Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
File: Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft (raw, json)
Hash identifier: 8QGfZ247v8zBirp7lFTazE7QZ5yBS991p+3Z7DbyxAw=
Subject key identifier: ED:3E:8E:E5:63:36:D0:C6:99:F5:9E:25:8C:03:A0:61:51:71:FF:47
Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
Certificate issuer: /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Certificate serial: 019CAA5888EA436B533A6A746454E43CF82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
Manifest number: 10EE
Signing time: Sun 01 Mar 2026 17:00:54 +0000
Manifest this update: Sun 01 Mar 2026 17:00:54 +0000
Manifest next update: Mon 02 Mar 2026 17:00:54 +0000
Files and hashes: 1: Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl (hash: Ssrf2NR6To+Ko0glPTbjb2ivwT/z7ZhE1I9FdZjtTW8=)
2: ovxLd3-R8YHUP-795BmS15YxMz4.roa (hash: ihtlHUZTymcC/9UwMeLjxx7SKoFJMvGJaK2E/0fEXh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:88:ea:43:6b:53:3a:6a:74:64:54:e4:3c:f8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Validity
Not Before: Mar 1 17:00:54 2026 GMT
Not After : Mar 2 17:00:54 2026 GMT
Subject: CN=ed3e8ee56336d0c699f59e258c03a0615171ff47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:06:dd:fb:b7:eb:26:4b:81:4d:05:b5:e0:
0c:c3:33:47:5a:ae:3d:04:0d:a7:66:f4:0e:0c:4d:
27:78:bb:71:c0:74:ca:c5:30:67:0d:76:51:e4:ab:
42:1a:13:a9:2b:58:e8:20:8b:60:3c:8c:0f:03:34:
2b:17:9a:c7:9f:c0:09:26:c1:7a:b3:ff:fc:e1:06:
55:e5:eb:57:51:22:98:0c:fa:a6:c2:ae:b3:4e:d0:
6f:7b:21:18:d0:70:ab:84:62:69:78:fe:a1:c8:24:
0a:ed:36:bf:d5:95:80:b7:e1:54:ac:58:0a:11:24:
d0:e8:73:a3:e3:ed:bd:9d:b8:64:80:3a:7b:1c:8e:
32:af:61:89:cb:8a:23:bb:4d:33:04:b6:21:3f:8a:
47:ac:98:65:c8:79:47:5b:2f:45:94:2c:26:f8:7a:
74:29:92:b9:a6:54:82:4f:92:89:70:2d:fb:71:75:
0a:49:d4:10:3c:82:a5:44:65:6e:03:93:dc:57:e0:
55:dc:65:c6:35:e5:1e:d2:82:22:20:75:48:b3:2d:
2c:52:2f:65:2e:10:74:e3:32:09:c4:ad:5f:ce:b4:
e4:99:3a:b3:ec:49:9d:50:86:d1:39:e7:15:4a:f2:
f9:2f:ff:2a:bb:6c:53:84:04:b8:9c:8c:62:b7:26:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3E:8E:E5:63:36:D0:C6:99:F5:9E:25:8C:03:A0:61:51:71:FF:47
X509v3 Authority Key Identifier:
keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:48:8c:58:36:9b:69:c5:2b:f0:f8:c2:09:b1:9d:3e:ea:2c:
37:e4:39:bd:be:9f:cc:b4:e3:8b:76:9d:5c:18:83:d5:5b:6f:
d5:de:58:9f:42:b6:3d:f3:19:49:62:9f:1e:1d:78:06:d1:9a:
99:0f:2c:f3:64:ec:fb:b3:68:c3:2d:30:fd:40:7b:37:6a:fd:
b9:54:7c:b5:19:66:9e:b9:ba:bd:5a:5c:26:9f:42:bc:a5:2d:
df:80:a9:66:d4:62:37:cd:d8:1f:b1:76:55:8a:f3:07:ef:58:
b1:e0:d0:ea:4d:11:3a:93:cc:e8:07:20:fb:75:bf:63:19:e0:
41:c4:9c:e5:28:19:27:6e:53:50:b7:d3:f4:d8:37:f6:c2:c7:
7d:4c:2c:f9:e5:18:c6:f5:89:ab:dc:b0:1b:95:1f:be:4c:2a:
52:c9:e1:7b:b6:62:da:cb:88:35:06:3b:f8:3b:17:f8:1a:ec:
61:76:ad:7a:1f:75:f8:41:64:b9:41:9e:d5:47:0c:79:e1:69:
c2:1c:d8:64:dc:5a:ed:8e:32:4d:dd:5f:18:35:ed:21:d4:1d:
82:4b:00:2f:24:2e:34:e7:b3:17:71:5e:16:31:8e:c1:44:ac:
44:88:cd:cc:d6:5b:e0:ca:88:e7:eb:42:7d:d7:b3:be:e9:b7:
9c:bc:cb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:32 2026 by rpki-client