Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: yjvD6zm5j/TTGcF26KFAcKi5C4ASFarl9lF41FMW+cM=
Subject key identifier: 92:F0:11:A3:0D:C5:B6:83:D0:DF:5E:FF:5E:EC:36:D2:E8:7C:39:8C
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 019CAD5A778050887EB6A1F5F24A9FA8BEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 07:01:52 +0000
Manifest this update: Mon 02 Mar 2026 07:01:52 +0000
Manifest next update: Tue 03 Mar 2026 07:01:52 +0000
Files and hashes: 1: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: lT6jhRhJGEt/ZtFShkdq1R6jEYDICkWH74vB/TNIbHQ=)
2: lBKb95x_7BAv49LYfrO19Hosuas.roa (hash: u8R/9/gVEM8wPOouFpMqLvJteQ0bg4i6gAiI/GzejGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:77:80:50:88:7e:b6:a1:f5:f2:4a:9f:a8:be:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Mar 2 07:01:52 2026 GMT
Not After : Mar 3 07:01:52 2026 GMT
Subject: CN=92f011a30dc5b683d0df5eff5eec36d2e87c398c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:8a:24:64:48:06:c3:b4:03:3e:c5:4f:47:
78:cb:2e:5e:24:b3:66:8b:df:26:1a:87:c3:53:68:
09:c7:24:fd:99:61:ac:4f:5d:a1:15:63:a8:3b:59:
77:81:98:c2:0a:d8:18:05:eb:1c:7b:86:ec:79:4c:
b7:ec:b0:7c:a1:39:b8:2e:b8:49:a9:ac:56:ca:4a:
c7:fa:25:d5:c2:cc:75:b6:f4:b1:f9:72:94:21:cb:
9b:ff:d5:d8:4d:9a:2c:e8:61:5d:b9:fe:17:72:c7:
80:aa:9a:48:4c:89:ff:e7:09:3d:2a:4f:c1:27:52:
8c:9a:34:6c:42:8d:63:99:46:d1:59:54:20:8e:ea:
fd:b0:23:19:e9:4a:67:b4:50:7c:89:ee:27:54:02:
43:24:ec:3a:24:1f:44:b0:65:0c:50:54:72:d9:02:
b3:f6:73:c9:5d:d8:6c:86:0c:59:db:ca:ab:15:db:
4f:b6:6c:50:d9:19:90:7c:59:6f:24:e0:9d:74:48:
57:46:ca:10:da:0e:a3:9c:58:24:f1:2f:93:a8:0e:
c7:7c:75:d9:97:3f:2c:6b:5e:e3:63:bd:c5:ac:7d:
29:6b:9c:0f:43:02:96:65:bc:1a:0d:09:53:7f:3c:
8f:7f:3d:a9:5f:12:d9:84:f7:f1:6f:94:ac:62:58:
77:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F0:11:A3:0D:C5:B6:83:D0:DF:5E:FF:5E:EC:36:D2:E8:7C:39:8C
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0e:84:40:c8:bf:e0:6e:d1:50:ff:94:0e:ec:34:0a:0d:97:
46:05:f9:ad:64:a1:bb:7e:ed:93:be:66:0a:63:65:9d:30:30:
81:b3:5b:8b:20:8c:81:b8:90:18:29:04:e8:27:c2:4b:d7:f7:
12:0a:d1:71:3a:56:a0:78:d3:09:b0:5d:dc:39:d9:3b:cf:d6:
2d:d0:55:b8:b4:69:c5:cf:a7:b0:9c:e2:7e:7b:07:e9:67:40:
f3:06:6c:0a:f3:09:d8:3b:c4:6c:85:06:04:02:76:c7:59:cc:
03:28:a3:e9:1b:b0:db:36:17:fd:ef:51:b7:5c:ef:1d:42:7e:
20:66:c9:a3:45:20:48:e7:8e:e2:dc:b7:f1:4b:e9:79:2d:42:
7f:5f:8a:7d:45:b1:77:ce:e5:96:4f:91:af:b7:25:35:f6:ce:
8b:cb:d8:95:bf:e9:9c:1b:30:e3:6c:20:32:d2:7f:be:b5:38:
95:12:8f:4e:f9:e6:01:2c:14:a0:36:17:aa:19:ef:20:75:8a:
d0:02:fc:16:e7:30:72:bb:f0:da:89:ed:7d:d4:ea:77:54:bf:
ed:65:f8:6f:d3:31:4f:20:47:8e:b4:a2:bf:5f:db:1b:cb:eb:
a4:7a:95:9f:7c:6d:eb:ce:80:b6:a7:0a:c0:0b:bc:41:79:86:
a5:8d:5f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:10 2026 by rpki-client