Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
File: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft (raw, json)
Hash identifier: qj35GYCNmPNkejBQc+9dgavBshoTMJrrtyQ4uoeqgaE=
Subject key identifier: 32:EB:C7:2B:20:52:DB:E1:CC:6B:20:A3:F3:F7:CE:12:AD:37:A8:D3
Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Certificate serial: 019CABA22A549C829A90AA9F67CCD94C5FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
Manifest number: 07A3
Signing time: Sun 01 Mar 2026 23:00:57 +0000
Manifest this update: Sun 01 Mar 2026 23:00:57 +0000
Manifest next update: Mon 02 Mar 2026 23:00:57 +0000
Files and hashes: 1: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl (hash: nB00ZwWKP2jskjzmOeENY0k8RruECq3HIbaT15vtKa8=)
2: s7-y41zPRmkHcrILtIvpGUfe7SI.roa (hash: k/m4SqHR3oYDvv5JTtyJN297BXfGfqcf9sOF+T2TJHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:2a:54:9c:82:9a:90:aa:9f:67:cc:d9:4c:5f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Validity
Not Before: Mar 1 23:00:57 2026 GMT
Not After : Mar 2 23:00:57 2026 GMT
Subject: CN=32ebc72b2052dbe1cc6b20a3f3f7ce12ad37a8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:fb:34:5a:5c:c9:69:cf:f7:bb:2e:a9:00:
98:5d:b2:97:11:0f:8e:7b:d8:e7:0d:37:85:41:8b:
cb:40:4b:c4:93:de:02:77:a9:b8:60:4b:8a:93:ac:
ff:d4:82:6d:bb:d9:08:ee:28:ba:c6:46:bf:55:5d:
27:15:d4:d6:ef:e9:da:84:eb:53:77:a7:cc:49:74:
25:52:b7:53:7d:e9:45:2d:ab:a8:96:dc:af:ce:c1:
5c:ab:32:1c:d2:4f:88:33:40:01:63:53:d7:b4:cf:
9f:af:ba:d0:a4:28:b8:9d:fb:f2:1a:52:14:5b:61:
23:76:82:6c:e9:ff:73:6e:e7:62:63:d0:6a:8f:f6:
c3:57:a7:5b:1c:a3:0f:e5:29:cc:4f:5e:31:be:55:
90:10:bf:2c:37:9a:4c:9c:b0:e6:1f:b5:ed:44:a2:
2e:b0:bb:4d:89:1a:ab:ac:58:79:bf:61:4a:8b:01:
bf:79:ab:93:fb:ae:d2:54:a3:4c:83:b2:64:24:a1:
0a:d5:43:07:ce:d6:ff:73:a5:3b:e7:6f:02:f7:14:
c2:ab:6e:01:2b:3a:0c:62:e1:f4:04:e0:56:8a:24:
ee:69:ce:30:80:d0:1c:c0:13:6a:7c:75:aa:d8:64:
00:04:68:44:15:b3:11:80:ac:eb:21:0c:ef:d8:a4:
a6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EB:C7:2B:20:52:DB:E1:CC:6B:20:A3:F3:F7:CE:12:AD:37:A8:D3
X509v3 Authority Key Identifier:
keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:46:dd:19:e3:45:b0:be:a8:d9:42:62:d4:92:f5:6c:63:8d:
e5:05:14:e8:65:33:48:94:95:0b:ff:f8:9f:db:28:cd:b6:3d:
4c:1a:c3:03:f2:41:33:ab:19:3b:c9:0a:f8:7b:4c:76:5f:b4:
40:0a:cf:d0:c2:78:53:4e:ee:0d:ad:5a:c1:8f:9d:fe:6d:ab:
3b:d9:c4:9b:8d:f8:aa:7d:30:ab:6c:ff:87:8b:00:a2:19:9e:
76:5e:ee:7b:50:81:51:2a:60:47:7b:5d:ec:a2:d6:5e:e1:96:
02:93:16:a9:8a:79:a1:c0:5c:87:e5:22:f2:f4:fa:05:34:bd:
f8:82:e7:4f:b3:5e:ca:4c:1a:1d:2a:3a:a7:03:53:8b:58:d3:
92:86:5e:5d:b8:e1:d1:03:4a:7b:b8:9b:4f:55:50:2f:e8:85:
7d:ca:2f:03:4b:52:4b:91:ab:70:1b:69:61:35:6c:ce:c8:7e:
0b:a2:eb:2a:bb:80:5d:db:0d:02:5f:e4:ac:87:10:c9:9c:8d:
de:ba:62:88:4f:a9:0f:f1:47:93:40:1b:cc:46:55:7a:3b:7e:
e8:dc:67:6e:de:93:f8:92:ea:eb:ef:30:a8:13:de:f5:fe:d6:
a6:90:bd:c9:4b:d3:c6:93:8a:32:05:3b:f1:9a:51:95:94:30:
86:2c:ad:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:29 2026 by rpki-client