Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
File: 7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json)
Hash identifier: /nPUzKeSI4c+GNLuPNAWKXHymoDFh3TXA8tjdl4F8Mo=
Subject key identifier: 3E:3F:72:95:77:A1:BF:6D:9E:22:FF:46:F2:AE:59:87:BF:1A:33:C8
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Certificate issuer: /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial: 019CAC0FF49F5617BE48AACE24391F4F2F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
Manifest number: 11DE
Signing time: Mon 02 Mar 2026 01:00:52 +0000
Manifest this update: Mon 02 Mar 2026 01:00:52 +0000
Manifest next update: Tue 03 Mar 2026 01:00:52 +0000
Files and hashes: 1: 6UcUmEautvpvMnTzbqlUFFqwHPk.roa (hash: ixisQXZ4Rb1bn7n/nHLhuuBXi93MfJ/FXdmklcMC01w=)
2: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: Ir8GiLIojNMnorjLoy4/yhKj2N9hpbuC2xVmpRlDKeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f4:9f:56:17:be:48:aa:ce:24:39:1f:4f:2f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Validity
Not Before: Mar 2 01:00:52 2026 GMT
Not After : Mar 3 01:00:52 2026 GMT
Subject: CN=3e3f729577a1bf6d9e22ff46f2ae5987bf1a33c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:6a:f5:04:b1:1c:7c:96:d1:19:c8:b4:28:
80:cb:9d:20:56:87:c5:00:68:e6:fe:97:50:fa:41:
98:a2:cb:22:f4:f4:44:b4:5e:b1:49:2c:b9:bc:65:
fd:9b:8c:c6:e2:01:5b:0d:b0:90:58:2a:a3:b9:78:
66:a4:9b:60:a3:65:5f:25:45:e8:ad:fb:b5:e0:19:
af:51:f4:20:b0:4e:e3:41:b9:a3:6e:ca:ea:6a:e6:
c4:de:83:13:ea:c1:0d:e3:10:43:8e:a7:6e:10:e7:
d4:29:3b:ff:2e:fa:30:88:83:fe:c9:22:5d:2b:09:
bf:92:75:fc:30:2a:99:89:82:f5:22:5a:f7:b7:89:
73:c3:71:07:dc:45:f9:51:a3:6d:9f:db:45:47:ea:
4d:18:70:de:ce:03:1e:ef:ed:c3:05:8d:52:cb:f7:
b0:d4:e2:ae:5d:54:33:ec:55:26:7b:8c:c7:28:42:
60:2d:af:1f:ba:ba:39:7a:59:ae:d1:5b:cf:fd:29:
f1:56:30:4f:6a:90:74:3d:20:d3:93:c0:b5:e0:6f:
aa:dc:dd:b3:e5:d2:b7:ee:a1:68:15:ab:26:e9:5d:
d3:49:2a:9b:c7:22:cb:23:0d:5b:d8:cb:f4:d3:01:
f3:1b:96:4d:0f:3b:16:37:29:ea:ea:e2:ea:93:17:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3F:72:95:77:A1:BF:6D:9E:22:FF:46:F2:AE:59:87:BF:1A:33:C8
X509v3 Authority Key Identifier:
keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:54:93:ed:d0:a8:82:a7:d1:6a:8f:62:98:ba:2b:12:9c:d9:
55:ef:cf:f4:0a:f5:09:0d:75:16:28:39:e5:da:0e:29:f2:91:
fc:75:47:39:71:15:9e:0b:bc:48:95:5e:90:61:0b:87:4a:3e:
f1:28:53:3d:5b:29:78:3e:ba:2f:db:00:87:4f:6d:26:f1:5f:
d3:a5:e0:6c:d0:bf:72:c6:1f:bd:68:09:c1:f3:f4:3e:27:81:
28:e2:4e:d0:40:21:45:2c:db:e4:f3:fc:7f:7d:6f:4d:13:83:
31:eb:4e:d0:45:92:b0:5c:b4:14:6c:ef:2f:62:76:5a:ca:3c:
83:c1:42:98:97:dd:a3:83:b0:83:fd:f8:d5:95:4a:86:89:bf:
ff:44:85:bd:9d:cc:89:8d:f2:0f:75:93:97:bf:66:36:ca:6b:
63:df:71:58:48:9b:1e:95:e2:c7:e1:55:26:d5:f8:dd:97:10:
0e:68:70:3b:e3:94:47:98:f5:f9:45:41:21:3c:72:08:04:33:
a3:78:1c:07:1f:29:86:c2:9b:a3:e7:f9:0c:22:3e:dc:e6:ec:
3b:2b:1f:95:e3:05:1d:01:cc:e6:e1:44:f0:3c:4c:fa:03:94:
51:30:ad:2b:86:96:b9:9a:c9:67:e4:65:03:83:8b:7a:d5:c6:
2d:14:b9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:22 2026 by rpki-client