Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
File: 7sMTGXauon0XHGwmepjT84KmGio.mft (raw, json)
Hash identifier: 3VeQk9exu63qT8lAOge9qRNCk5yWeEIX214me0tsLUY=
Subject key identifier: FA:D9:58:D9:66:D9:D4:1A:10:1D:06:A9:18:83:0D:88:AF:96:D5:B9
Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
Certificate issuer: /CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Certificate serial: 019CAAC6534416D845844EAB90F1C64A8CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
Manifest number: 123D
Signing time: Sun 01 Mar 2026 19:00:49 +0000
Manifest this update: Sun 01 Mar 2026 19:00:49 +0000
Manifest next update: Mon 02 Mar 2026 19:00:49 +0000
Files and hashes: 1: 7sMTGXauon0XHGwmepjT84KmGio.crl (hash: TWYw6mOIiadc+M4fsj9xV8MeMU39/THmUq/ComDHwq4=)
2: L_bdGxJHykWkh6lnI23znPb9ZRc.roa (hash: ZEX+GgljqjjHrDsG1Iee4BuX7n/kzIjwqN8LRfjYRoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:53:44:16:d8:45:84:4e:ab:90:f1:c6:4a:8c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Validity
Not Before: Mar 1 19:00:49 2026 GMT
Not After : Mar 2 19:00:49 2026 GMT
Subject: CN=fad958d966d9d41a101d06a918830d88af96d5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:b4:fc:cc:ca:90:2c:56:8a:26:3b:a1:93:
e0:6a:27:48:31:02:e9:e0:b8:9c:ed:63:c8:52:68:
84:44:b3:01:58:ec:aa:ac:e4:cd:f7:dc:b6:ec:7e:
3b:d0:0b:7b:eb:37:3f:27:2c:69:c4:42:46:9e:00:
7e:19:fb:77:27:cf:70:b2:a9:46:0c:a1:e5:ef:ce:
36:6d:fc:e3:cc:a8:15:1f:3b:6d:50:54:cd:b5:7e:
37:9e:a2:ac:18:ad:4e:49:31:a4:57:89:df:fc:2e:
0d:81:c3:cd:61:4a:e8:17:91:e4:63:81:6a:da:0b:
fb:71:e6:16:d8:a0:89:38:10:c7:d8:ca:bc:17:de:
38:9a:17:91:1e:13:94:07:66:b8:97:75:b9:e2:b6:
fd:cb:1e:f8:63:1f:f3:83:d5:38:a0:bd:5d:7b:24:
8f:67:73:42:8a:0b:c2:b3:6b:63:50:c5:b3:05:4c:
47:7f:fd:4d:48:53:ad:2b:9f:80:51:56:1b:3c:e5:
f7:df:d3:00:30:bf:b4:9e:83:3b:d6:c7:6f:ef:1a:
d8:ee:0b:b9:66:32:f4:ea:83:96:a0:0d:d1:3b:e8:
e6:f8:38:58:09:51:85:bd:e2:a5:b1:d0:96:10:79:
72:42:14:5b:41:fd:3e:32:0e:7b:6b:42:7a:d6:97:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D9:58:D9:66:D9:D4:1A:10:1D:06:A9:18:83:0D:88:AF:96:D5:B9
X509v3 Authority Key Identifier:
keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:de:98:20:d6:8b:f1:ba:d5:2e:77:ca:0d:9e:60:bf:65:22:
ed:2a:18:29:32:09:e1:3e:1c:15:ce:9f:00:87:16:39:fd:62:
bc:5e:a9:02:55:7b:43:10:a6:35:83:38:8c:c2:b3:f7:40:65:
ae:f2:75:05:72:c7:57:4b:68:a6:a2:87:7b:86:76:71:25:b7:
3a:96:96:cf:9d:63:79:21:8a:ee:c5:0b:aa:7f:c3:34:6d:66:
43:ff:e3:66:15:5c:db:b5:bd:15:89:09:48:9d:52:85:57:ce:
2a:9c:36:9f:1f:fd:92:51:4b:51:eb:8e:ae:05:8b:d3:b5:58:
58:9b:ad:24:5a:9b:c9:20:67:00:53:de:7c:ca:96:98:17:15:
9c:8b:5f:dc:74:11:2a:b6:3f:02:56:0e:07:f6:19:22:38:1a:
49:ad:21:2c:31:9c:0d:94:53:0f:3e:cb:5b:cb:11:c7:29:42:
03:f3:1b:08:ff:ae:d4:4d:ce:eb:e7:d6:c8:d9:d7:1f:c6:04:
aa:d6:dc:42:a1:44:0c:ef:04:31:bb:76:21:c1:6d:e1:4c:a8:
6d:f5:7a:14:4f:31:e1:dd:61:b5:da:b6:c7:23:e3:b2:6f:f3:
cd:c8:fd:f3:a1:90:7c:6b:4c:ed:17:45:7f:ae:a4:b6:cb:dc:
17:49:0b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:06 2026 by rpki-client