Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: i8Gmalq/vKc+7Po7Zjr0JHoqwLq0YFZYsG6DPICy9n4=
Subject key identifier: 8E:AD:1E:32:93:CE:34:D7:70:A9:19:9F:01:51:30:53:1E:05:20:B7
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 019CAD5A5C8B0175348D7313A387497DBB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 0F28
Signing time: Mon 02 Mar 2026 07:01:46 +0000
Manifest this update: Mon 02 Mar 2026 07:01:46 +0000
Manifest next update: Tue 03 Mar 2026 07:01:46 +0000
Files and hashes: 1: 1-kxWXv05LSEshrBJnjD59T0FQ7Q.roa (hash: rHapWpK9pigcf/GGIQp1nmEJbzSoQssokoPt9LrVksY=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: QOKs0vuSaPMN0b2cyBiwWXlMLT8xBywSHh8NFN7mv/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:5c:8b:01:75:34:8d:73:13:a3:87:49:7d:bb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Mar 2 07:01:46 2026 GMT
Not After : Mar 3 07:01:46 2026 GMT
Subject: CN=8ead1e3293ce34d770a9199f015130531e0520b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:c5:4b:36:8c:3a:89:b8:d1:da:e2:de:f1:
76:95:c1:15:f6:a6:c5:89:e3:14:3a:74:34:a6:2e:
42:f2:92:ac:93:e7:d1:e3:26:f4:c2:20:29:1b:c2:
ff:f3:4b:2d:29:b4:b7:93:89:5c:dd:66:19:01:52:
f6:6e:17:40:88:c5:80:0d:8e:b8:a4:b8:f7:2c:fa:
16:60:26:35:22:57:90:02:ef:78:bf:64:ec:de:ff:
e4:92:6f:7c:f5:0a:3a:ce:2a:cb:fe:84:80:2b:71:
c8:45:e9:5b:a7:6b:17:49:1e:2c:a1:ac:fc:39:1e:
81:51:ad:4a:a6:2d:27:37:1a:e9:5c:01:93:15:7e:
44:a0:b4:f1:50:c1:ae:3f:b0:96:57:38:44:c3:8f:
2c:c6:29:a0:bd:e1:8f:79:ee:b9:04:02:29:ae:70:
0a:c0:61:f0:22:54:2d:89:16:20:d5:77:02:1b:ac:
d8:79:3b:7d:17:d5:a9:93:d1:a6:38:f9:48:71:2b:
b3:2c:ce:55:c3:db:82:c7:ae:33:95:d7:8f:78:04:
f0:a6:0a:5d:64:c4:6b:4b:72:b9:49:3a:b5:a7:a0:
a5:09:28:5b:f0:32:73:92:39:89:8b:1b:0f:86:58:
e9:6a:ef:85:c5:29:b7:05:b6:8b:76:ae:cf:02:35:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AD:1E:32:93:CE:34:D7:70:A9:19:9F:01:51:30:53:1E:05:20:B7
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:48:a6:86:98:9d:fc:77:9c:82:2c:4d:8d:c6:b3:cd:b2:8b:
9d:f5:00:92:47:84:54:c3:45:c9:67:05:2e:d6:8e:87:f3:8f:
fa:56:9d:c7:e2:3d:72:5d:ee:ee:78:bd:52:ff:a6:2c:0e:c5:
23:1b:fb:b4:b4:8d:05:51:db:ef:2c:0c:ca:c8:06:13:94:7c:
ca:f5:3a:6d:bb:06:3e:d2:9a:53:d8:34:2b:31:0a:c7:15:36:
c7:13:ae:c6:24:7b:9e:cd:c0:b0:09:53:05:35:15:bd:02:a8:
f3:5e:d7:5c:9d:74:31:67:da:46:b7:cf:cd:0c:9e:e2:f4:ad:
aa:6d:e6:0a:d8:63:a9:9c:0e:ba:d0:40:65:90:7f:a8:1f:2f:
90:4c:60:bc:bd:b1:8e:43:31:fb:5f:5d:ef:27:d8:68:c7:1a:
93:8e:4b:27:a2:c3:c2:e3:d4:f6:59:dc:07:82:b1:ba:40:d4:
74:56:54:1b:3d:b1:2f:8f:65:c1:e5:d1:a7:1e:68:73:e5:66:
b6:db:3d:da:89:a1:e5:de:42:38:b5:f8:04:cc:c9:1d:25:a5:
cb:f5:26:15:57:03:15:a3:79:12:ac:14:3d:75:30:5b:1c:32:
4d:27:c6:cc:2f:f3:5b:7d:40:34:58:10:45:af:59:23:e7:d3:
20:13:6b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:51 2026 by rpki-client