Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
File: 7JezJx8tLSwHdy-q0BM8VG5JdAg.mft (raw, json)
Hash identifier: 5F/e/SgZ/EnFVMHYztPeX/pZxW27rzh8zJchJVeUmQE=
Subject key identifier: 83:A1:0F:6D:5D:33:D0:AA:0A:E1:9E:05:3F:2D:59:52:1E:CE:FF:F3
Authority key identifier: EC:97:B3:27:1F:2D:2D:2C:07:77:2F:AA:D0:13:3C:54:6E:49:74:08
Certificate issuer: /CN=ec97b3271f2d2d2c07772faad0133c546e497408
Certificate serial: 019D9C6366D6C0DD1E18B2889A35A84CE63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
Manifest number: B3
Signing time: Fri 17 Apr 2026 17:00:53 +0000
Manifest this update: Fri 17 Apr 2026 17:00:53 +0000
Manifest next update: Sat 18 Apr 2026 17:00:53 +0000
Files and hashes: 1: 7JezJx8tLSwHdy-q0BM8VG5JdAg.crl (hash: KEaFvoLxNoPopXZhHIqc1NYcfbbChsNXWKeLkHWrj4g=)
2: tZzd-4vJwTNaHI1mDTSbAye9aUg.roa (hash: WUVxikPavSYyUIB2ehZCr1awJETbczoTgfaX/AVFzSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:66:d6:c0:dd:1e:18:b2:88:9a:35:a8:4c:e6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec97b3271f2d2d2c07772faad0133c546e497408
Validity
Not Before: Apr 17 17:00:53 2026 GMT
Not After : Apr 18 17:00:53 2026 GMT
Subject: CN=83a10f6d5d33d0aa0ae19e053f2d59521ecefff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:45:df:6e:76:92:b7:c6:c3:de:dd:1f:ef:
64:c1:f0:6d:cf:2e:0b:3d:0e:78:04:94:94:0d:ef:
13:33:0a:fa:ba:c2:a3:32:33:81:fb:19:94:6e:bb:
50:0c:3f:e6:71:ce:98:69:21:30:d5:36:ec:14:c7:
81:da:6f:52:cb:c1:60:0d:86:5f:29:55:81:7b:a4:
35:c3:e4:15:e2:ef:13:4c:62:ea:15:7d:c1:04:0e:
83:3e:7e:b3:ed:31:40:56:1d:f1:4e:74:99:87:d2:
44:4f:d6:f9:66:02:86:bf:75:c5:d2:88:b5:ce:df:
d4:03:fb:eb:02:0c:26:63:1b:cc:b6:39:8b:8a:49:
03:05:af:47:05:53:a7:e2:4c:6c:97:98:bc:8f:3e:
e2:c4:23:0f:ee:24:3a:ae:89:10:ff:cc:b3:96:f7:
9c:6a:10:13:47:e8:7f:06:b1:a6:92:98:1b:fe:56:
3d:93:65:e3:d7:1a:0d:45:92:e0:c0:ec:4e:7b:3d:
bf:a6:f2:76:e4:ef:a3:94:16:79:e3:ff:fb:80:cf:
33:66:57:aa:05:fc:55:16:40:54:1d:37:53:e6:f0:
eb:a8:dc:16:35:f9:e2:ee:1c:c1:1f:07:cd:be:91:
1b:3b:9d:1d:86:71:e0:0c:6b:bc:22:80:43:07:eb:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A1:0F:6D:5D:33:D0:AA:0A:E1:9E:05:3F:2D:59:52:1E:CE:FF:F3
X509v3 Authority Key Identifier:
keyid:EC:97:B3:27:1F:2D:2D:2C:07:77:2F:AA:D0:13:3C:54:6E:49:74:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:49:f8:b0:ee:44:0b:50:61:99:23:9a:50:58:ba:de:88:88:
be:fe:2b:de:af:f7:e6:99:c6:04:d4:5f:7d:06:c1:b9:db:e0:
3c:aa:1a:4e:68:0e:a1:ec:b4:02:4f:df:41:7d:4f:df:13:fd:
11:e2:d9:9a:ef:0a:e5:cb:df:61:9d:5a:33:2d:c5:76:11:b3:
b1:63:84:fb:2e:3e:93:f2:1d:5a:b2:a5:a4:9b:23:a4:16:b7:
53:f6:b2:cc:f3:dd:1a:78:32:56:fd:83:de:64:19:23:4e:24:
51:7d:3c:d1:c2:29:aa:7d:bc:11:03:cf:c8:6b:71:99:69:eb:
55:39:24:7d:12:f4:f7:be:47:5c:20:be:97:9d:af:63:f5:aa:
08:31:d8:08:3c:e6:a8:20:75:4c:db:a7:14:25:b3:3a:9f:3f:
48:20:6d:33:f3:71:d2:2d:e8:14:24:91:9c:3a:90:50:e6:a3:
4d:75:2e:8e:32:eb:3a:2d:c5:61:8c:9b:21:ed:4c:c2:73:55:
67:67:99:c6:37:07:19:9a:74:d4:03:a0:db:72:89:f9:9d:9e:
43:70:40:37:2f:9f:32:0f:30:06:45:b8:fc:20:2c:d0:cf:2d:
05:a5:9f:68:87:a8:dd:34:c7:2d:4b:1d:42:47:76:ff:75:82:
7b:d7:62:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:56 2026 by rpki-client