Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
File: 7iNCg3Pc6KX5f0XvxsKLn7581U0.mft (raw, json)
Hash identifier: zHFyPB3ixK4XHS2SO7Hcx3lQaF41J2B8eYOSsi8gRBo=
Subject key identifier: FF:CE:95:50:55:26:D9:27:05:AA:AB:D6:A3:4A:2D:A8:C4:E3:19:C2
Authority key identifier: EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
Certificate issuer: /CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d
Certificate serial: 019CADC73FA4E0F9774C0F4F871FDA61690F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
Manifest number: 01AF
Signing time: Mon 02 Mar 2026 09:00:42 +0000
Manifest this update: Mon 02 Mar 2026 09:00:42 +0000
Manifest next update: Tue 03 Mar 2026 09:00:42 +0000
Files and hashes: 1: 7iNCg3Pc6KX5f0XvxsKLn7581U0.crl (hash: oW9uhIIasiXaLsRj/LTYWk57eKO0ySgy8houD9hq/BM=)
2: qwQxCub0ZLxdSIPTyyt0hid0rjE.roa (hash: 45em9x7vt23Yzt9V9VCNiHhaJfkIP4nZW7OBnn0WqDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:3f:a4:e0:f9:77:4c:0f:4f:87:1f:da:61:69:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d
Validity
Not Before: Mar 2 09:00:42 2026 GMT
Not After : Mar 3 09:00:42 2026 GMT
Subject: CN=ffce95505526d92705aaabd6a34a2da8c4e319c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:d8:41:4f:94:93:00:a9:48:b6:e4:48:6f:
0f:e1:10:34:d4:64:57:0d:05:7a:a6:8f:9b:0d:4e:
09:1e:92:6f:8c:32:d3:8a:77:aa:91:43:4d:b7:81:
41:b0:c6:17:88:a0:d8:ad:9c:1c:03:3a:10:94:b0:
13:ab:04:9f:60:9f:ea:da:7e:ad:f1:ff:c7:61:ab:
6c:42:37:34:7f:18:e2:4f:aa:32:27:f2:d0:3f:aa:
ea:2f:92:8d:61:da:bd:3e:81:b4:a1:03:0d:c8:77:
f2:7e:3c:42:3d:0f:39:ee:ea:32:43:19:68:20:b2:
1c:f2:1f:9d:e7:3c:4f:89:19:ba:da:c0:d5:2d:15:
07:31:d3:4c:2d:a3:13:3d:0a:ae:1e:02:e5:43:4b:
4f:a8:02:4a:17:65:5a:ea:79:b7:71:1e:5d:c8:28:
1c:12:5c:d7:1a:2d:8f:ee:9c:b6:21:3f:db:ce:a5:
ff:bc:ae:18:dd:42:57:f3:f6:18:b3:2f:42:f7:b2:
7c:4b:78:e5:78:c9:cd:eb:4f:b1:ca:63:82:5e:b3:
05:c5:e6:30:94:37:21:c6:df:8c:f1:00:5b:1f:d7:
da:70:96:7d:c3:81:48:db:a2:6d:3a:88:28:6d:e5:
33:bb:0a:5a:49:d7:1d:f4:2e:09:c1:9d:21:fe:41:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CE:95:50:55:26:D9:27:05:AA:AB:D6:A3:4A:2D:A8:C4:E3:19:C2
X509v3 Authority Key Identifier:
keyid:EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e5:92:3b:6b:f5:e1:d6:37:5a:9e:49:4d:4c:50:e3:07:84:
4a:47:af:10:21:53:ab:c2:c6:b7:bf:24:a8:33:2c:7c:78:b0:
0c:56:1a:0b:99:23:7a:bf:8e:af:f7:82:de:07:48:3a:92:a1:
75:44:54:8c:fd:0e:80:2b:cd:d5:15:a4:44:7b:00:b3:9e:51:
2a:47:ed:3f:12:78:df:ca:66:77:6c:28:8f:a9:1e:5b:60:bb:
52:2d:52:2b:ac:3c:d3:5b:6d:91:98:04:f8:42:ad:a0:3f:0c:
0a:54:29:dc:8f:36:4f:f7:3f:bd:69:1c:62:a4:77:4b:4a:df:
8b:95:11:8c:e3:ce:e9:36:cb:b9:59:88:cd:27:ca:54:59:03:
48:58:3a:f6:1f:ac:43:d5:a7:9c:5d:3d:8e:a4:9f:49:d9:7b:
31:f6:fb:3b:53:c7:c6:2b:87:9b:61:b5:6e:c5:2b:bc:fd:f9:
00:ea:1f:55:44:99:e3:28:d2:82:e4:d8:8f:38:21:88:d6:62:
76:e0:0f:e6:50:e7:97:af:7b:47:97:a9:5f:b3:1a:f6:b7:4e:
51:b5:ee:51:f9:fc:84:43:4f:cd:a6:92:3b:d0:f8:bf:96:69:
33:e1:ea:56:70:c4:23:5e:ae:5d:f8:e4:70:50:72:bc:96:1f:
f6:0a:03:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:42 2026 by rpki-client