Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier: m8FJR3nTj7iNhIFkOsYvPS2WR8F+5JH32wOu/18qZmo=
Subject key identifier: DA:65:4D:F0:4D:14:1E:8B:EB:0B:D9:5A:84:90:FC:AE:96:36:7E:1B
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial: 019CAC4734F5D150BB5D385BDC0829C6246B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:01:13 +0000
Manifest this update: Mon 02 Mar 2026 02:01:13 +0000
Manifest next update: Tue 03 Mar 2026 02:01:13 +0000
Files and hashes: 1: 5M_dzDXzTB3Y0brCjbUvwSZRed8.roa (hash: IY7K+wfx2bW1m/Ix+hlJ62XrT+AVkyx4H7HyP9JrVMM=)
2: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: CrPhykCZCPPq+0xavRhby7AjIE01H0k/zZmijhW/GiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:34:f5:d1:50:bb:5d:38:5b:dc:08:29:c6:24:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Validity
Not Before: Mar 2 02:01:13 2026 GMT
Not After : Mar 3 02:01:13 2026 GMT
Subject: CN=da654df04d141e8beb0bd95a8490fcae96367e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d6:aa:29:a0:82:2b:fa:b8:42:65:a5:9a:43:
ad:65:da:89:32:6a:03:72:d3:8a:87:26:7f:d4:3c:
7e:d7:f3:bf:f7:98:7b:db:d1:c2:7b:27:7a:e3:09:
b9:d7:b8:2f:c6:95:e7:a4:87:87:c2:81:85:55:d3:
81:d3:71:27:97:15:37:97:12:4a:3a:45:92:6e:9b:
7e:1c:0a:73:f5:86:42:f0:5c:55:01:6b:98:a1:f3:
90:13:86:64:3c:44:35:4b:0e:7e:a4:c9:51:ae:ae:
4b:e9:e7:f9:d4:da:20:62:2d:7c:54:5e:6e:d5:2f:
e6:e2:0c:d9:75:ef:22:65:fe:74:84:0a:aa:18:70:
4e:54:b4:59:06:2d:40:91:47:17:1b:70:9b:31:0b:
0a:21:42:f4:50:1d:e8:08:03:e4:16:ab:68:b9:5c:
a0:8d:09:8f:6a:d2:29:10:bd:f1:c7:9c:5d:03:8c:
8f:82:43:9e:be:3c:a4:53:24:f7:f1:46:80:75:02:
1f:ae:dd:c3:3d:83:14:e5:df:c6:f0:9e:bc:7b:63:
bb:df:c2:20:1f:cb:fd:7f:84:ee:bd:a6:c1:d2:5e:
aa:7c:57:58:cf:a6:f6:69:0f:7e:45:3e:51:3c:cf:
54:e1:46:64:d6:b3:39:b4:5c:a7:29:a1:b6:9e:5b:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:65:4D:F0:4D:14:1E:8B:EB:0B:D9:5A:84:90:FC:AE:96:36:7E:1B
X509v3 Authority Key Identifier:
keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3e:62:b7:14:08:7d:69:0f:3f:05:88:13:20:6f:f3:e0:a9:
bd:5f:d6:02:1d:99:c1:cb:12:9a:01:a5:57:76:0a:5b:7d:29:
42:08:52:62:c5:f5:6d:c1:74:8f:c6:51:28:b5:35:7b:56:35:
91:e2:8c:c0:68:94:61:d6:c4:c8:92:d9:26:23:20:28:2e:f2:
3f:c1:e2:da:a8:ae:de:3a:37:24:93:52:f3:0b:97:46:f5:d4:
e3:36:2c:fa:8e:48:74:eb:fc:f9:f0:75:ca:bc:ea:9b:35:7f:
b5:de:c0:ff:5b:07:30:de:50:9d:74:89:f4:e3:56:4a:9c:4c:
a8:40:92:e6:23:87:d1:db:ff:c0:f6:64:63:a5:d4:5c:bd:8a:
b3:12:97:44:b4:23:44:42:92:dc:28:47:f6:d5:4a:2c:9f:c6:
c6:6b:78:03:f1:55:7c:7e:21:70:5f:0c:f7:c8:96:73:9f:12:
2d:37:70:35:c4:8b:45:03:b2:35:cc:ed:2f:e9:55:8c:ca:3b:
81:5d:19:cb:eb:16:d5:c1:c4:c5:0e:86:83:d3:80:f4:86:90:
e7:6c:dd:e5:14:35:84:65:92:16:4b:88:2c:28:ad:bb:55:a8:
bd:61:1d:23:c2:70:dc:87:36:95:de:45:2b:47:90:37:a6:a6:
81:ad:94:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:02 2026 by rpki-client