Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
File: 7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json)
Hash identifier: hUH3BantzfWbIsu0e/PR5zKNEp0SLrSm2HqUBifpYX8=
Subject key identifier: 4B:AD:DB:46:86:AE:AC:B3:9C:61:9F:3E:B0:BD:17:8E:46:61:C6:E5
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial: 019CAA21F7E6ADAE8905DC375A38207B432B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 16:01:18 +0000
Manifest this update: Sun 01 Mar 2026 16:01:18 +0000
Manifest next update: Mon 02 Mar 2026 16:01:18 +0000
Files and hashes: 1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: u1JOqaNk9nEqMXRFZJu3KFLDnLpRQITpoEzA+eivr1M=)
2: Rrw9o3WCpwNOEYYVtK8wHu_QJkY.roa (hash: 6I0ghzBeN79J1UAgpVFm5cx7tXZBN44byXnGOpV99sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:f7:e6:ad:ae:89:05:dc:37:5a:38:20:7b:43:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
Validity
Not Before: Mar 1 16:01:18 2026 GMT
Not After : Mar 2 16:01:18 2026 GMT
Subject: CN=4baddb4686aeacb39c619f3eb0bd178e4661c6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:cc:6f:4f:3b:28:d2:ef:0b:47:52:37:be:
19:f2:cc:b4:63:dd:2b:d9:06:78:c5:bd:10:af:69:
08:db:35:d5:5d:9b:e0:a2:f7:44:3d:2a:6a:66:f9:
5c:3b:f0:77:76:00:c8:36:be:08:e6:94:7c:b3:15:
02:72:bd:4f:f1:bb:4e:82:05:c3:b1:0a:a9:06:d3:
b7:43:ad:a9:55:51:a0:31:61:55:3c:b2:0a:40:37:
7f:d5:89:44:64:29:28:60:a1:30:4f:67:89:d4:67:
b8:fd:7a:b6:61:28:89:ee:d8:bf:fe:28:14:09:0c:
4d:b9:36:9a:31:0e:72:cb:d2:14:49:7a:e1:ef:dd:
97:55:98:dc:61:81:66:e2:47:6f:6a:d8:99:2d:c8:
d0:93:24:a6:9a:d8:bb:9b:ae:a4:58:f6:73:82:af:
47:30:df:de:54:c4:00:0b:96:7c:50:3f:1a:1a:bb:
e5:78:ac:63:f6:f5:bc:0a:ee:7d:c6:35:7c:23:54:
26:aa:95:cb:cc:61:f2:19:b5:8c:d2:af:1b:aa:b4:
4e:20:39:e1:26:84:d4:60:cf:aa:1c:75:73:63:10:
f4:ec:03:4d:4a:b3:d1:d3:ce:54:1c:dc:3e:d1:f2:
a8:ab:76:c2:18:62:47:79:02:3a:24:15:1d:8f:00:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AD:DB:46:86:AE:AC:B3:9C:61:9F:3E:B0:BD:17:8E:46:61:C6:E5
X509v3 Authority Key Identifier:
keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:00:82:43:5a:40:9e:b1:e8:3c:ab:2b:5d:31:37:6f:bd:12:
91:ad:48:5d:80:e9:89:a9:16:b9:17:0b:98:f8:fb:e0:76:ff:
2c:bd:40:da:21:f1:8d:bd:94:54:23:80:de:54:8e:de:ff:ff:
62:e3:b7:13:55:5c:9a:13:73:c8:61:6e:f8:5c:13:4c:b7:22:
c0:e9:d8:9e:51:ba:c9:00:f9:da:a8:90:bf:5b:35:a9:ee:24:
4a:bf:c5:f5:a3:41:9a:ad:8e:e4:e0:3e:84:cd:e4:bb:c2:54:
31:d8:b0:46:b2:eb:2b:4c:52:c7:0a:e5:71:3a:54:99:04:ed:
98:2e:14:22:0b:27:e0:16:c1:49:b9:5d:10:3e:b5:23:57:1c:
8d:c4:72:3e:b8:e6:cf:98:2f:9c:4e:16:3f:4e:23:5b:cc:01:
73:52:63:9e:e3:86:21:24:86:59:63:9c:16:75:2f:29:62:d5:
b1:a9:39:35:48:55:37:4f:be:58:d9:bc:19:65:2c:98:26:30:
5a:fd:40:4c:d5:dd:14:e9:f7:34:8a:1e:7c:38:f0:5b:be:7c:
fe:c4:6d:83:e3:1d:37:09:1d:88:35:b1:24:aa:ed:22:eb:bf:
db:a5:ff:5e:72:ce:c6:02:a0:40:7e:20:c7:8f:91:39:78:6a:
84:aa:5a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:02 2026 by rpki-client