Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier: mnlFS19DupeQMBMEz+9W8iJIaYwauODKcYewj/+vAM0=
Subject key identifier: CC:B7:60:41:E4:82:07:5C:DA:F1:0E:86:39:89:1A:C5:11:58:A9:CD
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial: 019CAD5A19FC1A559AF3576AC7431E8783F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number: 06DB
Signing time: Mon 02 Mar 2026 07:01:29 +0000
Manifest this update: Mon 02 Mar 2026 07:01:29 +0000
Manifest next update: Tue 03 Mar 2026 07:01:29 +0000
Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: q+zYbI+eNoM+G2w/4b6oOZyKrWJjXVjU9qdSN6SXjhg=)
2: Ane3kVXJDwOnCcrwevPbQSwdhlM.roa (hash: GcB+WQ8GGExoABfliUP8dcPeehhXNomt7lmTMnKvHmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:19:fc:1a:55:9a:f3:57:6a:c7:43:1e:87:83:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Validity
Not Before: Mar 2 07:01:29 2026 GMT
Not After : Mar 3 07:01:29 2026 GMT
Subject: CN=ccb76041e482075cdaf10e8639891ac51158a9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:ba:55:7a:43:49:0d:55:c9:de:4e:19:c1:
c6:cf:3f:86:7d:fd:41:ec:df:23:c7:bb:00:97:ae:
81:7b:cf:24:66:7f:d7:5a:22:69:cc:1f:5f:9b:65:
18:df:6a:12:4b:9e:28:14:10:aa:82:40:5b:7b:fe:
f0:fb:52:48:dc:c6:0e:12:1c:3d:a4:5c:d8:a9:c7:
cd:dd:87:2c:b1:48:30:de:82:20:e1:2c:25:e7:6f:
56:9f:2e:62:23:13:2e:b1:dd:8a:8b:3d:8b:d6:c2:
69:be:ae:62:4b:8f:a8:d6:88:c6:59:53:c1:14:31:
c1:6a:39:bf:6b:0c:19:0b:4c:c1:1e:87:f9:07:02:
f0:93:77:15:32:81:bf:64:4a:63:15:5d:60:9c:c1:
3c:65:0c:33:a0:92:82:37:2d:4b:a1:9b:70:33:68:
50:74:12:f4:27:5e:60:de:98:04:2b:09:7c:84:e8:
4a:90:07:9e:c5:d6:97:75:30:94:4f:5c:8c:b7:70:
3f:28:93:31:5a:30:c5:46:bc:f1:c5:42:37:28:7d:
91:fb:d6:ef:46:09:b6:58:88:f8:8c:a8:c2:88:b0:
13:8d:4e:fc:8d:6e:70:7c:56:a2:d8:4d:dd:1e:f5:
0c:fe:b1:2c:86:c2:42:44:1b:17:2d:dc:fe:23:25:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B7:60:41:E4:82:07:5C:DA:F1:0E:86:39:89:1A:C5:11:58:A9:CD
X509v3 Authority Key Identifier:
keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:03:e3:b5:6e:89:36:f3:f8:fb:64:9c:96:bd:5b:3c:73:8b:
ac:9a:b0:d8:29:8f:94:74:62:b3:b3:04:a5:dc:55:3c:c9:27:
45:94:f1:12:35:18:ee:48:73:03:89:f4:f0:6c:02:2c:97:f7:
91:e3:08:a8:dc:eb:03:a6:65:cd:ad:15:3f:f5:14:60:7d:69:
25:0d:96:90:62:6c:c8:c7:dd:04:cc:1e:a8:88:9e:01:25:9b:
7e:3f:0d:2f:5c:1d:4d:de:15:3f:f7:d4:7b:8f:a4:8b:2f:8d:
7d:5e:33:4a:c8:26:16:36:9f:c9:df:8e:10:10:e5:32:32:df:
33:97:f8:f1:21:9f:de:26:9e:f0:1a:d6:16:8f:94:c5:9e:2d:
e6:89:26:5c:e0:57:1f:72:11:3e:85:90:5d:84:61:5a:52:07:
ce:12:e5:02:3d:a2:01:b7:12:07:fd:ab:00:90:af:c9:98:b7:
d7:76:56:7b:78:a1:d4:71:1f:ec:b5:09:45:57:73:1d:aa:67:
d4:66:70:4d:61:d2:7b:2d:52:73:c6:da:89:0a:ec:bb:87:96:
41:8f:7f:58:bc:c3:e1:86:44:b3:b0:a0:35:ea:60:07:cc:e7:
e1:51:fb:cb:8b:34:9a:b2:6e:3f:fa:e3:b9:b1:06:89:4f:3d:
84:24:f6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:45 2026 by rpki-client