Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier: J14Tuij2RDZsf7ZlLf7TEd3BLrdtf3ZbmBWeexm1hfY=
Subject key identifier: 3B:E7:DE:86:C5:58:04:2C:93:13:77:92:97:24:8F:FA:37:E7:72:9C
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 019CABDA07EE5EA3E058606E35CD1D4A2BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:58 +0000
Manifest this update: Mon 02 Mar 2026 00:01:58 +0000
Manifest next update: Tue 03 Mar 2026 00:01:58 +0000
Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: 18QUk8dmAKAq3l0wrIXTt3N8dz4TCkZNdddNkny6HKk=)
2: Uzq6jnjiBmJhQ77sdYIGU3rtoW8.roa (hash: TaYrbh565HuhRP+MsEApRFlphctYPIuvYOeurCpD+fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:07:ee:5e:a3:e0:58:60:6e:35:cd:1d:4a:2b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: Mar 2 00:01:58 2026 GMT
Not After : Mar 3 00:01:58 2026 GMT
Subject: CN=3be7de86c558042c9313779297248ffa37e7729c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8d:20:a8:12:58:8a:49:c6:c3:0c:ab:1d:1d:
2c:bf:f8:f1:8b:74:3d:f9:10:ca:f6:d1:0a:c8:7a:
c0:e4:41:a5:48:55:52:1b:15:63:3f:35:0a:21:3b:
85:00:27:b8:1a:12:1c:20:47:e1:44:44:8b:5f:22:
81:f7:43:56:03:5d:44:9c:b0:fc:e5:bf:26:a0:d6:
92:df:85:4c:ff:c9:6d:d6:be:a4:60:38:8c:91:22:
41:a8:4f:01:5c:39:5e:4e:a8:c2:5c:2a:8a:0c:5d:
37:b5:a9:d7:2b:66:9f:bc:be:28:50:d3:b3:65:30:
9a:ad:db:3f:c4:a3:f6:7d:d0:f1:37:da:84:70:8b:
65:e8:65:9c:86:ed:c3:2e:af:e2:62:4c:de:bd:f0:
fb:f5:a5:91:24:49:9b:f1:0b:b4:95:81:40:0d:28:
77:b7:99:c6:21:b8:09:a8:16:74:32:ac:13:28:78:
ed:6b:3b:4e:d0:43:63:9b:77:4a:04:3e:6c:38:b7:
ac:7d:22:90:0a:5e:4d:05:48:3c:da:7b:a9:65:32:
5a:3a:6a:1f:49:86:39:21:e4:77:84:8f:4b:a4:ad:
f7:d0:06:61:1e:8a:16:a9:d8:ea:e0:a3:79:ae:bf:
d0:72:b2:d4:c9:9b:3c:62:66:52:07:af:cc:50:25:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E7:DE:86:C5:58:04:2C:93:13:77:92:97:24:8F:FA:37:E7:72:9C
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0f:b6:ff:69:74:e4:5e:70:79:89:e3:11:3c:1c:e9:32:12:
dd:9f:b1:2c:be:20:39:23:a7:62:a0:8e:37:31:da:e6:93:90:
b9:d6:ca:54:12:fc:4d:db:92:74:71:d0:7a:e9:17:0f:96:b2:
7b:99:2a:15:6b:fa:3b:46:b1:8c:51:14:2e:fb:09:5d:53:36:
a6:df:12:5c:da:48:77:10:08:e3:a1:b7:52:a2:34:14:c2:ca:
bc:ad:15:4d:9e:fc:10:c8:35:ea:64:3f:95:c3:7c:c0:0e:96:
79:ee:20:c8:5c:de:32:36:8e:7c:a3:da:6b:d5:c0:f2:23:fb:
66:89:18:57:49:c9:81:96:8a:e7:e3:90:ac:8a:83:51:33:d5:
c5:ac:95:f1:9c:ee:44:ec:06:7a:da:8f:18:35:a3:b2:ba:9e:
b3:88:34:71:9a:8a:2e:37:3d:89:b3:bd:db:10:0e:2a:30:b8:
56:62:3c:bc:46:8f:95:e1:ab:54:91:86:43:a6:15:86:c7:69:
1f:4f:38:a4:b8:72:de:9a:13:ae:c0:fe:73:da:d1:88:5d:99:
f4:c0:c2:a8:41:0d:a3:71:9e:2a:84:34:3d:14:f3:b3:92:b4:
64:5b:eb:fb:9a:5a:f7:30:f0:5d:44:41:34:e9:05:2c:83:0b:
ca:3a:67:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:27 2026 by rpki-client