Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
File: 7CSoJiAgkayDGfDwbreW_YJCKw8.mft (raw, json)
Hash identifier: aByTQhQ7uLqS8ZuAcKpUewFm4HzOvzoWpzgCya4G9vA=
Subject key identifier: C2:E0:10:27:E9:68:F6:5C:5E:1A:B5:63:B1:FC:48:8E:43:A6:FD:C8
Authority key identifier: EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
Certificate issuer: /CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Certificate serial: 019CB023B6D3D0BF840B6710F44042F946F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
Manifest number: 01E9
Signing time: Mon 02 Mar 2026 20:00:56 +0000
Manifest this update: Mon 02 Mar 2026 20:00:56 +0000
Manifest next update: Tue 03 Mar 2026 20:00:56 +0000
Files and hashes: 1: 7CSoJiAgkayDGfDwbreW_YJCKw8.crl (hash: bbx1flbf+vWXwkD3MgUYkVbX5Of4DbMUjQXXhagmMJI=)
2: NV3f3XuOFAsDnfAaCg6nF83CLX0.roa (hash: gLitDvaGVXpGQdqcXcYcXVG4iAgjgIJ9u8eaDv8Xduc=)
3: XHsv6tidd9i-2RRz-dH5aTG8xDM.roa (hash: mc5VNfZqvrFRMc92AfbsJY+NZvDvOSGlYFhOV1FglZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:b6:d3:d0:bf:84:0b:67:10:f4:40:42:f9:46:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Validity
Not Before: Mar 2 20:00:56 2026 GMT
Not After : Mar 3 20:00:56 2026 GMT
Subject: CN=c2e01027e968f65c5e1ab563b1fc488e43a6fdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:66:38:9e:dd:b3:c7:f7:02:9e:8b:b4:be:
ac:a4:2d:58:73:36:e6:eb:6d:ee:4d:de:00:ce:21:
e1:79:10:5c:0f:56:79:8e:ce:82:32:d6:fb:61:0e:
92:94:1b:10:0b:67:6e:e2:7a:b6:34:a4:b1:62:15:
b8:bb:58:da:21:ef:7c:c5:52:4d:0e:79:e0:fd:64:
4b:e6:c5:39:0f:39:ec:18:2a:11:11:87:18:c3:24:
27:62:45:82:48:ff:b7:b4:e9:a2:92:4e:4b:a2:3d:
f2:4d:a3:bc:1b:8e:5a:43:c1:fb:16:fe:ff:08:fa:
5c:04:54:b3:ed:b6:75:5a:d6:83:9a:d0:51:7b:71:
bf:f0:bf:3c:cb:d3:98:0e:9e:91:7b:35:e9:58:00:
30:3c:11:91:67:cb:b4:00:67:a2:a4:ce:f7:d6:58:
58:99:9b:f7:2d:21:f6:df:16:13:e7:df:dd:a7:5b:
b9:f3:e8:7c:f8:39:29:a6:9a:e4:d5:9e:24:6a:e3:
9b:8d:c5:92:66:b3:a0:4d:60:8c:66:dc:36:1f:41:
52:c1:8e:fd:95:06:42:23:24:af:34:1e:95:54:6b:
75:ff:b2:68:51:fa:ee:32:f3:80:04:50:95:7e:51:
ec:46:a9:74:d8:55:6b:c3:08:93:f4:45:9a:29:7f:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E0:10:27:E9:68:F6:5C:5E:1A:B5:63:B1:FC:48:8E:43:A6:FD:C8
X509v3 Authority Key Identifier:
keyid:EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5a:d8:6f:e7:ec:7b:6f:34:96:20:59:60:43:07:7a:b4:1b:
58:44:4c:ca:58:8d:14:08:a4:6a:44:8d:36:bd:af:9b:35:af:
4f:92:ad:c7:8e:c3:c8:a6:23:87:02:15:a2:c8:26:9d:0b:f5:
2e:e7:75:b8:9e:13:54:85:13:1e:d5:c0:9b:b2:a8:15:10:a0:
ae:21:d3:d4:1b:41:f4:06:50:ca:7b:ee:7e:11:d8:91:ba:a7:
e8:6a:7b:c4:1d:b4:36:54:50:77:59:b3:ff:af:6b:2a:bd:8b:
05:f4:a7:c0:9f:49:49:69:01:1f:c2:c2:c1:4b:cd:74:f8:11:
20:ba:8a:80:29:3e:ac:b9:c7:a3:04:e3:12:00:12:86:80:17:
7c:fc:72:b2:71:fb:84:1d:4d:dd:67:61:7e:ae:bc:01:55:ff:
82:00:77:55:c7:9f:60:32:99:5e:f8:4d:f3:30:52:77:74:8d:
6f:17:95:3b:10:06:87:98:3f:db:8f:74:1e:0b:f2:b5:f0:4b:
6e:ca:32:b4:43:78:99:8d:89:8a:87:88:71:f1:d1:53:ce:a2:
12:5e:a1:5e:24:39:62:4b:5f:ee:7c:e1:19:42:8a:57:26:1f:
12:7a:52:b0:04:c8:5a:20:59:bc:65:ac:01:3e:cd:c8:eb:2b:
5d:62:0b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:03:58 2026 by rpki-client