Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
File: 7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json)
Hash identifier: YXy9cOWpuCJmlgjOVn841+jzuq71WFq3FeJzbBGMM/Q=
Subject key identifier: 45:B0:7C:42:03:31:38:3B:6D:E0:E0:89:18:CE:39:91:DA:43:7D:89
Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
Certificate issuer: /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Certificate serial: 019DA48A5758BD0EC6ACEF7AF9985405F6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
Manifest number: 12E8
Signing time: Sun 19 Apr 2026 07:00:22 +0000
Manifest this update: Sun 19 Apr 2026 07:00:22 +0000
Manifest next update: Mon 20 Apr 2026 07:00:22 +0000
Files and hashes: 1: 3MNxWlvYJ1UEreJxUOEEE9L47Ng.roa (hash: dV3Q++D9g4wj89CuXX4P3NnLKAaay8XuMVHolFZE0pI=)
2: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: R5wDt8ionrCLXeHHGKJLd9RiJMrJvJL9QY7eSvxb2oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:57:58:bd:0e:c6:ac:ef:7a:f9:98:54:05:f6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Validity
Not Before: Apr 19 07:00:22 2026 GMT
Not After : Apr 20 07:00:22 2026 GMT
Subject: CN=45b07c420331383b6de0e08918ce3991da437d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:3d:43:1c:47:2a:89:98:ae:8d:14:01:28:
60:18:6f:5d:13:68:24:57:73:1f:d8:3f:9a:a6:54:
e7:79:4e:11:0f:6e:27:04:63:2a:31:d7:d2:76:bd:
00:50:e9:f5:98:51:a1:d5:0b:aa:32:50:4c:a3:5c:
d6:73:05:fc:84:1b:7d:13:30:51:10:d7:16:34:32:
1f:a0:d4:17:8a:26:17:26:fc:3b:f3:f2:2c:3b:e0:
e3:f1:ea:56:d4:ba:c3:dd:6f:68:b7:f6:30:ee:0a:
f2:58:29:6e:36:61:cb:5b:f6:e6:53:f7:e6:45:98:
85:85:8c:7a:42:19:6c:6a:19:b4:db:f0:4b:a3:8a:
c7:9c:17:e7:8e:07:00:56:1e:a4:8f:cd:07:b9:50:
11:e0:68:92:ac:b9:97:83:0a:3e:27:36:7e:15:80:
f4:26:d3:3d:7b:d4:33:4f:73:14:af:da:ea:43:97:
0f:21:5a:82:fc:30:fe:0a:9b:3e:1c:3e:0b:d7:ed:
e8:58:1f:d2:ee:7b:df:3d:a5:23:ea:03:55:1f:e7:
ea:86:2e:55:92:d7:05:a0:81:07:5b:81:3c:a4:be:
2d:f5:87:b1:a8:ed:d5:4d:b4:a5:fd:a2:1c:19:3c:
bf:e8:c9:b4:b1:86:25:5f:2d:f4:cc:7a:a2:51:00:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B0:7C:42:03:31:38:3B:6D:E0:E0:89:18:CE:39:91:DA:43:7D:89
X509v3 Authority Key Identifier:
keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:24:e9:a9:5a:43:22:77:bf:3d:31:b7:de:95:ed:b5:cf:77:
4a:28:1c:9c:0c:1d:62:a1:c1:0d:74:3b:5a:62:07:98:26:e5:
fa:47:a3:fa:a4:1c:6c:3c:e6:b8:71:37:79:45:cc:4b:1c:11:
0d:8a:48:c3:49:0b:c7:27:51:ba:50:d1:6d:cd:2a:c5:44:c7:
61:0d:6e:6c:17:81:1c:87:8d:f9:ff:11:e3:30:1b:c2:fe:42:
94:1c:c9:12:54:b4:b8:7f:c6:57:1e:4e:fd:3f:5c:e0:2a:5e:
f6:0e:d8:aa:df:80:45:e1:5a:13:9f:87:66:b6:9b:ec:95:a3:
e4:d6:f2:33:7c:1e:6f:e8:e7:db:98:37:d9:b6:d9:e7:5a:65:
2d:9d:6c:d2:51:40:06:5e:86:95:00:a8:18:d5:f3:ed:53:4e:
4f:09:74:24:f9:8b:24:6d:21:b2:08:5d:1d:d0:bb:56:df:0a:
ea:bf:c4:18:41:7e:69:36:9d:77:92:76:68:1c:9a:f9:2d:f8:
bb:64:3b:6b:fc:bf:43:58:2a:c6:5d:54:5c:cc:5d:c2:6f:17:
f7:0f:bf:44:b4:5e:a8:47:a8:5f:99:0b:93:e8:3f:75:ce:3b:
76:d4:3e:69:70:51:18:02:dd:80:9e:61:10:5a:6c:71:8d:f7:
1a:ba:ba:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:18:03 2026 by rpki-client