Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
File: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json)
Hash identifier: XlYPPG+1JiPDRbsf7t3cpYOrqnAxIjeI/RCAgkhbEB8=
Subject key identifier: 6C:A1:6D:0D:6B:A0:8C:34:87:5F:B3:21:05:DF:A3:3D:4E:D9:92:6D
Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Certificate serial: 019CACB53A8BBA36F2BE2B488905D93B61DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
Manifest number: 05BC
Signing time: Mon 02 Mar 2026 04:01:23 +0000
Manifest this update: Mon 02 Mar 2026 04:01:23 +0000
Manifest next update: Tue 03 Mar 2026 04:01:23 +0000
Files and hashes: 1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: YnHVoMWMNJ1iFCQBLvHi5DsTkEjkbVIQNXcN1TjMa7k=)
2: l1mFVAOuxHZKBwMbg64rZnUC-1A.roa (hash: b+iEU9Au8tIP5RGBvo59a7Rag467Ip6uQFWhSxkco+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:3a:8b:ba:36:f2:be:2b:48:89:05:d9:3b:61:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Validity
Not Before: Mar 2 04:01:23 2026 GMT
Not After : Mar 3 04:01:23 2026 GMT
Subject: CN=6ca16d0d6ba08c34875fb32105dfa33d4ed9926d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:0d:6a:a6:14:4d:5c:40:06:72:45:6b:38:
e8:73:c4:c0:56:76:83:e6:d4:09:f7:e0:88:7e:89:
b7:75:a3:30:7d:c4:ea:56:be:31:0b:fd:3f:c1:6e:
4a:8e:6c:f7:da:4c:dd:d4:0e:e1:52:e9:b6:4a:98:
a3:30:d6:43:78:f8:b0:b3:fa:15:de:5a:f4:fb:24:
3c:44:cd:59:01:be:d0:30:68:eb:0d:af:80:c0:69:
fa:de:84:50:97:4f:73:63:77:30:ee:52:0f:78:1d:
2f:4f:0f:21:91:8d:b7:69:8b:81:5f:2a:dd:23:ba:
d5:3e:9b:c0:b6:31:e1:36:38:04:dd:8c:ce:c8:3d:
e6:77:e5:6c:70:9f:f2:3c:50:30:56:68:ee:6a:88:
ee:68:a5:a0:12:34:33:df:7c:8e:a7:df:34:03:1d:
fb:eb:01:27:db:da:2e:44:21:83:9c:ca:ec:b4:00:
4b:64:96:b4:05:9c:f1:b2:d7:61:b2:5f:f9:b7:2b:
0a:7f:53:52:d9:61:76:7b:fb:84:c6:a1:ae:32:47:
f6:93:e8:1d:92:31:03:ab:b5:72:ef:9d:13:ee:51:
6e:3a:31:1e:9c:09:db:30:74:8b:a9:fc:51:7a:ee:
4f:41:2e:07:4c:bc:30:b7:f2:76:4b:a7:2d:35:ac:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A1:6D:0D:6B:A0:8C:34:87:5F:B3:21:05:DF:A3:3D:4E:D9:92:6D
X509v3 Authority Key Identifier:
keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a1:85:b2:fa:c6:81:ca:56:39:86:97:56:55:c2:b3:0b:3f:
14:57:bf:31:81:fc:09:8a:6d:a4:95:c6:5f:a2:ef:fa:6f:25:
a8:e8:29:9f:c8:bf:75:e5:13:d4:6b:e8:46:4d:59:85:41:a7:
90:dd:b7:92:0a:08:d4:0e:f5:3d:a7:f0:75:21:98:bd:13:1e:
46:dc:1c:8e:62:a6:4b:d1:a0:f2:4a:4a:e3:80:fd:84:ad:96:
f7:02:ec:b9:f0:4a:32:1c:a6:fb:4d:95:ea:fb:41:35:fe:12:
83:4d:c0:e1:32:0f:07:c3:65:e0:c8:cb:36:e6:da:06:8a:37:
9b:7c:ff:81:9a:87:e2:cf:38:68:b2:a2:e9:c8:74:91:d1:7c:
35:75:31:20:cf:f2:2e:a2:9f:d6:fe:4b:f3:68:27:ed:16:15:
32:33:e0:21:24:70:68:fd:b2:14:4b:e1:17:af:bc:a9:e0:c5:
d6:e4:50:6c:6a:e1:54:10:41:28:69:76:9e:3d:8f:12:b9:c9:
e8:4a:57:52:24:e2:c3:ad:85:b4:9d:74:8b:8b:24:26:a3:5f:
07:72:51:ce:a0:69:17:77:52:f6:29:e8:7f:0f:33:0a:d4:24:
a9:37:c2:49:cf:32:9f:38:65:5f:7f:ce:7d:5e:46:8f:4a:39:
cc:43:f6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:46 2026 by rpki-client