Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: WWBM6X6KZArzsSzQPfcb3/p2Bf5OXkammT8KyJ1fo/I=
Subject key identifier: E0:79:8B:95:A4:AE:7B:22:A5:C5:31:BB:07:C1:AB:B2:58:39:C2:2F
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 019CAAFD1E7E00CE0B5EEC20D8AA53A1F095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:00:40 +0000
Manifest this update: Sun 01 Mar 2026 20:00:40 +0000
Manifest next update: Mon 02 Mar 2026 20:00:40 +0000
Files and hashes: 1: F13QQirUcyQJSbRfCl6w_cI9WWQ.roa (hash: Qmtb36fS7mGPq7TyueOpeM3xtlJooopxzuWWdKo+FIo=)
2: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: xUIOlHLMyNdyEGLXKIPPC/HfRjtvRnUuAk3eoytD+x0=)
3: yXL2c-lh8z3Pu6QXVoEmuyvEfX4.roa (hash: yk0yZqIR3aCNm4M9eEBAKHg+9JBzxKPA8wbCVYP14nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:1e:7e:00:ce:0b:5e:ec:20:d8:aa:53:a1:f0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Mar 1 20:00:40 2026 GMT
Not After : Mar 2 20:00:40 2026 GMT
Subject: CN=e0798b95a4ae7b22a5c531bb07c1abb25839c22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:15:a4:26:e4:ab:1a:df:80:e5:88:1b:ab:
ca:8f:ef:56:c9:18:59:78:4a:88:df:09:6a:98:0e:
0d:a1:47:1f:98:d5:44:54:e2:ee:ab:31:0b:a3:1a:
90:b0:f7:37:31:fa:75:57:34:90:ae:0a:c4:e2:66:
a4:88:04:45:7e:bf:e3:4d:7b:50:76:3b:06:84:a2:
1c:cc:14:a3:95:41:70:28:b1:6d:dc:e1:f2:0d:36:
90:21:c2:89:5b:21:ca:47:00:30:5c:c1:dc:cc:48:
a6:b7:58:3c:d6:fc:b5:58:7f:f5:63:2a:35:74:8f:
22:64:92:49:ba:88:6f:d8:d2:2e:e5:1c:bb:5b:56:
ba:79:76:fe:bf:ea:bf:fb:38:e2:3d:fb:68:26:d8:
96:be:72:ca:b3:61:dc:7b:c8:54:1b:1c:af:3f:15:
a7:ae:0f:63:b8:64:e1:e6:62:44:ff:bf:1e:3d:80:
84:92:b5:be:81:1f:f2:22:94:1b:e0:f1:fb:82:f5:
6a:20:ef:19:6f:7c:1f:f6:0e:ce:64:d4:77:74:26:
2c:51:ea:0e:77:58:5b:09:d4:79:ae:2c:a6:b5:e3:
37:61:31:71:f8:84:7e:e7:54:23:95:05:30:55:4d:
fd:81:9c:52:b7:11:1c:50:91:8b:3e:03:eb:68:4e:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:79:8B:95:A4:AE:7B:22:A5:C5:31:BB:07:C1:AB:B2:58:39:C2:2F
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1a:d9:a5:93:c0:e6:78:36:c7:1a:b3:ad:f8:a1:90:65:ad:
db:d3:d1:96:54:f5:46:ab:cf:1c:5d:6f:82:f9:f9:40:bf:0e:
98:19:0e:9e:b1:fe:8f:04:9d:af:7e:b8:e4:a4:6a:7b:8c:4b:
02:d1:e4:f3:2e:4f:07:83:06:ff:91:99:69:c9:a8:4d:c1:5d:
98:c6:51:8d:1e:9d:81:84:15:f0:2a:9c:a7:8f:78:5c:16:58:
5b:17:75:93:66:dd:d6:2a:5a:f5:90:38:25:78:d1:2d:ac:e4:
86:42:e9:2a:d9:36:a5:72:20:2e:25:96:4f:5d:b8:d5:0e:04:
ec:72:5e:c6:e2:73:2d:c8:8d:4e:16:3b:6e:cd:bf:f8:17:34:
e4:88:e3:2b:1d:47:f9:ae:22:0d:92:7f:29:fb:52:cd:c3:5b:
e1:33:56:fa:0e:fd:6f:26:c2:cb:d2:11:fd:a4:54:49:77:b5:
d1:fe:94:6d:8c:bd:33:b2:ea:da:db:66:48:e8:30:72:39:70:
fa:0a:9a:9d:2d:a3:1f:d7:f4:31:b0:95:79:a5:b6:3c:cb:a8:
7e:13:4c:dc:1c:fa:fb:70:4b:3a:fb:c2:0e:a2:fd:4b:92:d7:
7c:42:7b:46:c0:3c:95:c0:1f:de:10:4f:48:37:71:96:02:06:
f9:3d:73:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:50 2026 by rpki-client