Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier: MGwa4TWu/ye+LyUKCRumfWCdjxrVj83oCx1tL89g0AA=
Subject key identifier: 89:A0:00:E4:E2:BF:EC:B3:D1:00:78:F3:41:B2:46:3B:9F:C2:47:3D
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial: 019CAC1057CB5E8B4A71C95D2F3E1FBFF708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number: 0985
Signing time: Mon 02 Mar 2026 01:01:17 +0000
Manifest this update: Mon 02 Mar 2026 01:01:17 +0000
Manifest next update: Tue 03 Mar 2026 01:01:17 +0000
Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: 9ExFgAXJoZN8p1x3J3ILeY35EHy3BS+GI7Ou1AW9dV8=)
2: UlZluMg72w3OGQ7yVXSws-uTL0A.roa (hash: ZbBL16EPSfeFJDsY/7W353hLaYPwOpiK4otGlBdRF9Q=)
3: r6bLmGYRXJA6GUfCZnH4ebCbXYU.roa (hash: Q+Z0jJyseu+MqQA03xeTfakfDGrq+7+0HE8bf99rEXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:57:cb:5e:8b:4a:71:c9:5d:2f:3e:1f:bf:f7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Validity
Not Before: Mar 2 01:01:17 2026 GMT
Not After : Mar 3 01:01:17 2026 GMT
Subject: CN=89a000e4e2bfecb3d10078f341b2463b9fc2473d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:ca:7c:2c:59:62:23:72:2a:cd:03:aa:5c:
b2:48:6f:37:50:23:a4:4a:29:d4:bf:a3:f2:14:07:
d1:9f:e4:38:87:0e:04:ee:58:86:c5:be:57:8a:98:
27:69:75:3e:05:c6:d7:18:02:f9:1f:61:50:96:bc:
1b:af:7e:5c:b1:46:bc:34:15:f9:80:38:34:f3:2e:
dd:e2:91:1e:30:72:de:eb:65:cb:98:b3:be:ab:98:
b0:86:c1:6c:4b:1f:3f:b4:4b:37:e4:e7:4b:47:75:
7c:c5:09:4f:32:3f:47:06:3c:af:2b:55:63:0c:eb:
81:ed:18:d5:7d:ba:ae:f3:4c:4e:fc:e3:19:55:49:
4b:f8:8b:45:59:3a:26:e9:f8:6e:1e:27:f6:7e:51:
0d:d3:7a:e6:7f:5a:0f:e8:72:03:25:e1:a6:0e:59:
d5:a5:46:97:f9:a1:3c:ca:17:b4:3c:82:c9:f8:60:
e3:57:7b:b9:bf:a7:d2:f8:59:5a:38:8d:ba:95:42:
21:65:1f:97:a7:9a:00:55:44:cf:57:bd:5e:ee:f0:
7e:a6:be:85:fb:e3:b0:a6:c2:fc:dd:ee:cc:2b:fa:
1c:8a:f2:8e:b8:4f:b3:8d:3e:ab:69:6a:a7:0b:41:
b6:7c:ec:6c:ff:8a:d2:0b:12:7e:e2:2e:dd:39:d8:
68:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:00:E4:E2:BF:EC:B3:D1:00:78:F3:41:B2:46:3B:9F:C2:47:3D
X509v3 Authority Key Identifier:
keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:bc:67:ba:e0:fc:51:41:43:a7:5c:f5:81:9b:63:d9:61:4b:
9f:c0:d2:6f:4c:42:ca:f4:64:d1:d2:44:13:bc:3f:44:48:30:
5a:ae:ab:7a:ab:0a:05:7f:1b:e2:1f:9e:cf:e6:3f:65:ce:09:
9a:2a:33:6d:d1:24:55:16:f7:21:72:d7:de:ac:b2:b7:a2:73:
c7:33:84:25:8b:db:f4:59:f7:bd:28:00:3f:6f:42:1f:22:19:
c1:d9:bd:0a:21:09:d2:ab:cf:60:50:83:3d:b9:c1:79:aa:01:
e1:71:55:c8:af:3f:db:49:19:a0:39:7f:f6:6b:fc:80:fe:1c:
87:57:50:f8:ba:e7:40:48:7f:df:25:27:26:2a:71:70:7d:38:
56:05:35:ff:b7:cb:5f:0b:4c:7f:d2:52:8b:35:08:09:4a:56:
72:1a:7d:4f:e7:ba:86:3d:4a:df:f8:8e:43:59:7b:47:bf:64:
13:33:96:73:71:9b:87:05:cd:68:b3:ae:8e:99:53:42:d2:0c:
a8:33:3c:20:2a:f0:6d:b4:44:35:da:2e:fb:50:c4:aa:a5:c7:
64:78:c6:9e:aa:29:f7:ea:80:5a:66:d6:bc:e0:7c:a8:d8:8e:
59:44:53:be:d4:f4:05:f4:0f:2e:e7:eb:aa:ec:b9:67:0e:c8:
8f:e1:c6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:31 2026 by rpki-client