Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
File: p7He9pWIXq3lzMi0vioCuxYHnpw.mft (raw, json)
Hash identifier: TNvFqtmgWNCzx9+AfQcueo2iXOFnOaldWSSntAvy3+g=
Subject key identifier: D1:07:B4:71:37:97:6B:69:65:C9:CA:F9:FA:4B:5A:E0:FE:FB:F7:57
Authority key identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
Certificate issuer: /CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Certificate serial: 019CB0FF3E809A4801CCC72C50CA936C940F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
Manifest number: 0A9A
Signing time: Tue 03 Mar 2026 00:00:43 +0000
Manifest this update: Tue 03 Mar 2026 00:00:43 +0000
Manifest next update: Wed 04 Mar 2026 00:00:43 +0000
Files and hashes: 1: Gq2VB9PjY2d42VE1l06FJT2-xes.roa (hash: idiOLZ8yC3ZWBi2Z9igfWCRSUat/SpYrqd26vqS32rI=)
2: p7He9pWIXq3lzMi0vioCuxYHnpw.crl (hash: IX9Fi3pX7NKFVRqJn4Ysti70TABzxcyqrZLie28WOsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:ff:3e:80:9a:48:01:cc:c7:2c:50:ca:93:6c:94:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Validity
Not Before: Mar 3 00:00:43 2026 GMT
Not After : Mar 4 00:00:43 2026 GMT
Subject: CN=d107b47137976b6965c9caf9fa4b5ae0fefbf757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:93:fd:36:f4:b8:d0:9a:0f:65:79:b2:eb:3f:
27:d1:51:bd:06:a8:c0:7c:af:75:e4:d7:09:66:df:
fa:1d:77:53:b2:f3:ec:f0:e7:2f:73:93:6a:af:80:
dd:a5:04:11:bc:ad:8c:49:22:85:4b:13:93:06:17:
a4:07:da:11:39:cb:1a:14:b8:da:05:15:ba:d1:c4:
bd:ba:ce:1c:a7:d9:0b:dd:a7:23:17:ce:4b:f6:e6:
99:fd:05:1d:3e:f6:28:c7:06:03:86:e8:ae:67:82:
90:27:e6:7a:1a:e6:57:44:cf:b3:89:4c:ec:cc:95:
db:3d:ef:d6:a2:78:02:17:e3:84:97:27:eb:3d:64:
2f:b8:d6:e0:65:49:2b:17:d9:50:74:13:c9:24:98:
b2:e7:b2:0e:ae:f2:b6:25:ea:96:13:56:cb:fa:ad:
39:30:32:74:73:13:6b:45:48:de:98:cb:e0:e6:ea:
90:50:43:79:e0:2a:db:be:2f:17:7d:41:f5:69:c7:
41:1e:cb:43:bb:30:38:27:5b:f6:3e:2c:f4:85:15:
be:8d:48:67:02:a7:51:1c:68:5a:fc:e5:77:55:ab:
0f:e3:08:40:3a:2a:74:e8:20:83:e9:7b:1a:70:91:
0e:e8:87:aa:55:33:42:4e:f7:69:df:bc:f1:99:07:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:07:B4:71:37:97:6B:69:65:C9:CA:F9:FA:4B:5A:E0:FE:FB:F7:57
X509v3 Authority Key Identifier:
keyid:A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c6:81:b9:e0:55:d2:23:ac:43:aa:8d:a4:5f:cd:bd:8e:a3:
f7:85:db:fa:c3:a8:49:18:b0:1c:09:a5:11:f3:d3:55:7c:21:
61:70:96:70:31:6b:4c:0f:9d:12:c2:7b:d2:6d:65:4c:6b:7f:
26:e6:86:a5:9f:e0:65:2b:18:5c:de:1b:6e:a0:e8:ca:83:2d:
ce:a9:bb:a9:91:e0:a1:a7:8b:ef:05:0c:a9:97:86:22:1e:6d:
01:37:b5:5d:75:dd:dd:b9:3d:52:a6:b5:71:0e:7c:8d:ab:7b:
b0:27:08:7f:09:1e:fe:57:c9:eb:de:5f:fe:27:d3:94:66:8d:
cb:10:55:8e:f7:9e:89:18:08:d7:3a:75:81:0d:c3:1a:4d:0f:
de:f6:55:3c:77:dd:df:eb:8c:47:d4:dd:ac:2b:9a:01:39:4c:
4e:64:22:af:63:d5:b3:4c:a6:9c:4c:4b:58:12:d7:6d:d1:64:
97:52:23:fa:3e:92:51:14:01:54:9a:cb:68:0b:70:9c:00:da:
9a:99:9f:a6:11:b0:1b:64:aa:6a:c9:90:5b:1f:6a:11:1f:28:
0d:41:d1:d6:93:46:56:0d:52:07:a8:65:67:8d:d9:db:f9:54:
fd:94:a5:8b:39:7c:49:8e:37:07:3b:11:8a:ff:32:26:08:85:
d0:6f:3d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:30:05 2026 by rpki-client