Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: TAC/7NyfK8VvGrxlTCddc4Ak+TMvEOC8rFXagAVVWSg=
Subject key identifier: 67:8D:FA:B4:17:19:88:70:1E:BB:D8:7E:CB:E5:99:82:6B:2E:F0:60
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 019CAA5835C8C427D0727D034AB6DF3564B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 17:00:33 +0000
Manifest this update: Sun 01 Mar 2026 17:00:33 +0000
Manifest next update: Mon 02 Mar 2026 17:00:33 +0000
Files and hashes: 1: 0HZFumgyvQaDDTRTrqWFDMHfuo8.roa (hash: 99s+y069IP+8cLI0Fct7Tuh7Nr9yOVSbyI/w/nS1ohM=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: VglpWbVxb2prfv1obqgb6NioOTvcbVs0eE64j15s6qA=)
3: JfyoN48fk_c9ic3qKJlpVrYlm4U.roa (hash: YO7Xai4MFWdK4ki2bUDwA4JpC3JpucBc+HE0rjiH0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:35:c8:c4:27:d0:72:7d:03:4a:b6:df:35:64:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Mar 1 17:00:33 2026 GMT
Not After : Mar 2 17:00:33 2026 GMT
Subject: CN=678dfab4171988701ebbd87ecbe599826b2ef060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:94:0f:85:11:48:51:52:22:6e:6e:b5:61:
6b:3a:f5:d4:ba:b9:d2:a9:dc:b6:0f:b8:b7:2d:b4:
7d:ee:1d:35:26:0c:a2:f3:e7:ae:2f:ef:8f:53:ef:
da:b6:79:ee:f1:62:a5:60:db:4a:73:e4:c1:04:66:
5b:1a:39:6d:a4:30:c3:39:ef:d7:66:89:c6:f5:59:
f8:59:c2:4f:89:e9:62:0e:e1:b0:a8:c2:b1:37:29:
ca:03:d8:92:dd:f8:6b:66:f6:97:a7:a2:b6:f7:98:
57:20:86:00:fd:ab:c5:33:3a:6d:63:71:45:5b:ee:
80:81:66:37:a6:ca:1e:9b:f6:53:8d:b7:7f:ca:3b:
9a:86:24:f2:20:fc:17:43:76:33:af:aa:a1:2b:56:
da:a8:3f:4b:45:ee:35:17:bb:1e:9c:70:c9:5d:13:
da:ef:e3:8e:e9:1d:50:57:88:6f:ea:15:86:72:98:
05:0f:bd:92:07:dc:57:c6:e4:77:7c:3f:60:95:78:
28:71:3c:d3:87:57:ed:6c:34:f0:3c:3f:a0:ca:4c:
b1:81:9c:3f:87:f0:39:85:43:fc:a0:5a:c6:d1:74:
d0:50:f2:0a:48:14:84:b7:8e:ea:de:b1:78:fc:cd:
a9:40:4d:ca:c5:e4:4a:e2:80:55:ff:8b:80:bc:02:
ef:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8D:FA:B4:17:19:88:70:1E:BB:D8:7E:CB:E5:99:82:6B:2E:F0:60
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:26:af:a3:c0:13:17:56:1b:05:94:78:cf:ca:b9:d2:f1:56:
74:34:6f:c7:d3:f7:80:57:94:38:2c:99:f1:1d:cc:7d:e4:2b:
6f:c7:d3:69:12:60:33:65:28:de:4d:50:a0:4a:9c:fa:7a:f3:
91:50:8e:c2:66:10:2e:a7:b7:d5:2a:f7:97:61:84:ff:67:90:
87:86:2c:3a:8f:3a:e4:ab:d6:7e:74:dc:28:57:de:e1:83:c6:
bd:23:f9:b7:c0:8f:ab:01:27:0a:a3:42:90:ed:43:a6:f1:0a:
84:3c:23:99:52:65:af:08:88:32:b1:ab:1c:c9:5c:2a:39:15:
c3:b7:b9:24:af:ef:e9:67:13:3c:9f:64:c1:22:3a:83:31:90:
e0:63:ef:ac:09:b2:03:3e:fd:25:44:7e:ff:68:43:0e:9e:45:
d1:1a:89:d5:ab:b8:4a:19:5c:ff:65:c5:d4:c3:ef:4b:cb:80:
8d:59:4f:77:50:33:89:ab:ea:33:10:39:67:67:19:7b:9b:97:
04:1a:ee:6c:60:5b:ef:28:be:de:48:37:06:5b:cc:4d:24:11:
91:e6:2d:de:99:ed:91:9f:10:cf:d1:e5:54:fc:41:f7:8d:32:
f6:da:19:c1:a2:0e:cf:7f:b3:84:d6:5a:04:b5:6f:82:be:6b:
68:f4:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:37 2026 by rpki-client