Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: vzp4nucN/5A3c03YxXwPzXye5o9zDT3Ve7LKv+TZKw0=
Subject key identifier: 67:BE:B3:7E:B4:C5:7C:31:F6:50:D5:39:96:15:05:96:76:38:1C:D0
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 019CAAC6C5D95DF108941700ACC61C289AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:01:19 +0000
Manifest this update: Sun 01 Mar 2026 19:01:19 +0000
Manifest next update: Mon 02 Mar 2026 19:01:19 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: okVLrQWJTU1RkhXZtz9aVfbfXmphgGuxoJY7wnJsCW4=)
2: x6n822Rpr9x_ujzRReAoyI3uWJE.roa (hash: xHlOIj9K0jyV1cDKqnDaDCInd6n4ZibqQVDDfE1qwao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c5:d9:5d:f1:08:94:17:00:ac:c6:1c:28:9a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Mar 1 19:01:19 2026 GMT
Not After : Mar 2 19:01:19 2026 GMT
Subject: CN=67beb37eb4c57c31f650d5399615059676381cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:cd:4f:8f:7a:8c:53:79:cf:ba:86:59:d1:
bb:50:c9:39:0c:71:69:fb:ce:78:ff:4f:30:6e:eb:
29:a4:e3:15:79:65:c9:03:d1:ca:1c:72:01:7e:e7:
72:e8:7a:2e:a2:5e:9f:03:7c:89:b2:2a:18:50:5d:
3a:2d:73:5d:68:d6:6f:22:b7:c7:c6:00:71:ae:9d:
26:8d:d1:cf:6f:07:55:e0:b4:be:c6:76:81:48:14:
45:8d:f1:ff:cc:e6:94:b9:59:54:97:a3:ae:5c:a1:
5c:83:07:54:45:fd:c4:f5:1f:b0:09:2e:c1:c6:4a:
b4:5b:d0:61:2b:e1:65:d3:70:49:e8:9d:6c:78:fa:
7d:e6:75:77:80:31:fe:e2:86:07:67:53:c8:41:2d:
95:44:6b:ba:d2:b5:06:b3:a7:73:35:94:1c:13:b1:
75:10:ae:03:10:a7:74:a0:49:3f:bf:54:a7:b8:cd:
39:10:0a:e5:a8:7e:13:67:65:24:d0:95:7b:d0:00:
37:6d:d8:20:c8:8e:db:b1:c7:8c:12:09:d9:8f:70:
03:72:18:bf:d8:27:36:c1:03:2c:27:d4:b9:bc:d8:
b4:13:54:e3:d8:58:35:b6:eb:24:16:f5:e7:25:a7:
de:53:22:ea:14:38:dd:a2:40:98:c7:e7:7f:f5:bd:
0a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BE:B3:7E:B4:C5:7C:31:F6:50:D5:39:96:15:05:96:76:38:1C:D0
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b1:37:ab:93:4c:3f:81:2e:e3:cd:22:d7:44:d8:b1:4e:ad:
4a:c2:92:92:c4:82:37:5e:f3:72:71:c6:d9:8d:cc:c8:1b:20:
48:ae:3d:2b:a6:3a:e1:e7:0b:85:b6:ec:5b:07:95:e8:f6:12:
f6:c2:a0:d4:9a:42:c2:3f:65:67:89:a1:13:f5:be:5d:19:04:
5a:3a:d9:1e:5b:56:87:5a:ee:ac:19:f0:ab:5b:8a:90:46:69:
b5:ea:f8:17:ec:53:14:4a:9b:72:e1:42:a0:cf:3c:38:c9:7e:
3f:cc:f4:f0:1a:9c:d8:fb:98:93:9a:a3:c9:32:db:8a:d2:74:
87:dc:64:23:3a:d4:9b:b7:df:29:e6:46:57:50:c5:c0:a6:15:
9c:4d:1c:71:c7:9d:6b:57:36:e8:21:a7:9e:b5:0e:bd:66:58:
5e:9d:ec:c2:d6:66:a1:16:90:3a:62:18:9f:8b:5c:03:8a:16:
b0:80:35:56:fe:68:21:31:08:b4:5a:d0:03:ee:0a:02:2e:e5:
8a:cb:97:fa:db:c9:82:3d:51:34:07:2e:f2:ce:d9:bc:34:c9:
39:df:bb:83:05:46:1e:c3:7f:63:4b:60:69:d2:c2:7d:b1:8e:
26:a7:4d:bf:23:e4:a7:d6:8a:0f:f8:8b:1e:e4:11:05:4a:80:
58:32:26:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:14 2026 by rpki-client