Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
File: 7jd-2foR7BmVVVl2LeBHpabrFKg.mft (raw, json)
Hash identifier: FxAWK5WOyseiAilUGN3eeBSfplGQD8SSF/XJTsqaTV0=
Subject key identifier: E8:F0:97:14:57:09:DA:AC:6C:5A:4A:FB:E8:2D:7A:0E:F1:3D:69:7D
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Certificate issuer: /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial: 019CA945C4844C82DC9136C1D6303F033F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
Manifest number: 0DDE
Signing time: Sun 01 Mar 2026 12:00:47 +0000
Manifest this update: Sun 01 Mar 2026 12:00:47 +0000
Manifest next update: Mon 02 Mar 2026 12:00:47 +0000
Files and hashes: 1: 7jd-2foR7BmVVVl2LeBHpabrFKg.crl (hash: 6BGViw3SF5wrpQp2iDWJlh76aQeGG4Dhw6jjC/gNimA=)
2: j6vNoMCJY2rJNTcFiFrK6BxceW0.roa (hash: Qbby+Zxos/Xwy+CO76y4SUXqNg4YubZrm7ece+VByCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:c4:84:4c:82:dc:91:36:c1:d6:30:3f:03:3f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Validity
Not Before: Mar 1 12:00:47 2026 GMT
Not After : Mar 2 12:00:47 2026 GMT
Subject: CN=e8f097145709daac6c5a4afbe82d7a0ef13d697d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:63:b9:23:33:e6:67:58:8f:fa:a6:6a:ff:43:
ab:5b:8d:8e:a7:ab:44:7d:79:ff:0d:6a:fb:7e:07:
54:50:2a:41:61:d9:6d:e5:2c:a9:d7:22:a0:76:18:
a9:4a:41:d7:6e:e4:b8:12:1b:25:66:88:78:d6:77:
3d:94:ea:52:b2:62:ba:85:b4:34:65:5c:cf:67:59:
00:0c:26:b6:de:79:95:43:13:86:bc:13:ab:14:d1:
29:36:91:b4:b3:b6:d7:57:76:e7:a8:87:fe:ee:6a:
dd:e0:f8:91:fb:f1:4e:1a:22:e8:a8:86:f7:67:32:
02:15:97:e1:18:7c:8f:35:ee:e7:b0:09:69:a9:34:
76:88:28:a2:dc:fb:9a:a7:31:d0:4e:7e:f9:68:cc:
bf:b5:f2:bd:e9:82:78:87:0a:8d:7d:16:27:45:2f:
89:dd:59:31:de:eb:07:97:bb:5c:5f:9c:aa:6c:56:
db:ac:1c:0e:85:cb:d4:90:92:a1:c5:3d:a6:ea:08:
d0:11:c9:49:a1:3d:2b:39:38:9d:a4:7b:89:d1:14:
37:b7:c2:e6:6d:75:7e:26:d6:03:ae:69:e9:dd:35:
74:5f:ff:d0:bf:20:8b:6d:e5:33:06:ab:26:db:0c:
d6:c2:5a:3e:be:9b:08:b1:64:82:11:68:a7:22:d1:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F0:97:14:57:09:DA:AC:6C:5A:4A:FB:E8:2D:7A:0E:F1:3D:69:7D
X509v3 Authority Key Identifier:
keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:19:b2:f8:31:6e:a4:18:7c:ed:03:e2:5d:d4:fa:e6:d1:4e:
95:5c:5b:93:2e:b7:5e:2d:a5:3e:ee:2e:74:7d:95:84:0f:f0:
81:7d:fa:18:3b:7c:72:2b:e0:7f:ce:fc:50:44:1d:28:69:83:
dc:fa:db:0e:b3:3f:3d:71:bb:10:cd:bb:e1:35:ec:30:24:14:
f0:3d:bd:87:0b:9b:8f:b7:89:8d:dd:55:b3:63:b2:6f:a9:57:
3b:67:08:fd:9c:03:15:5a:b0:c1:09:f8:67:4c:e9:d4:ba:ed:
e7:6f:71:14:e3:4d:5a:e0:0c:04:33:f2:85:7e:5b:41:98:ad:
cd:cb:8e:a7:88:a9:6b:8a:fd:a8:a9:97:f7:84:29:f7:0a:6f:
8e:14:45:85:86:10:28:9a:2f:1c:f1:02:25:ab:79:3e:9c:e2:
f3:fc:65:d8:f0:ee:f1:cd:80:7e:bf:46:62:84:39:a5:95:02:
5f:1d:47:ed:e3:9f:d5:d6:8d:a9:d3:cb:fe:43:e8:51:49:35:
08:41:35:a8:6f:90:f8:18:02:d9:09:36:ac:b3:cd:b6:44:40:
44:7f:0f:e1:99:63:17:c2:9b:45:29:69:84:17:7f:e6:23:f4:
5b:e6:11:4a:19:af:71:f0:96:99:b4:fc:5b:bd:7a:49:7d:9d:
bf:70:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:38 2026 by rpki-client