Mar 2 02:01:08 2026 GMT
Not After : Mar 3 02:01:08 2026 GMT
Subject: CN=fa185db6c56553bf1336443ae738a7b894fd06f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:3d:15:aa:74:c8:e9:ff:41:75:5b:ce:e7:
db:81:9c:3d:9f:bc:a1:cc:64:e0:43:fb:65:68:4f:
c1:d8:48:db:1e:4a:7d:b4:40:67:ec:4d:16:61:35:
da:60:b0:fa:c0:1b:af:b5:fc:68:f9:2d:4d:cd:1d:
20:bd:31:55:17:68:88:ef:39:bc:da:95:b4:b0:df:
48:1c:33:98:89:ca:b0:5b:a2:5b:a4:3a:68:54:76:
1c:45:60:bf:e2:fc:cf:04:c6:86:4f:5f:16:ef:63:
5f:df:08:da:fc:1e:bb:38:65:c0:7f:02:2f:80:f7:
f8:45:13:ce:03:01:69:48:3a:0f:ee:eb:62:64:d2:
e5:cc:9e:11:4d:09:c3:63:e2:c2:bd:41:79:27:33:
d2:0a:36:27:ae:49:6a:4e:2f:af:2e:52:43:15:4e:
60:dc:b6:3a:8a:a7:ec:27:50:a2:97:dc:1e:dc:63:
8e:33:8e:76:78:0b:8a:e4:26:a4:73:cc:5c:b1:56:
4b:9d:3a:34:77:9b:34:70:a2:2e:69:c5:6f:c4:27:
93:b9:89:17:cb:2d:80:80:76:aa:82:1b:2b:50:b1:
9f:1e:4b:bf:71:52:b0:c7:b5:67:dc:91:94:01:7c:
e0:6c:78:c2:51:4d:9d:f5:3e:87:53:78:3c:ca:5a:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:18:5D:B6:C5:65:53:BF:13:36:44:3A:E7:38:A7:B8:94:FD:06:F9
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:98:a8:ee:5f:c6:eb:1c:38:17:af:1b:e0:45:d8:1c:57:ae:
42:3a:7e:f4:68:a2:6e:f3:1a:71:3b:bb:17:15:72:03:5d:76:
a6:30:3b:ab:3f:83:c7:5e:6f:a8:6e:4a:ba:2a:cb:8b:e0:88:
03:7f:02:e5:c6:25:8d:67:d8:b7:f1:eb:3a:88:f5:86:ad:a5:
dc:18:e1:ca:fd:59:07:e5:d7:02:75:1f:d7:2e:da:e0:33:66:
09:7f:e3:fc:f2:f6:18:fb:59:24:e6:8e:2d:7d:65:ed:39:92:
e5:19:28:28:18:0c:12:71:1c:67:27:cd:9b:5b:22:41:d9:2d:
fe:a8:63:31:b4:3f:e4:8a:80:f1:6e:cd:84:f4:f2:be:2f:00:
b3:3a:a5:f6:31:83:6d:d8:bf:b7:44:54:fc:33:ac:f8:cd:5d:
9b:37:dd:90:b8:57:a1:09:8d:c6:44:a6:05:59:3e:a6:35:6b:
3f:03:f8:60:f7:e1:31:46:f9:e4:9d:e2:e3:89:bd:bc:98:30:
71:99:75:84:9b:3a:5a:4b:d4:b9:71:3e:a1:1f:60:69:e2:6a:
b9:4c:0d:75:88:93:38:d2:7d:e3:19:8d:42:ae:72:32:ce:3a:
60:3f:ad:7c:ba:30:e8:e6:0c:f0:d0:e6:86:a3:47:fc:97:d2:
3b:83:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:25 2026 by rpki-client