Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: OjH32tgx/wV1to/XSTvZLB8TYgh0eTFJ7eBorgIdEck=
Subject key identifier: 7E:5E:E4:22:91:D1:55:6E:2E:AA:76:AE:B8:EB:31:C1:93:04:94:0C
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 019CADFE460A3C8328836558C297476D9FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 0ABA
Signing time: Mon 02 Mar 2026 10:00:48 +0000
Manifest this update: Mon 02 Mar 2026 10:00:48 +0000
Manifest next update: Tue 03 Mar 2026 10:00:48 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: L6hfbLSboh8/RtdFxnNFuCPTTXttLWlFnae6SRJRt+g=)
2: aO8SV7r8aRmaMsrCVn54MAITseY.roa (hash: UBYs9t/xpmJLmkQIIYwuZf57SETqiU4zYplqSc9D++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:46:0a:3c:83:28:83:65:58:c2:97:47:6d:9f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Mar 2 10:00:48 2026 GMT
Not After : Mar 3 10:00:48 2026 GMT
Subject: CN=7e5ee42291d1556e2eaa76aeb8eb31c19304940c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:79:59:43:9f:4e:d9:63:2a:83:87:64:a5:
d5:d7:8d:5d:16:f0:92:c6:f5:ab:52:0c:3a:f7:cd:
57:10:9a:4d:c6:1e:e4:dd:bc:57:eb:8d:dd:fc:11:
bc:d1:b8:97:5f:dd:45:aa:fa:7b:5f:53:7c:0b:fd:
63:02:c5:14:41:19:cd:00:15:58:7d:72:ab:51:4e:
a8:c7:b3:fa:25:9a:c9:01:13:48:d3:3c:bc:e7:6e:
0a:1b:c2:8c:e0:16:fa:02:1e:42:78:01:7b:5a:9c:
3e:05:73:02:00:12:04:95:df:e4:b8:f6:d0:b6:d0:
af:c8:d9:f6:66:21:dc:6d:50:b3:73:d9:32:49:c8:
68:69:36:79:e5:0f:7f:a5:fd:cb:69:df:44:b2:44:
86:9d:ab:c8:b5:ac:4a:08:f3:2a:9f:0a:5d:05:f3:
cd:f2:32:37:bf:5b:52:8a:fb:8b:83:34:fa:dc:e1:
9c:ab:8b:5e:f9:a0:e9:95:2f:05:6a:38:0c:5b:68:
98:d9:51:b8:21:77:c3:b0:33:9a:59:b1:ba:ad:53:
1c:81:b8:07:90:9c:cc:92:f1:0e:8a:87:db:9f:a9:
10:2f:37:c0:62:14:fc:e8:05:f6:00:8a:ea:9a:ce:
d7:d3:b9:2c:cf:36:5a:8d:53:85:19:ff:0c:c9:e4:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5E:E4:22:91:D1:55:6E:2E:AA:76:AE:B8:EB:31:C1:93:04:94:0C
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:af:f7:ee:ca:6d:47:ef:a7:b5:ab:ff:9a:c6:93:78:28:4f:
cb:92:be:d4:52:b8:f8:a3:46:64:3a:cf:00:74:19:16:1c:67:
c7:4a:30:71:99:39:c2:d6:a4:3c:bf:20:1b:18:9f:1a:8c:32:
57:a0:8b:c8:50:f7:41:92:86:a0:fc:11:20:37:83:01:99:5f:
4b:74:bb:09:ce:fc:9e:d9:23:2a:b9:e2:fb:9c:9a:0a:b9:47:
b0:5d:11:83:df:ef:db:4c:b5:c5:61:0b:5c:be:34:99:91:f9:
30:dd:94:af:a3:8a:7b:50:7b:96:d6:d4:24:19:bb:1b:ac:68:
87:53:b3:58:e3:ca:bd:8a:a0:c6:95:fe:b1:40:3e:7b:c8:40:
54:b4:69:37:62:73:18:6e:7f:ba:11:b9:c6:34:cb:df:27:86:
48:58:ca:9d:26:31:69:18:5d:a6:47:73:c0:f4:d0:69:3f:13:
cf:43:bb:2b:7d:ba:1b:a1:ac:8d:b6:11:e0:f2:82:8f:71:8d:
5c:c9:81:a3:02:e0:c2:81:6c:31:c5:41:4b:27:cf:25:e6:8b:
d6:84:5b:6b:53:cf:85:ba:65:54:8e:16:72:b8:31:82:46:bb:
b4:86:27:43:f8:8e:9d:4a:bf:64:7e:f9:da:f2:8e:6d:38:2d:
f1:aa:81:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:45 2026 by rpki-client