Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
File: t7wa3782Jkj8Y1wzMvODvLwB53Q.mft (raw, json)
Hash identifier: waKuJpK6rIlnX1ybE4CWO7DtsiQTEl11P4ctsCS0NAA=
Subject key identifier: C4:C8:94:B3:5A:F4:D7:EB:50:D8:E6:F7:98:FE:3B:23:9F:D2:26:42
Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
Certificate issuer: /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Certificate serial: 019CAC471F1C5687B9001D0A7F7DD6201BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:01:07 +0000
Manifest this update: Mon 02 Mar 2026 02:01:07 +0000
Manifest next update: Tue 03 Mar 2026 02:01:07 +0000
Files and hashes: 1: 6KkpY3UMlsn4lmwRTfmLoXlCvZo.roa (hash: h6bDcvlLQ2oWH39OehL7j4jN9y68+hpsxgqt/2oRmFc=)
2: t7wa3782Jkj8Y1wzMvODvLwB53Q.crl (hash: f5zJP4CXHR5KrJeSB3GNeukHdu3bthS02OqhY41dglg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:1f:1c:56:87:b9:00:1d:0a:7f:7d:d6:20:1b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Validity
Not Before: Mar 2 02:01:07 2026 GMT
Not After : Mar 3 02:01:07 2026 GMT
Subject: CN=c4c894b35af4d7eb50d8e6f798fe3b239fd22642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:f3:7e:a8:f7:23:81:15:8e:ef:63:ac:7b:
dd:ee:91:ef:10:7e:23:f9:e9:ab:a6:95:49:47:c9:
ee:ef:70:b0:56:cf:5b:ea:6e:a7:61:e6:88:23:23:
9a:55:a5:17:cb:58:1c:de:30:76:7b:0b:df:3d:81:
11:2c:d5:ce:7c:2c:3c:91:af:60:db:0e:9c:3f:15:
b7:5d:c0:02:72:d7:d6:42:71:90:9c:06:56:a4:a7:
97:be:d1:65:b7:6c:0f:05:4c:28:89:9c:0d:28:c6:
9c:a6:ac:1c:c0:5b:e6:a3:46:91:ac:63:3b:32:e6:
6e:e1:76:6f:c0:fb:7e:88:10:80:dc:71:25:e8:38:
24:5f:7b:97:42:f7:3c:94:ec:f6:bb:dd:06:7a:67:
88:2e:5e:6b:8d:b7:66:70:4b:4b:da:e2:e2:83:b3:
84:c8:c6:ef:53:a0:b3:d9:77:2d:95:f3:b4:11:db:
70:b5:4d:2e:ad:66:84:9a:bb:a9:99:e1:f6:8b:dc:
56:f9:dc:7f:3a:e9:cc:d1:af:11:9f:39:b6:4e:05:
c4:cf:68:04:19:23:ff:b6:5b:b9:b1:85:e9:67:8b:
88:1d:27:e9:b4:cb:79:0c:6a:89:41:9b:49:90:ed:
3a:e8:1f:14:80:1a:c1:10:79:a3:13:93:41:cf:66:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C8:94:B3:5A:F4:D7:EB:50:D8:E6:F7:98:FE:3B:23:9F:D2:26:42
X509v3 Authority Key Identifier:
keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:be:98:74:3a:c3:00:0a:31:4c:95:85:9d:63:ae:81:63:3e:
d6:45:cc:49:22:5f:73:d3:5e:a6:c2:93:1d:ea:08:6b:3a:05:
17:b5:48:96:ef:0d:7e:83:a8:e5:54:86:09:6e:07:7b:72:75:
a1:e7:28:44:51:5f:ea:97:ad:58:ef:f0:e4:e1:33:1d:a6:3f:
4b:76:3e:b7:4e:85:37:e4:b4:d9:30:76:46:db:5d:7e:9f:85:
dc:44:ec:32:b8:88:0b:35:e3:b4:ab:f9:4b:67:b6:6b:c0:fb:
51:24:5e:34:ce:47:d0:2b:dc:4a:99:ef:4c:5e:52:ce:be:cd:
18:56:ce:60:e4:e0:a8:a1:ee:4a:57:50:54:b7:4d:da:17:c5:
ed:82:b8:e8:9b:31:a2:ef:bd:b0:11:41:5b:f5:e9:1e:5e:e3:
80:d1:cf:54:41:b1:b5:29:27:95:05:1d:0b:15:69:d2:4b:ef:
b4:c1:e2:9e:8d:08:70:cf:55:ed:35:50:2c:d7:00:49:ef:9f:
67:75:16:41:b1:21:44:1f:48:35:3d:5a:b4:b9:77:75:a2:6f:
70:05:14:4a:22:27:ab:4c:d6:99:6a:44:6d:f4:ba:39:a1:9e:
1f:52:06:c3:de:06:a8:e5:26:b1:31:8b:29:2f:96:61:9b:23:
bb:1b:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:36 2026 by rpki-client