Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File: 7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier: A4akjMIokHRs3XZ5n0Q3b1xXlXOEcAbyNOVgSqGaXag=
Subject key identifier: DF:56:E1:D7:F7:BD:15:96:4C:B2:9F:CC:8C:3B:1B:81:61:5C:51:19
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 019CABD9CA8493A65B180A305EE5BBBBD45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number: 097A
Signing time: Mon 02 Mar 2026 00:01:42 +0000
Manifest this update: Mon 02 Mar 2026 00:01:42 +0000
Manifest next update: Tue 03 Mar 2026 00:01:42 +0000
Files and hashes: 1: 1-OYnNzXr6Vo5v0tdTY5uXPebeXE.roa (hash: HvTSCO8dnKWpIGNv0ZhtPHvjO7rUBO8uy6VJMUgGVj0=)
2: 1-ehzYatit3iLMmu80bwVvF4ySRg.roa (hash: yxJAVsFotojTUCt/gJcaBSwXY212I++Y/TVg1twrlgE=)
3: 5Astj5lCiJQgqmhiqNTawYi-5Ek.roa (hash: 9fhoBMdjLKMECTINatwLrASqD1iYNp+obxt3K9TlcMQ=)
4: 5DTG2pQHtM0QiGmSH96_4M3Hn5k.roa (hash: ITY7NiqI6LopyqA5OlrdJTOTC/MthEeeabjTB3wyEhU=)
5: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: l290WH0n6tV97j7fnkVsw9vuM5WhrlFKZeAs5PrEqec=)
6: Rb9KBoBLJn6K8gQhZg2wL_hnX2Q.roa (hash: Pnn1XhHhvI1FVLr7IXQzdyTXVT364mukcsmYH/cxMhg=)
7: djl4yLaR492a1MyY0DtkNwyzb78.roa (hash: ej60VYUqOdqHjFm3piE4ykWKGCUfy0gAqtpywAR05qI=)
8: x8PuWJNPJBC35K_SG-mLe9gxJtA.roa (hash: i+jPp0P0KxStb0wvP/NjPbGbfQidMuZ2R8mV3ecH7IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ca:84:93:a6:5b:18:0a:30:5e:e5:bb:bb:d4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Mar 2 00:01:42 2026 GMT
Not After : Mar 3 00:01:42 2026 GMT
Subject: CN=df56e1d7f7bd15964cb29fcc8c3b1b81615c5119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:69:90:85:1b:26:0c:dc:14:d2:f0:80:69:d6:
80:6a:ce:3d:45:bd:35:8c:ee:a1:ff:10:e6:fb:4f:
25:14:3c:9f:48:89:58:31:75:52:d3:2b:dc:ef:a1:
58:fe:00:85:10:39:37:af:cc:ab:43:6e:4f:17:7e:
7f:de:15:0e:04:64:77:b7:d3:85:3a:d2:b2:c2:6d:
9d:ba:a1:1b:05:2a:b6:62:5b:ff:7c:a9:4e:24:9d:
e2:64:32:1f:42:50:f5:08:0f:9a:18:ec:e8:d5:48:
09:1a:4e:3a:f7:2b:b3:5e:ca:70:92:5f:b2:61:32:
07:0d:c3:76:3c:76:4f:78:c8:b5:14:15:32:b7:3e:
9a:18:ba:54:d9:53:b6:53:51:91:4e:cf:b0:77:1f:
51:68:56:5d:a9:8b:0f:ab:37:47:dc:ce:5b:86:8a:
62:72:3d:7e:e5:cc:80:8b:24:60:3a:e7:29:31:2a:
33:55:c0:0a:4b:b9:41:57:60:b1:56:0f:9b:88:01:
34:32:8f:04:b4:3f:d3:a6:0a:4b:1a:e7:a9:d3:38:
44:d4:c4:4c:cb:03:6a:42:8d:8f:81:8f:e2:7d:3d:
bb:07:c7:6a:dc:99:af:da:9c:e2:5e:3b:a6:84:4f:
04:55:d5:73:35:37:39:25:b3:1b:a0:e2:9e:d1:88:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:56:E1:D7:F7:BD:15:96:4C:B2:9F:CC:8C:3B:1B:81:61:5C:51:19
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4f:4a:b3:34:7f:20:f0:9e:06:ea:32:ea:8b:13:ee:44:1e:
67:71:7d:3e:47:29:f5:07:f1:20:0c:36:5d:ab:fc:be:b8:55:
4d:db:28:2e:ad:ae:01:46:02:da:99:30:8e:a0:4d:d0:8f:b2:
81:e6:01:94:3d:e4:a8:36:34:24:f2:1a:d7:3e:0b:03:d4:f3:
a0:1e:ed:1b:c5:3e:b5:3b:15:5c:93:10:75:64:f9:e5:fe:40:
f2:89:b9:a3:16:1c:f2:12:83:83:f3:ca:c9:fd:49:f6:8e:76:
bc:ae:2b:fb:d6:4b:b8:ec:1b:fd:ff:97:c7:88:a1:fe:f9:75:
a5:4e:67:4f:a0:fa:27:3d:29:72:92:3a:ac:74:9d:5e:a9:74:
27:55:8e:54:62:32:82:1b:02:29:e7:52:60:a9:d1:0d:ba:8f:
43:3d:a6:99:15:f5:4e:7b:de:46:7e:4e:6d:7a:47:3c:dd:c5:
dc:6c:96:93:5b:e5:3c:ea:97:fd:eb:ee:79:e7:d8:de:8a:13:
c6:68:6a:43:eb:fb:04:fc:d0:4a:1a:b2:29:18:6c:a7:0e:20:
07:32:49:f5:45:06:17:44:6d:35:1b:44:08:7c:15:c3:3e:ed:
52:df:06:6d:a9:d5:2c:03:21:58:67:c4:ae:25:dc:5b:47:11:
ed:ad:e8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:33 2026 by rpki-client