Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier: g7DqPbOdfMxEZ4QMD/n6RZJnRJmGm3zIsF1rsTJ+huU=
Subject key identifier: F3:29:E9:D8:48:2E:E9:85:3E:A5:45:2D:39:63:25:1F:09:94:6A:B8
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial: 019D9AE2FA7C4B87A058C0B1B6E1A3E8DC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number: 0756
Signing time: Fri 17 Apr 2026 10:00:59 +0000
Manifest this update: Fri 17 Apr 2026 10:00:59 +0000
Manifest next update: Sat 18 Apr 2026 10:00:59 +0000
Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: FAdvkfRQx1zd3sLNDrd28u5FGEF7XLsZ++mtZQ0oEnE=)
2: Ane3kVXJDwOnCcrwevPbQSwdhlM.roa (hash: GcB+WQ8GGExoABfliUP8dcPeehhXNomt7lmTMnKvHmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:fa:7c:4b:87:a0:58:c0:b1:b6:e1:a3:e8:dc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Validity
Not Before: Apr 17 10:00:59 2026 GMT
Not After : Apr 18 10:00:59 2026 GMT
Subject: CN=f329e9d8482ee9853ea5452d3963251f09946ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:2a:a6:d3:11:df:6a:b6:49:c4:87:45:ff:
cb:3a:06:3b:d7:1e:8c:c1:35:aa:c3:a9:76:95:64:
b4:08:68:3c:f0:fd:be:aa:b5:88:d1:0f:87:0a:0e:
f3:1d:f2:9b:af:50:c9:f4:f4:a5:d1:f6:a2:3d:c7:
39:f9:d5:07:87:47:00:f9:ad:3f:d1:0c:86:13:c1:
02:39:f9:e8:30:4c:2f:e9:32:e6:39:a2:a8:90:56:
c5:81:82:13:ec:ec:a7:96:67:9c:dc:39:2b:89:c7:
83:c6:ee:0b:83:45:a2:6b:dc:e4:4e:5d:86:b6:bf:
c4:65:77:7c:77:a4:ac:e8:a9:83:23:c1:db:c2:b4:
1b:3e:76:21:32:71:55:ae:58:8f:8f:6e:f1:66:bc:
54:1c:b7:5f:2d:75:f0:d1:31:91:80:2f:45:5a:eb:
1a:1c:ba:ad:54:37:3c:17:c5:00:b4:86:19:0a:e8:
9a:ec:88:ee:8b:ee:f8:75:4b:60:8b:6b:7e:f6:bf:
6e:4b:f0:c5:60:09:ce:38:86:53:9d:2d:5a:44:04:
aa:d9:8b:10:ee:d8:54:a1:38:30:81:e7:24:a7:e1:
34:95:c9:87:bd:e2:2d:5a:6c:e0:0f:8f:c5:41:b4:
0b:bf:93:9c:32:91:63:33:1d:c5:dd:3a:8a:41:c5:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:29:E9:D8:48:2E:E9:85:3E:A5:45:2D:39:63:25:1F:09:94:6A:B8
X509v3 Authority Key Identifier:
keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:38:2f:c8:43:4b:73:42:9b:8a:d1:79:5d:90:b1:05:0a:d2:
10:bd:8a:8f:83:ef:a0:cf:ec:60:b2:a4:ce:09:d9:1d:61:4b:
54:1c:3d:58:49:d8:4b:a7:27:6a:69:14:78:8f:bd:d0:a9:f4:
37:ff:ad:1b:e6:76:fd:07:07:6f:f4:d5:01:e4:ca:2d:36:ad:
40:56:48:c3:d9:b6:90:4e:a9:59:96:7a:2d:ef:c5:cc:60:61:
77:57:c8:0e:a6:72:05:21:0f:e9:b6:ed:7f:a2:75:ca:5e:1d:
ab:91:c8:36:47:e7:85:10:25:d6:d3:56:c0:a6:6c:52:31:1a:
2a:d8:63:b1:62:79:3d:d6:59:db:33:de:6c:ad:24:e4:df:8d:
2c:04:30:c6:4f:83:4f:c4:35:4e:e6:b1:d4:6e:16:c6:6f:e5:
c6:44:af:8f:49:6e:57:df:26:02:6e:62:68:e6:4a:fc:86:e8:
a9:99:a4:05:65:8d:98:22:9c:40:0b:98:1b:f2:6e:5c:21:db:
9e:a6:53:65:02:ba:1d:85:14:d8:bf:03:9e:d4:9d:d9:ac:0c:
95:da:f9:7d:50:40:7a:98:f3:24:95:c8:71:01:a5:1f:3e:e1:
d4:4f:da:1c:18:04:5d:0a:9c:d5:7a:bb:72:c4:c3:7a:e8:85:
94:74:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:06 2026 by rpki-client