Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File: 7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier: 2QBy/Jwve5bS0+xFNKwBdTz7PQ2IC5OwJSEb+UDcUb8=
Subject key identifier: 22:45:EF:D0:7E:6A:64:43:14:9A:FB:4B:0D:CC:27:9C:1E:07:E4:E1
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 019CAAFD5C7712955E7E6420EC20C2FCE7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number: 06FE
Signing time: Sun 01 Mar 2026 20:00:56 +0000
Manifest this update: Sun 01 Mar 2026 20:00:56 +0000
Manifest next update: Mon 02 Mar 2026 20:00:56 +0000
Files and hashes: 1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: YDZHQva/Uv5bE8E+eEbHw6QQ1N9KEU0gHEfDksmeB88=)
2: Owvlv8hWBTHcz2euf127oUQRekA.roa (hash: fn0HdByXArdl+3YOgps4Nupdy6FY/Lip+b5OMSzQ6L4=)
3: wBNaW5KI2bk7rKftygUeDW0sZPw.roa (hash: 92vTX700phahUrU+qTurYQRSfJQb0PnxRKVm95D4uhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:5c:77:12:95:5e:7e:64:20:ec:20:c2:fc:e7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Mar 1 20:00:56 2026 GMT
Not After : Mar 2 20:00:56 2026 GMT
Subject: CN=2245efd07e6a6443149afb4b0dcc279c1e07e4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:5b:15:ba:44:31:8e:d5:3c:33:04:f0:5a:
f7:97:a9:2c:9e:44:06:65:7a:2e:95:cb:bc:f9:fa:
66:f2:a8:f3:22:5b:39:a4:88:0c:ee:d7:f5:23:11:
41:ce:35:6a:99:74:c2:dc:62:f0:2f:7d:ed:42:2d:
41:7a:29:42:01:e1:d3:a8:ec:e8:14:64:75:c6:ab:
0d:69:57:81:34:69:58:78:4c:0d:7b:74:01:46:85:
45:45:43:50:69:22:d0:11:17:8e:3f:09:30:51:8d:
7f:f8:49:5b:5c:8f:1e:b9:7a:82:ae:e9:ea:ea:da:
52:a4:43:37:39:12:6c:f5:c0:a3:fa:66:1d:a4:d9:
87:ae:3a:ac:b5:03:74:4e:00:79:67:d3:b2:98:2b:
39:cb:e8:3f:21:0b:6c:75:7c:dc:b8:51:60:47:53:
a9:c1:b5:94:b9:38:e4:ba:14:4a:d2:12:d3:89:78:
59:54:97:2f:ff:66:bc:e5:11:31:da:a0:d1:2f:42:
08:09:97:2a:b6:cc:9c:dd:1c:6d:ad:64:0e:c0:8f:
cf:81:80:9a:8b:f0:4d:f0:33:09:97:17:7e:da:5b:
f2:57:68:14:45:81:8a:79:97:3b:a3:7a:f5:16:50:
83:1d:50:2a:2e:12:05:88:5d:c2:28:46:3b:af:4e:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:45:EF:D0:7E:6A:64:43:14:9A:FB:4B:0D:CC:27:9C:1E:07:E4:E1
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a9:91:4e:70:2a:ef:7f:e8:41:fc:2e:5b:e1:af:d4:c5:ee:
61:3f:1c:78:f8:3b:9b:0d:f4:59:84:1f:6f:09:03:17:72:9a:
4a:34:87:d9:fb:25:12:11:6e:16:9b:fb:a5:62:69:49:b5:09:
eb:60:22:8d:95:56:98:7f:67:80:98:bb:af:f7:68:5d:14:8d:
6d:e6:5b:2e:d9:c9:e3:22:a0:36:60:ba:76:1b:3a:d1:16:d8:
24:f2:f8:09:f7:2e:bd:af:30:88:e8:9b:d8:7e:0d:4d:22:db:
70:cb:5d:ac:2d:cd:22:29:11:0e:fc:79:84:94:80:7d:77:bd:
b6:83:0d:a2:fb:ce:fc:48:a4:fc:c9:8f:c0:9b:74:2a:31:8f:
47:b4:e0:86:80:4a:52:1a:f8:8c:e5:d0:f6:46:15:38:f0:49:
0e:15:98:53:8f:2f:6f:58:fb:4d:a1:d8:5c:38:c9:fa:28:9d:
4c:3d:d3:a5:e8:12:54:c4:d1:1d:7b:4a:72:71:a5:ff:f3:f1:
20:28:29:7f:67:a4:93:2e:5b:d3:1d:1e:b5:a3:62:1f:f2:f0:
a5:9a:10:30:d4:ed:2a:62:a7:e3:e8:f1:fc:75:e1:b3:d0:4b:
07:9b:37:60:ad:74:ab:66:6e:24:e0:9a:7b:0a:a8:7d:65:a4:
33:c4:e4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:16 2026 by rpki-client