Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
File: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft (raw, json)
Hash identifier: KgP0D7ZqDNN46AnI0mjn7zDfUtd0pCqe9EtXLLn545Y=
Subject key identifier: 70:72:2A:BC:29:39:6E:63:F5:0B:FD:EC:AA:93:17:B2:AC:F2:BB:A7
Authority key identifier: EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
Certificate issuer: /CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Certificate serial: 019CAFB56F517A1FEFBDA9E4E772C9107680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 18:00:29 +0000
Manifest this update: Mon 02 Mar 2026 18:00:29 +0000
Manifest next update: Tue 03 Mar 2026 18:00:29 +0000
Files and hashes: 1: 1LtQ8yyQTy0Z9FcFRr_CRKY4wmA.roa (hash: ZIqC9QiveD2lOUDRGF1cl6cKWZLfSdgfnE3L9iB+Xuw=)
2: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl (hash: GrA1yj8GFjiwDfGRvOAYs1UZvXpBCC/OrEVw+IaIq8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:6f:51:7a:1f:ef:bd:a9:e4:e7:72:c9:10:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Validity
Not Before: Mar 2 18:00:29 2026 GMT
Not After : Mar 3 18:00:29 2026 GMT
Subject: CN=70722abc29396e63f50bfdecaa9317b2acf2bba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:79:57:da:48:f9:8c:75:0a:8e:6e:e5:5b:c7:
14:03:76:6c:07:46:e4:ad:96:dd:7c:f8:55:48:89:
11:61:b4:0d:dd:63:fc:d0:99:a5:2b:ae:c4:ff:2c:
79:2f:a6:89:06:98:cc:95:c4:dd:12:f3:78:b3:cc:
2a:d5:8d:fb:c6:41:cd:b4:14:ac:4a:0f:e0:b9:62:
a4:c4:a1:d0:90:e6:e7:a9:d8:80:fd:dc:41:fd:2f:
f2:ff:8b:c5:0f:28:5f:b0:89:67:5d:94:d2:43:2a:
89:e3:54:0f:b4:bf:49:60:8f:65:67:fe:e4:c7:26:
7f:28:f3:ff:76:6d:98:09:58:32:10:c1:de:9d:55:
57:f0:0a:c8:e1:6b:85:58:68:6e:ea:58:20:c2:a2:
6a:72:d6:88:f2:5f:3a:45:e8:08:94:3a:79:d7:db:
1e:00:96:96:a5:f5:67:e7:16:ff:75:0f:e3:cd:0b:
7c:61:68:40:8c:7b:f0:24:36:e7:73:38:02:cf:d2:
58:82:65:90:aa:ab:24:b6:de:bb:9d:90:24:ca:ca:
a8:26:3c:62:12:8d:9a:42:10:4b:04:aa:60:b6:6f:
e7:9a:74:6a:9c:ed:c5:7a:5b:ac:56:72:30:13:33:
e7:17:18:76:1e:f9:0e:1e:b1:86:77:af:85:1a:93:
8f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:72:2A:BC:29:39:6E:63:F5:0B:FD:EC:AA:93:17:B2:AC:F2:BB:A7
X509v3 Authority Key Identifier:
keyid:EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:53:dc:77:41:c1:00:9e:f4:f4:fc:9c:05:d8:96:d3:24:79:
cc:8d:34:47:5e:76:68:39:4a:b1:81:bd:e9:5c:0f:e1:1d:ab:
4e:87:5e:ab:d4:75:4c:69:38:51:2f:1f:8e:31:c3:36:df:66:
e0:93:17:b0:cd:b4:1d:73:3b:b3:2e:56:06:c6:bd:c5:5d:3d:
b9:4c:a3:5c:2d:1a:60:11:f0:9b:06:ae:9c:59:a0:60:09:c0:
3f:d8:0a:19:02:77:87:fa:9f:ab:19:1a:d0:6c:0a:85:ef:e7:
71:b1:c3:eb:88:a0:26:e1:27:84:bd:ba:d0:26:22:ce:da:1d:
fd:57:f2:8b:ac:14:bf:f0:28:65:33:2e:85:37:50:f6:40:0a:
da:49:cc:cb:b1:b4:05:8c:c4:8b:8e:ca:a4:df:49:cf:8d:dc:
6b:34:01:8d:c6:a0:5b:88:5e:91:c1:b0:dd:ed:8d:b0:32:74:
e8:96:41:ff:bc:33:df:95:1e:7b:84:61:e9:a4:e3:db:8e:69:
c8:c9:43:3a:cd:b9:8c:9b:0a:80:73:85:7a:f7:49:d1:36:84:
e8:e3:14:77:16:f5:02:14:53:36:af:88:d4:ec:f2:7a:84:ef:
80:1f:f2:ef:34:9b:70:20:de:2b:97:8b:ff:fa:88:b1:f3:e1:
22:ed:66:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:31 2026 by rpki-client