Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier: yLN/7m1lNCndtlE/QTfCFiEEhk7uO+Uz8VuthpETo2g=
Subject key identifier: B0:53:3F:C8:E1:EC:0B:C0:7A:DA:A7:83:93:A3:7C:D5:21:02:EE:81
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial: 019CB70168623C1A8FCB8F203E57EE3F9B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number: 0BD0
Signing time: Wed 04 Mar 2026 04:00:48 +0000
Manifest this update: Wed 04 Mar 2026 04:00:48 +0000
Manifest next update: Thu 05 Mar 2026 04:00:48 +0000
Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: KckdilcUTFWgya2o8w/TR7C3TICl1n86OG5ppPF5vmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:01:68:62:3c:1a:8f:cb:8f:20:3e:57:ee:3f:9b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Validity
Not Before: Mar 4 04:00:48 2026 GMT
Not After : Mar 5 04:00:48 2026 GMT
Subject: CN=b0533fc8e1ec0bc07adaa78393a37cd52102ee81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:b3:4e:57:9b:57:26:89:49:a1:a1:f0:18:
2c:b2:17:dc:00:db:2e:74:53:ac:72:35:b6:a4:37:
d6:95:a8:98:28:bc:a7:55:83:c6:4f:59:e2:43:61:
65:28:d0:1b:c1:55:f2:86:80:a0:d5:e9:09:71:37:
e6:e5:e5:a0:e8:88:77:30:8e:fd:07:a5:e8:57:3d:
d2:8d:f8:10:5a:fa:6a:b7:4c:6c:1e:d4:08:17:6e:
1d:5e:3e:15:14:2b:4b:23:75:50:33:c9:50:aa:55:
83:29:7d:87:b9:f2:d1:97:23:09:88:d8:a4:87:27:
14:7f:6d:48:a7:0b:99:a8:3e:74:00:81:40:f1:91:
51:56:65:22:66:13:29:63:49:7d:78:8b:6a:42:46:
38:eb:e6:b3:bc:ce:7b:00:c4:31:a3:7d:aa:1f:8f:
7b:a9:7a:4a:bc:3e:8a:fe:93:dc:62:66:2e:18:1b:
6b:98:0c:04:01:a7:11:bd:da:b3:da:0c:3f:77:ba:
c1:02:ff:69:67:81:e7:54:ad:7c:d4:08:bb:0a:c3:
99:bb:2f:7d:de:76:cf:0c:e4:ea:43:76:11:74:68:
68:9d:70:bb:97:59:67:b3:a7:d5:52:77:c4:4b:54:
77:07:ac:3c:4f:5f:92:d9:2a:7c:d4:08:f1:c5:96:
cc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:53:3F:C8:E1:EC:0B:C0:7A:DA:A7:83:93:A3:7C:D5:21:02:EE:81
X509v3 Authority Key Identifier:
keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f3:89:f3:ac:b0:a1:6a:2e:d1:a7:60:69:58:56:94:d6:a2:
b9:8e:cd:fc:18:8d:1b:1a:1f:a2:97:77:15:f5:a4:38:c6:66:
e6:93:62:c8:b9:34:bf:fe:1d:7d:5f:d5:f0:e9:52:2b:12:ff:
f6:0a:a6:35:72:03:5d:1a:31:fb:bf:24:17:a4:c0:7b:12:20:
f9:34:3b:1c:9e:e0:23:24:ad:2d:12:c1:7c:a4:38:f2:e9:32:
3e:66:00:62:b3:1c:cb:26:08:70:88:e9:39:e3:ef:c8:6e:1b:
d1:52:37:62:42:45:01:b6:8c:2b:0d:8a:6d:b0:53:2f:34:46:
26:6d:f1:05:9b:d0:0e:63:47:c5:cf:27:36:b7:5d:6e:b4:ac:
a1:ef:07:91:f1:62:30:00:ec:68:8b:6b:8a:13:c4:a1:ca:6e:
89:49:ab:94:67:92:54:d4:67:17:2e:b7:a6:98:8c:29:41:fa:
d5:c2:57:09:fc:1f:e9:d9:ca:82:4b:82:95:20:6a:ef:0e:e1:
30:8e:a8:76:7a:98:16:e7:35:93:6c:25:2e:6c:68:1e:39:f7:
37:ac:d2:d8:3e:0f:1d:0f:12:a4:07:37:73:fd:74:05:58:69:
cf:aa:cd:37:35:67:aa:83:83:16:df:89:9a:ba:b7:6c:7e:29:
04:5a:79:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:33 2026 by rpki-client