Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: RxYjU0xI0Do3UfaG3a/luwqcXJL2BH5QN/Jj47lB2O8=
Subject key identifier: 48:DA:A2:53:8B:4D:0F:B3:4F:04:A6:DA:53:83:02:87:BC:EA:0F:E4
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 019CAD22BF6E0ADFA92BFEC148E8D6F2F3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 1630
Signing time: Mon 02 Mar 2026 06:01:01 +0000
Manifest this update: Mon 02 Mar 2026 06:01:01 +0000
Manifest next update: Tue 03 Mar 2026 06:01:01 +0000
Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: PwkWp9dOxF7jb7Zxkp20CzXIqj22e1WMrxcy9V/lhUA=)
4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:bf:6e:0a:df:a9:2b:fe:c1:48:e8:d6:f2:f3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Mar 2 06:01:01 2026 GMT
Not After : Mar 3 06:01:01 2026 GMT
Subject: CN=48daa2538b4d0fb34f04a6da53830287bcea0fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:a5:b7:e7:92:ea:58:83:d3:3b:4b:8f:3b:
17:21:b2:3b:44:c7:31:57:54:69:81:54:3e:8c:81:
d9:b7:0c:c3:1c:37:22:bb:37:e6:a6:45:72:b2:c3:
6f:53:10:3e:16:79:8e:41:3c:2d:e3:2d:b2:5c:e8:
d9:31:1f:20:54:a0:53:3b:8e:c6:ca:10:83:a7:98:
bf:8d:c9:c0:fc:43:28:ff:39:b7:56:ed:32:1e:16:
66:be:a4:af:9d:aa:42:68:40:0f:e3:43:40:bc:69:
89:f0:2e:2b:f0:ef:ab:a5:fb:bd:2c:16:fa:7b:88:
cb:e2:1a:6a:d3:b4:e2:4f:6c:a6:cb:87:c1:bd:be:
3f:1e:0c:6b:1a:ea:45:80:43:ab:50:5e:61:31:9b:
44:f1:4f:f0:be:3f:cb:76:29:33:fd:69:a7:0e:4f:
43:54:51:6a:e8:56:61:8a:bc:58:36:ec:e8:4f:d9:
95:61:bc:45:81:70:a1:f0:c6:99:ff:8b:c1:cb:52:
19:b3:43:5c:03:27:30:76:70:c0:9b:57:86:bc:2a:
34:ff:24:e5:4b:0a:d1:17:35:4c:12:94:a3:a1:b3:
5b:6f:4c:f6:0a:6b:2e:75:61:28:d5:6b:68:6a:e0:
6b:9f:f3:cd:16:01:ad:07:b8:10:00:6d:65:70:c2:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DA:A2:53:8B:4D:0F:B3:4F:04:A6:DA:53:83:02:87:BC:EA:0F:E4
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:8a:64:83:3e:e1:e6:3a:ef:ef:3a:6a:ec:2d:d0:77:08:de:
02:4d:38:53:f0:b7:75:dd:bf:ec:31:ac:8c:6d:0b:99:36:f5:
3c:1d:76:48:51:d1:95:8b:66:2d:2f:c9:db:b6:ff:ac:d3:70:
a2:59:d8:47:8c:81:52:1a:e1:20:88:1c:d3:27:08:67:79:5c:
16:69:b8:cc:a0:85:a3:79:92:12:47:39:48:22:42:ce:48:ed:
27:bf:92:e8:45:49:7e:23:64:ec:3c:ec:42:cb:51:ed:a8:89:
2e:56:ae:c4:d9:69:5b:4a:32:b2:f0:6b:6c:be:ec:65:4f:0d:
72:6e:99:fa:07:fd:63:99:4d:d4:b9:69:aa:87:80:f6:f9:e3:
03:a2:a6:39:0c:9a:f1:ed:ce:89:ab:af:56:5c:6c:11:4b:f2:
ba:df:23:00:36:6e:56:36:42:4f:ce:de:16:42:11:6c:6c:88:
4e:7c:b0:1d:ff:29:83:cd:cb:cc:fd:6c:74:16:ae:fb:fa:89:
5d:dd:76:f1:01:bc:81:6e:ed:54:79:2c:a4:8f:1a:14:d8:3b:
89:bd:a2:42:73:06:0f:52:6d:87:48:70:b0:19:18:a8:fb:b9:
f7:ac:70:b4:b9:be:be:88:db:9c:b9:ec:e6:9b:ec:31:e3:ba:
4c:f9:28:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:44 2026 by rpki-client