Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: dU4LDzwQMKwGMmM8mxJkLquZccjJXRRuUv303lE+W9A=
Subject key identifier: A6:2B:22:9D:BB:6B:EF:17:34:00:8E:17:96:51:C4:FF:16:F8:90:49
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 019CABD8E571230C7BE48D435CCD280204BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:00:44 +0000
Manifest this update: Mon 02 Mar 2026 00:00:44 +0000
Manifest next update: Tue 03 Mar 2026 00:00:44 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: Fj3e7gtrGE6V6GJoriig1I/YT5cGDZzhWWhx+ERnbEY=)
2: NE1cSr4PhSWQqxI3RwadUkiTzr4.roa (hash: gTOFfm6+4dqvFvqDPuHaiv7nUh/TeTbmvELpqBUfVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e5:71:23:0c:7b:e4:8d:43:5c:cd:28:02:04:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: Mar 2 00:00:44 2026 GMT
Not After : Mar 3 00:00:44 2026 GMT
Subject: CN=a62b229dbb6bef1734008e179651c4ff16f89049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:66:5c:9a:51:8e:0a:9d:ec:9c:47:94:24:
27:cb:c3:75:2a:f3:45:44:84:f5:ab:5c:10:5c:17:
50:38:a7:5a:b3:7d:17:0b:f4:5f:63:e4:7a:ae:6d:
01:f1:7d:ca:c0:10:98:79:66:39:d5:4c:30:ed:14:
f0:e8:30:98:0e:6c:66:32:dd:2d:4f:1d:b4:b6:3c:
52:67:f5:8a:1c:8b:8b:ed:7c:4c:71:50:2d:2d:49:
2f:be:55:73:b1:b7:a2:e8:13:9e:bf:3b:56:b8:86:
39:2d:63:70:fb:18:ad:f2:fb:02:36:6e:fc:ce:7a:
cb:80:53:9b:58:a7:97:de:c1:ee:fb:11:dc:ed:e2:
5e:97:cf:40:83:44:f4:81:62:a8:4e:2d:24:c7:91:
1d:eb:ea:af:dc:02:31:0d:0c:30:d8:48:8c:ff:34:
9e:1e:17:45:f8:2e:15:59:d0:16:ce:18:ac:f4:89:
e3:25:aa:ad:bf:13:1a:fc:74:bc:35:6d:3c:d6:30:
1a:d9:8b:e5:50:31:e5:fb:f8:dc:0b:51:b9:b2:f3:
64:45:49:3c:a2:e8:76:73:c9:5f:a9:96:20:6f:47:
46:d9:f2:28:af:fe:04:2c:c2:4e:71:66:70:0f:4d:
54:97:df:f0:ef:dd:c5:e3:02:6d:63:72:ae:10:8e:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2B:22:9D:BB:6B:EF:17:34:00:8E:17:96:51:C4:FF:16:F8:90:49
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0f:24:6d:ab:44:f6:6d:d2:ec:b8:9f:de:fe:fe:e0:c0:3b:
9f:b7:85:58:1a:cd:65:0e:21:61:09:48:e4:39:74:e4:a5:53:
b4:5b:da:1d:6f:b5:e1:03:6e:a5:9d:f4:66:8f:b2:80:25:18:
62:0c:25:fe:4a:f1:c1:cc:01:4c:25:12:00:43:fd:b2:64:73:
d2:bd:9f:62:1b:4e:12:9e:32:bc:9d:dd:7a:14:d7:d8:95:bd:
20:7b:10:d7:50:3b:73:cd:09:dd:a1:dd:eb:93:d2:b4:b6:6e:
67:77:a9:c1:57:69:2a:b3:ed:36:91:8c:59:bc:4d:61:57:d1:
2b:4d:15:bd:45:c8:7e:3c:7f:5c:73:e0:46:ce:e5:71:f2:ac:
23:b7:2c:2a:15:da:37:80:7c:ed:c1:fa:38:ba:88:6c:62:29:
91:db:78:c4:84:88:e0:b2:27:72:69:f1:ff:52:00:da:bb:bf:
1c:ae:cd:18:ec:68:fd:5d:43:8d:54:e2:61:34:6a:80:f4:8a:
c8:27:c9:ec:f0:14:6d:02:c5:57:90:5d:ad:b6:fb:47:37:21:
84:7e:b6:e0:c4:41:9c:2f:7a:13:88:a9:24:c3:1e:9d:93:5b:
9c:41:18:53:90:64:a0:6a:36:16:b5:d6:55:3f:01:5e:85:13:
b1:9b:43:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:52 2026 by rpki-client