Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: 9nQlbF0C9Qp4kNqCatuiE3W0GHo0kf+da8JxFISDzRE=
Subject key identifier: BF:36:89:06:5B:F8:17:07:49:59:FF:0D:6B:43:57:70:BF:31:CE:9D
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 019CAB3462C2B296DB8876324286A053BAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 0FB6
Signing time: Sun 01 Mar 2026 21:01:02 +0000
Manifest this update: Sun 01 Mar 2026 21:01:02 +0000
Manifest next update: Mon 02 Mar 2026 21:01:02 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: fTT9pznnwFjNv+tv27kJg3Zgsn6cg0KWTK+7Qw2QlZA=)
2: seylKk68qXKxhoBzXl7E0-tTkU0.roa (hash: 14ms6tysm87Rxm8W+2zvydPUm5MTtyrDqlszeDC47Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:62:c2:b2:96:db:88:76:32:42:86:a0:53:ba:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Mar 1 21:01:02 2026 GMT
Not After : Mar 2 21:01:02 2026 GMT
Subject: CN=bf3689065bf817074959ff0d6b435770bf31ce9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dc:bc:37:0d:f5:a5:a0:9b:6e:ab:5e:7a:5b:
59:9f:3e:b2:e2:d2:c0:f5:02:73:03:02:a1:24:d1:
a8:a6:63:b8:01:39:b9:ac:1a:68:97:cb:6e:80:aa:
d1:d8:3d:9a:4e:74:29:10:8a:43:53:f4:bc:22:fc:
db:2d:88:4c:2c:28:d9:6b:7f:14:92:43:5e:f3:c5:
ab:05:12:ee:ce:03:aa:8e:c9:f3:31:58:28:12:73:
07:f6:3b:9c:0e:3c:c9:ab:5c:b8:89:f2:35:a8:22:
88:51:f3:34:40:05:cb:27:b7:c6:90:bc:d0:8f:90:
26:11:0b:a6:a3:39:19:97:3f:85:ff:5a:04:4a:9d:
89:fd:d0:e4:f2:47:a0:35:d1:96:fc:69:f4:86:fe:
76:4f:8f:91:45:26:ee:58:f7:27:f2:c9:84:d2:fa:
22:eb:9a:83:93:a6:46:1b:98:ca:1f:96:d6:cf:8f:
1a:55:8f:34:58:24:cf:cf:73:81:31:c9:07:1e:82:
8c:0a:c7:ba:0f:70:ed:32:47:01:70:01:9d:e8:d5:
07:3b:20:97:01:ac:b7:4c:5a:5f:0e:83:8d:d4:56:
34:fc:30:d0:3f:bc:5c:8e:63:fc:a5:f7:f3:fd:be:
f0:42:18:bf:44:c5:0f:b4:bd:16:30:2c:6f:a9:a2:
7a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:36:89:06:5B:F8:17:07:49:59:FF:0D:6B:43:57:70:BF:31:CE:9D
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6d:82:9e:25:a5:d7:3b:69:80:c0:11:de:27:41:9d:aa:97:
3f:d0:78:fb:d5:67:94:51:10:7a:52:7a:21:8a:94:f3:e8:15:
60:6a:d5:f8:5b:85:29:94:a2:6b:1e:36:c5:7a:5e:a4:85:f4:
45:24:b8:65:4c:a5:25:63:1c:60:8f:ad:e0:b1:2e:61:ee:8b:
a4:20:02:65:74:55:e2:08:81:fe:73:34:02:74:28:d8:60:28:
ca:24:b2:7e:db:6f:04:d5:30:c7:99:e3:1d:29:b2:bd:ec:0d:
b0:31:be:b9:b9:6a:aa:f6:4a:bd:f9:96:e6:f0:9c:14:cb:15:
de:0c:b4:c6:c7:a9:39:83:a9:aa:1a:4b:2c:ce:03:8c:bb:3c:
fa:79:4b:9a:9e:11:6c:65:da:d9:43:20:45:65:29:5e:bf:45:
97:30:55:e6:f8:6b:b5:de:c4:a8:d3:fa:bd:6d:8e:27:0d:c4:
da:a7:b4:81:1a:95:7c:cb:02:05:dc:3a:93:d1:c3:fc:c2:77:
ae:9b:16:e9:c6:89:5b:6b:b2:a6:3d:ff:28:e4:0f:07:23:54:
0c:20:18:5a:0d:3a:c9:25:0e:4c:ee:6d:9a:4c:12:44:b9:fe:
48:6c:dd:c7:ed:03:51:2d:13:9d:8f:e5:c2:ac:02:83:d2:52:
8b:17:e6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:40 2026 by rpki-client