Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier: oFlt5GG5Du6b7o9gAQytMCKU6bA9LtZMoZk6ZiJj3VE=
Subject key identifier: 3A:24:80:1C:B3:FC:89:9F:A6:BC:BC:BC:EA:59:C0:08:9F:5C:D6:EE
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer: /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial: 019CAF47B801FE3A63BF54E6265ADAA8D847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 16:00:38 +0000
Manifest this update: Mon 02 Mar 2026 16:00:38 +0000
Manifest next update: Tue 03 Mar 2026 16:00:38 +0000
Files and hashes: 1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: zzQGuqgxqvkITt5Zdgy2Y48v+ne/Ah4GdEQYIxyx0pc=)
2: oqgwVvgO4WobvG_o2YvqXL-ZxrA.roa (hash: qgN0ZwFa85gMlSMo8H+ZBEVFv906WUNJ1MUKTtcyf+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:47:b8:01:fe:3a:63:bf:54:e6:26:5a:da:a8:d8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Validity
Not Before: Mar 2 16:00:38 2026 GMT
Not After : Mar 3 16:00:38 2026 GMT
Subject: CN=3a24801cb3fc899fa6bcbcbcea59c0089f5cd6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:70:ce:ee:20:db:f6:68:e5:3b:f8:d9:7e:
b9:57:4d:ac:30:d4:6d:0e:1d:18:ab:6b:1c:4e:b3:
5f:78:58:ab:89:36:6f:17:ca:fd:f5:f4:5a:94:20:
71:07:93:0c:f5:48:aa:16:83:02:6d:a3:e8:a0:59:
94:09:92:e3:38:86:42:1e:a6:50:0c:9c:db:6f:e3:
3e:81:f5:54:28:17:80:09:e2:7d:28:60:b1:74:16:
db:57:d4:a2:cd:fc:03:9a:3b:c9:46:8f:2a:be:e3:
a6:43:0e:a8:9f:70:b8:a0:28:1b:df:a4:c3:82:69:
43:10:70:79:da:ae:91:e0:c7:29:99:de:b1:df:fe:
4b:f0:4e:38:b9:e4:fa:a9:a9:ab:45:e4:85:0f:9e:
40:d0:e4:9e:c0:e9:5e:16:27:18:f0:28:1d:ed:60:
4b:08:27:1d:c2:63:e3:47:cc:22:67:7a:f2:29:b4:
f6:e3:b1:9e:16:ec:3e:d0:56:1d:78:7a:c0:ad:a1:
e0:aa:b0:ef:b1:9f:1c:aa:e1:be:d1:10:f6:f4:cc:
84:15:89:7d:e3:c1:b7:bc:dd:1c:35:b7:67:f7:92:
b6:e5:52:63:68:13:e7:54:00:c9:86:1a:f3:aa:b1:
37:14:e5:8c:e9:75:d0:64:34:21:26:38:96:e1:87:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:24:80:1C:B3:FC:89:9F:A6:BC:BC:BC:EA:59:C0:08:9F:5C:D6:EE
X509v3 Authority Key Identifier:
keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:dc:31:9f:cd:79:0a:6d:45:53:e0:b6:43:3c:79:16:60:29:
79:15:5f:4b:a9:73:10:f1:f6:1d:55:a5:ba:64:10:ad:71:60:
9d:cf:8a:d7:17:23:5c:5b:9e:67:73:7e:7f:a6:3c:5c:c8:7b:
20:de:71:b2:8b:c7:23:6a:94:66:7c:eb:43:d5:6c:19:85:0e:
f6:9f:f2:ad:42:90:20:51:6b:a7:16:f1:0e:c5:9b:de:f0:47:
1e:47:bd:e3:a8:8c:3a:01:3d:48:7a:53:83:3a:b7:40:df:92:
f5:60:48:fb:19:65:1e:40:fb:e0:de:9c:53:20:13:74:cc:b5:
a1:64:97:2e:2d:0c:60:0b:85:ac:25:bf:a4:9d:49:c3:99:68:
b2:c5:8a:47:b3:2e:60:5e:b4:ca:df:f9:69:93:ad:f5:68:10:
dc:b3:26:e3:74:5c:3b:2e:11:48:2a:21:ee:94:7e:b0:2d:56:
66:87:fa:cb:92:a0:f0:1b:f5:6d:d8:f1:1a:3c:88:21:a1:5d:
ba:08:21:cb:05:99:74:93:70:ec:75:dd:24:32:82:4c:ee:6a:
02:3c:6f:cd:9c:5e:cd:e1:79:61:1a:6b:d4:f3:b2:6b:00:02:
ce:7e:88:d8:67:35:b6:ea:69:e9:7d:6d:39:20:0f:ec:ed:b6:
f9:43:bf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:58:23 2026 by rpki-client