Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
File: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft (raw, json)
Hash identifier: TBmP02Z2rzhe5Z4Kkz1c7bifz7AIaf4W3D1+EOLcS58=
Subject key identifier: 4C:9B:2D:47:B5:F5:89:B9:E4:85:92:52:9A:5C:BA:C3:8C:CB:0F:64
Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Certificate serial: 019CABA1E7E5623D4B767D9015D4DE011E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:00:40 +0000
Manifest this update: Sun 01 Mar 2026 23:00:40 +0000
Manifest next update: Mon 02 Mar 2026 23:00:40 +0000
Files and hashes: 1: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl (hash: UKuTiGmV+acEOR6UoPX2KhCpbS7OWHK6VNeR3q2nIAc=)
2: R-TR2lMlqd-ajoqANh8z83K14Gg.roa (hash: LL4D//R1+/zSqsNzLuVii4RDHBXLV7iA5YOQo+LHbz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e7:e5:62:3d:4b:76:7d:90:15:d4:de:01:1e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Validity
Not Before: Mar 1 23:00:40 2026 GMT
Not After : Mar 2 23:00:40 2026 GMT
Subject: CN=4c9b2d47b5f589b9e48592529a5cbac38ccb0f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:c5:03:d1:89:4e:74:29:0b:76:c5:88:86:
42:ce:cb:84:73:78:ea:9c:0c:f3:bd:55:70:c0:fc:
58:b1:98:6c:08:7a:e9:51:a2:a4:d8:54:a6:29:9e:
18:8f:b2:88:db:b3:f7:e8:9d:25:e2:07:01:11:b3:
ce:e3:64:1d:b7:36:74:3e:ee:0c:fc:e1:a4:a3:f6:
68:ba:77:3c:84:c3:49:ad:4f:c4:31:49:49:25:f8:
63:c4:68:6c:4e:f6:61:7d:05:df:92:df:08:82:32:
be:b5:ae:62:44:c1:41:17:8b:0b:6e:94:b4:7e:aa:
8f:ba:c1:41:d6:5f:8d:ff:6e:9b:f0:b4:2d:04:35:
2d:cf:4a:6c:f3:e2:74:c3:56:ce:1c:3a:2d:ce:7a:
a2:a1:e5:c2:c9:0c:7d:9a:98:9a:c1:d2:06:1d:be:
a4:6c:07:51:70:01:75:44:4f:a8:fa:86:1e:7a:ad:
c2:f4:37:71:f0:db:91:90:d9:e3:1a:d9:de:84:4d:
32:f4:22:37:77:3e:aa:cb:ee:3b:92:0e:76:8b:d1:
e3:d0:f5:82:6f:6a:5f:b5:50:ab:07:7d:e4:e1:a1:
0c:60:53:3d:f1:b5:f7:dd:66:92:ff:60:47:56:ca:
c8:2e:04:ac:e2:c0:86:28:c1:6d:95:3a:32:a5:8d:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9B:2D:47:B5:F5:89:B9:E4:85:92:52:9A:5C:BA:C3:8C:CB:0F:64
X509v3 Authority Key Identifier:
keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bd:f7:7a:6d:e3:85:4e:a4:a8:0a:f0:ea:88:28:27:4d:eb:
a7:b8:ea:bf:78:84:76:df:ae:07:dc:37:50:2b:19:6c:de:72:
5e:90:5d:12:3c:c9:1c:c8:70:d2:29:dc:7e:7c:a2:ab:cf:65:
cf:e2:c1:d4:7b:fa:30:2b:81:10:e6:ce:80:f8:a3:d2:71:ae:
95:03:47:75:22:b1:3b:69:87:5c:16:0c:6a:11:28:4b:19:3c:
53:83:aa:d6:6c:f0:53:10:78:79:7d:0d:b4:de:1c:e2:9b:a6:
b9:73:a2:4b:b4:b3:3f:56:7a:54:b7:b3:7f:88:d7:d8:10:f1:
ad:13:95:25:76:77:c0:dd:da:43:a6:ee:c0:02:aa:72:ee:ad:
2b:68:89:b4:91:41:f2:7a:b1:70:6e:46:69:3a:ed:f9:f0:bf:
a1:ba:86:46:eb:45:e7:81:7d:f4:a0:94:0b:00:0f:59:44:82:
aa:be:2d:0d:02:38:a2:a4:62:17:a3:55:b4:8f:54:11:ea:ab:
73:a9:9e:77:04:b8:95:88:e9:ed:6b:76:4b:3a:d8:b5:24:18:
05:11:1b:61:81:c1:2c:e2:dc:e2:14:28:df:4f:fc:08:27:df:
4b:83:d8:2f:18:83:29:03:23:6f:0e:ad:1e:7c:c1:84:76:f8:
a8:34:18:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:41 2026 by rpki-client