Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File: C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier: 7JISl2hJ1ZoQTZEcfneDy7rBs/+6IR8PY1ucwg4ReXM=
Subject key identifier: 18:73:D2:C6:9C:62:73:37:0B:41:D5:D0:CC:57:CA:38:EF:5E:15:E1
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer: /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial: 019CAA582E373281F58293EA1E579C972E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number: 0D1B
Signing time: Sun 01 Mar 2026 17:00:31 +0000
Manifest this update: Sun 01 Mar 2026 17:00:31 +0000
Manifest next update: Mon 02 Mar 2026 17:00:31 +0000
Files and hashes: 1: 4oHL96070XVJFK5YR2z3SGTLdMY.roa (hash: FF1916bNfm13YDHdzfWvKY2B8uJg3LA5NBIqV3b8KEA=)
2: 7ZWwgnvwU4U_1-WB90W9zaIeApk.roa (hash: pXdrhZt6u9TZRpK/zMCuOmrnZo7nb4SnqRLes1rkitE=)
3: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: nXNFG92sBQrt51EtCn9s1D5HZTj3n7Aujlz8oshpS6s=)
4: dGGdzraFBMqQuQOaaYdWRwXkWRo.roa (hash: 2J+i3mFaVsHOA07pasr4FZkQypfzyjabfUuePsjfpFk=)
5: mCPvVZ52cqu_7fQiYfxNWTgmIyU.roa (hash: MKIXaK5pXObdOC8zIpNfkiNlH80bR9ObWjRqGl0bxns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:2e:37:32:81:f5:82:93:ea:1e:57:9c:97:2e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Validity
Not Before: Mar 1 17:00:31 2026 GMT
Not After : Mar 2 17:00:31 2026 GMT
Subject: CN=1873d2c69c6273370b41d5d0cc57ca38ef5e15e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:9a:7f:90:e9:a6:f7:87:23:b7:03:b2:c1:
d2:c1:41:1b:f9:ec:5f:50:39:10:d3:e8:b1:02:4b:
6d:7a:4e:11:88:31:98:e2:a8:95:1c:6f:89:12:6f:
86:1c:36:d7:5c:8e:57:74:84:5c:b5:e4:97:ff:a6:
28:08:9b:12:31:27:02:9b:7d:e8:39:ae:51:91:df:
08:dc:9c:9f:13:bd:b6:7f:2c:57:20:a8:aa:99:40:
82:11:e9:2e:4a:60:ad:07:25:40:8f:2c:0b:8f:e2:
22:25:f2:ec:90:a5:ff:68:45:6e:b0:52:cb:1b:af:
24:50:14:5f:b4:33:90:ea:80:18:c8:dc:f7:b8:5c:
4c:b6:0b:bc:37:bc:69:ba:c7:77:5a:e2:67:b2:e4:
67:44:37:30:08:79:40:8c:e1:b2:c9:fc:f3:44:56:
d3:16:47:ba:9f:85:16:2c:2c:49:e6:a4:34:b3:53:
3d:af:9f:31:a5:ef:2c:3f:36:70:1b:99:9c:c9:13:
8d:d3:73:c1:74:34:67:18:ff:0e:86:20:3b:18:96:
33:73:ae:2b:ff:90:51:c5:3e:f7:94:93:1c:fe:93:
41:d4:6f:c1:d1:43:d6:0e:15:63:c7:95:1c:13:44:
25:9f:69:89:6f:d4:4c:92:7f:74:39:dc:f7:aa:cd:
8f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:73:D2:C6:9C:62:73:37:0B:41:D5:D0:CC:57:CA:38:EF:5E:15:E1
X509v3 Authority Key Identifier:
keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ac:a6:09:99:64:1b:24:7d:91:a4:da:96:8f:b2:c4:f4:39:
66:2f:9a:5b:fc:f8:2c:42:d9:80:9a:0e:97:4c:10:94:10:59:
64:eb:ec:48:be:e8:a9:4d:22:07:a7:ac:d6:e8:96:0b:58:d9:
85:d0:9f:b3:00:98:b6:2d:a3:dd:32:c7:46:8e:9d:e3:b1:1e:
85:db:d9:3c:fc:80:e8:b6:07:20:92:5c:2f:f2:8c:cd:d9:fc:
01:ce:e3:12:74:bf:ac:76:8e:ef:e6:70:8f:ab:3c:0b:d3:18:
72:2c:ac:9a:a4:92:b2:b3:0f:98:f7:eb:f9:97:db:d7:7d:96:
6b:5a:d2:0d:e8:3e:de:29:ec:b9:92:a4:d5:79:08:62:de:ad:
00:d4:d0:06:0c:af:aa:90:1c:6f:3a:b4:ce:cd:62:f9:f2:56:
c8:b1:34:f2:32:03:3b:99:42:17:a2:10:e4:c9:7c:5c:d0:b3:
ed:44:e4:07:b8:1c:07:17:79:88:92:72:16:46:cf:9d:29:5e:
a2:1d:81:cd:9f:0b:f8:3e:ed:49:bc:bb:06:71:72:d9:44:c5:
0d:b6:1a:da:85:ed:55:ec:cd:1d:0b:e9:c5:eb:3d:58:97:b4:
3f:83:bb:ce:fb:63:5d:86:3c:d1:fe:3b:ed:f8:b0:8f:60:b8:
aa:73:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:12 2026 by rpki-client