
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: gHV7pSRr5pIfr0/cNCC9zqbitJiiQlqGVxKlVRP++nk=
Subject key identifier: 03:B4:04:82:18:9C:F2:F2:D4:40:71:87:EC:83:D5:59:3E:91:C8:CE
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 019CABD9C2571B25BBDA354C86133A4E4E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 1591
Signing time: Mon 02 Mar 2026 00:01:40 +0000
Manifest this update: Mon 02 Mar 2026 00:01:40 +0000
Manifest next update: Tue 03 Mar 2026 00:01:40 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: j7PZe4ImKrux4aXhQTagUEKEBRCJUCZVap3iW3+tZhs=)
2: Qy_dYjktdWTMwKlvlGZGCPvqukk.roa (hash: HyB9pQQ7gH7LCMcZGQN6Qp3fcmCpTOcafmUokwLnbLM=)
3: knZABU6A8bvYatZnGIApuHOdxF8.roa (hash: ZG17hdxOoYWoARbjcCtZd2S+SWHd1m7LFGZzi15/I2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c2:57:1b:25:bb:da:35:4c:86:13:3a:4e:4e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Mar 2 00:01:40 2026 GMT
Not After : Mar 3 00:01:40 2026 GMT
Subject: CN=03b40482189cf2f2d4407187ec83d5593e91c8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:b7:f1:d4:23:7f:9c:f3:aa:18:c9:e6:b4:
5c:f4:68:2c:96:3e:9a:cd:af:69:91:e5:87:a3:79:
72:83:4d:8d:f6:86:0b:b6:7f:cc:79:24:10:02:03:
4a:0f:cf:2a:83:d6:45:61:d7:9c:28:dc:b5:76:fe:
62:8e:1a:65:77:2f:1d:38:02:79:68:5b:88:2a:24:
72:66:8a:44:a6:95:a5:da:d8:ee:ed:af:42:31:a3:
09:eb:5d:a0:9b:41:b5:49:ec:80:e4:a3:cb:01:a7:
b5:d1:97:4f:b4:81:4f:04:74:ed:ce:6f:db:ba:3a:
dd:78:68:2c:1f:4a:54:00:66:99:01:5c:f4:1e:e8:
06:a3:eb:8c:38:0a:d9:be:d0:7c:5d:bb:d5:57:92:
16:2a:90:2a:ee:87:b0:77:31:e2:fb:7a:94:15:bf:
37:a4:db:e1:1a:78:e0:50:3b:01:42:23:d8:19:93:
42:6c:65:ed:ff:85:8a:60:59:e9:e7:f1:f2:9b:0e:
83:7d:00:49:c6:49:be:f7:ea:0b:07:ab:89:2d:c7:
e0:3d:5b:ff:9c:01:62:c1:b5:d1:a8:30:59:59:38:
9f:9a:38:a9:16:c8:ef:ec:21:23:ce:2e:ee:57:11:
ee:ea:b5:9a:98:1b:9e:1b:bd:a2:d4:23:8d:f7:2f:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B4:04:82:18:9C:F2:F2:D4:40:71:87:EC:83:D5:59:3E:91:C8:CE
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bc:d6:42:15:15:0e:0a:64:cc:a4:53:9e:c2:49:8e:c0:a7:
3b:5b:1f:f0:66:16:64:4e:2e:3f:e1:a4:e0:ad:ab:4c:d7:49:
6d:43:ff:a9:5d:29:07:c4:6f:08:3a:44:f9:69:7f:18:d4:c7:
2b:55:33:18:86:66:24:73:82:53:11:fb:2c:15:d3:23:aa:9c:
e1:cc:f5:9a:04:0a:5f:51:64:8d:a1:71:e2:5d:41:a0:69:6b:
b1:6f:22:99:4e:ff:45:a6:5c:c4:67:59:df:d7:16:62:b7:bc:
36:fe:13:85:ec:fa:a3:cb:0c:60:65:18:9a:af:ad:4c:5e:02:
f6:8d:1a:5e:29:95:bb:bb:6d:aa:07:c8:1d:5d:8f:1e:94:ce:
be:6f:02:02:70:d5:88:00:e3:36:e1:55:d9:36:ee:7f:91:bb:
98:63:c5:ea:f1:d8:a4:88:e1:03:c2:cb:f6:13:b6:3e:3d:37:
c6:66:09:18:cc:41:28:b4:4c:f7:c6:17:26:a3:8e:8c:e1:37:
17:91:f8:d5:38:ca:58:31:e1:f2:27:a2:4e:eb:89:46:80:f8:
33:db:41:8c:75:88:f8:f7:fc:2b:e7:fe:88:45:7e:b6:e0:9d:
5d:c3:40:aa:91:b4:27:96:6b:f3:5f:d4:57:5a:21:db:bf:cf:
e2:c6:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:26 2026 by rpki-client