Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: hlF4LcYj73DuKKVuDZaQLx5AzyUdIjz6723ZPRpx08Q=
Subject key identifier: 0B:0B:A1:31:F5:62:1D:CA:AC:AD:54:1C:C2:F8:81:D1:BB:CB:9E:5A
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 019CAC4697A033392DF88F9BDDA12E4F3E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:00:33 +0000
Manifest this update: Mon 02 Mar 2026 02:00:33 +0000
Manifest next update: Tue 03 Mar 2026 02:00:33 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: uDCMIcED6ZnYs+W1iSr9UxpYcbvzSHihuFHx0KDdakM=)
2: jI0W3FXepCGwUQYooUrSqFApgnI.roa (hash: ywNZ9Hr6Ek5jRSdgINiD2gJAFEBiWAjLS61c7FwJ6mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:97:a0:33:39:2d:f8:8f:9b:dd:a1:2e:4f:3e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Mar 2 02:00:33 2026 GMT
Not After : Mar 3 02:00:33 2026 GMT
Subject: CN=0b0ba131f5621dcaacad541cc2f881d1bbcb9e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:f2:be:11:e2:bf:b4:e1:02:be:1b:d5:ab:
04:27:98:66:f7:6f:a2:d4:32:25:c5:62:c6:47:f1:
37:83:5f:08:98:1c:7a:8f:6e:9e:01:1e:50:13:7e:
2f:ef:6d:4c:0e:a4:4e:a0:f4:f8:ae:7f:11:c4:31:
78:4b:c9:8d:4a:75:e2:a6:13:0e:7f:5a:22:13:15:
8a:bb:58:ff:1f:cd:f1:f8:bd:19:4b:24:da:a2:91:
8d:35:85:ce:7d:d3:a2:d9:a7:0e:23:dd:a2:16:3d:
74:8e:5a:2a:66:c5:97:1c:ab:67:25:c7:d1:a5:01:
9f:76:81:e5:21:c5:0d:6b:19:5d:c2:f8:ec:5b:36:
43:fd:ba:d0:95:47:3c:d2:05:cd:04:87:72:93:1d:
77:2a:5d:a6:6c:08:f4:e4:3f:ae:ad:5b:c5:05:72:
6f:fc:1d:6c:6d:bb:74:1c:91:0d:e1:76:fd:89:4b:
bd:40:c0:30:94:84:af:97:44:45:52:6f:63:78:83:
6a:15:b8:1c:77:df:c7:c2:b4:ba:af:34:e4:45:20:
b0:6b:c3:44:dd:00:96:6c:8b:cd:af:ab:b0:c5:0c:
57:e5:92:01:be:0c:6a:50:53:b1:0e:77:fc:b9:96:
0f:1a:f9:91:06:24:1d:5f:1f:4f:d7:fa:32:48:7d:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0B:A1:31:F5:62:1D:CA:AC:AD:54:1C:C2:F8:81:D1:BB:CB:9E:5A
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:dc:19:97:15:c0:57:d0:60:01:2e:50:97:f3:d2:f3:0f:c2:
a4:9c:d4:7c:28:a4:5f:d4:6f:5c:24:bb:b1:14:ac:51:4c:4f:
42:74:3d:a8:2d:27:25:61:a6:9f:6c:f7:81:dd:5b:f0:d8:b9:
8f:03:a7:da:53:cf:ff:4a:56:46:ad:9b:7d:68:93:5d:b3:4e:
d9:35:77:f9:8f:1b:ac:a8:5a:06:67:38:c9:0e:14:37:dc:1e:
f9:d2:b7:f6:32:d8:7d:c1:e1:a7:f6:20:14:96:eb:e1:a3:f0:
a2:fb:f2:ce:47:2b:19:8d:62:17:f1:b5:af:8e:c3:29:37:91:
ec:86:39:f5:c5:e9:5e:5e:ec:a8:a9:59:b2:7b:34:4f:a3:a8:
8f:4a:0e:97:a1:8c:da:89:6a:6c:e6:4f:26:b3:3b:49:3d:31:
36:31:6f:2c:fb:14:e5:51:f8:66:69:67:f7:50:2f:a6:a0:01:
b1:43:f4:85:5e:ff:c7:e4:e7:98:d6:37:2d:07:76:27:ae:ad:
46:e0:58:44:49:3e:c4:9e:ea:bc:a3:06:2d:67:5f:83:0e:53:
19:ad:62:eb:55:2d:49:f2:32:28:9e:0c:1f:82:51:3e:65:8f:
dc:12:92:45:cd:06:e0:48:44:5e:9f:d5:33:67:0b:21:c4:34:
a1:af:14:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:45 2026 by rpki-client