Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
File: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft (raw, json)
Hash identifier: ZKsawz5g4Ukzee1a6UKKKiZEnZkrVl5u3t646+OkYyg=
Subject key identifier: 5F:8F:09:50:CE:49:DE:BC:D1:8E:DB:37:F4:A3:EF:48:DB:BA:C1:05
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 019CAA587883F977004D6E8A6E52FF6D29D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 17:00:50 +0000
Manifest this update: Sun 01 Mar 2026 17:00:50 +0000
Manifest next update: Mon 02 Mar 2026 17:00:50 +0000
Files and hashes: 1: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl (hash: vAbdHajHjG2gplDH/rg30BVy8ZWnRNsPunzTJh4Uaek=)
2: a7s6-pLwoiyrezAHz-CEXmLAi28.roa (hash: nhlHfUNEeKi77QockWWhGxaJn7C3J9whAR6snvDoVtM=)
3: ds5dJRDzI4acHa9XOzintQa8R70.roa (hash: NSHUOHDDYeCqlj4/tHZIL/eLYAJljLX9kfG+BuqGIqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:78:83:f9:77:00:4d:6e:8a:6e:52:ff:6d:29:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: Mar 1 17:00:50 2026 GMT
Not After : Mar 2 17:00:50 2026 GMT
Subject: CN=5f8f0950ce49debcd18edb37f4a3ef48dbbac105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:18:7e:88:32:84:56:38:82:af:90:c8:39:
0c:c2:0e:5f:e6:97:b2:64:e9:9d:7c:66:f0:b4:da:
fe:f1:cc:ae:5e:fe:db:9e:7f:ff:d7:9a:b3:f5:08:
fc:d2:39:33:cc:35:ed:82:44:7c:ef:06:c2:f3:0c:
1c:e2:4f:ff:93:5b:87:3e:82:98:2b:d5:79:62:06:
65:8f:81:92:0f:0c:46:88:99:e6:6e:bd:cb:67:c3:
c3:3d:f6:53:64:40:fe:71:9b:fd:08:18:ec:f4:b8:
80:d8:f8:6e:56:df:9c:94:d7:88:56:90:f1:34:2d:
a1:e6:c3:53:bb:4c:95:7c:c4:75:32:d9:2d:71:6f:
61:3e:eb:16:83:bc:4e:f1:d2:51:85:2a:01:cc:32:
2b:4f:27:c7:f0:93:fd:01:63:94:1e:d7:b3:65:70:
ee:ca:54:36:13:ad:49:98:1f:5f:37:b8:8e:4a:32:
9e:07:b0:2a:44:78:7f:32:11:ff:39:40:ae:d0:ac:
88:bf:f6:81:8a:4a:d2:ab:e9:86:ea:19:0e:d7:51:
dd:4b:ee:13:42:ec:ac:65:b6:2c:32:89:e4:e7:6a:
41:2a:db:6f:84:42:33:59:c5:3d:7e:a3:96:63:5a:
61:1c:d6:28:fb:3a:46:c2:17:0b:6a:13:fb:9e:58:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8F:09:50:CE:49:DE:BC:D1:8E:DB:37:F4:A3:EF:48:DB:BA:C1:05
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a9:65:d8:65:33:a8:d3:ae:8d:62:59:1f:5e:04:0e:68:54:
a9:6a:18:85:d2:cf:36:d9:7b:97:cf:e2:0f:6d:1b:97:98:8a:
40:93:fb:59:58:7e:12:1b:a9:a8:fb:a3:7c:34:f1:5d:93:b2:
f4:41:5a:7b:bf:02:34:0e:df:66:06:00:c2:ab:f1:15:a0:c3:
9e:31:5b:95:df:39:9b:92:22:13:ec:21:60:ae:dd:9c:d6:a2:
d1:77:0e:ff:fc:07:fb:44:42:b9:26:18:bc:45:f6:e0:a9:43:
cf:5c:e0:da:6c:30:93:b1:a9:04:e6:35:42:6a:66:c8:6c:bc:
48:57:ee:b8:c9:81:ba:38:d5:f1:ff:75:63:da:8e:d5:07:55:
17:2c:eb:ba:2e:3f:d6:2b:a7:04:82:18:ad:83:46:ea:96:2f:
f3:dd:4f:e9:df:ce:05:49:49:49:f9:5f:ab:9f:3f:85:f4:90:
45:2b:e0:04:36:b8:8d:d6:fa:fe:99:35:98:31:74:8e:33:82:
8b:46:d4:38:b4:0b:7a:26:62:fa:71:16:45:57:74:ea:ee:0a:
4b:17:90:e5:3d:a7:f0:7a:0b:18:ff:41:fd:87:59:aa:00:65:
81:bf:fc:a8:4a:e0:b8:dc:88:c0:c4:10:f4:e0:0b:00:c6:e0:
17:48:43:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:50 2026 by rpki-client