Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
File: 7O2DGd7RXV8LarRBAJ3hmxnRUps.mft (raw, json)
Hash identifier: o7bMXpkQxTko01FZlUmbiZSIwfdLQfSwehCqEZUp8Qo=
Subject key identifier: B2:12:70:7A:90:36:3D:8F:31:B2:39:53:1B:59:7E:51:1F:B1:6D:00
Authority key identifier: EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
Certificate issuer: /CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Certificate serial: 019D08C2E5ECCB75CF4E89D9871544B8417E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
Manifest number: 087B
Signing time: Fri 20 Mar 2026 01:01:23 +0000
Manifest this update: Fri 20 Mar 2026 01:01:23 +0000
Manifest next update: Sat 21 Mar 2026 01:01:23 +0000
Files and hashes: 1: 7O2DGd7RXV8LarRBAJ3hmxnRUps.crl (hash: 4TSplRRxKjG2oJRbKI+ENZYHtTONOYO7HFCtgP7smjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:c2:e5:ec:cb:75:cf:4e:89:d9:87:15:44:b8:41:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Validity
Not Before: Mar 20 01:01:23 2026 GMT
Not After : Mar 21 01:01:23 2026 GMT
Subject: CN=b212707a90363d8f31b239531b597e511fb16d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:e2:65:0c:df:b8:3f:e9:6e:fd:8a:82:b2:
54:2f:b8:d7:e0:8b:db:93:cc:b7:ff:f4:21:c4:bd:
aa:ba:8c:a0:11:eb:71:df:62:6c:2c:04:65:d8:8c:
5a:0e:70:ad:dc:e0:58:23:91:f9:ca:7b:43:c3:c8:
2f:e6:89:71:cc:1b:36:43:6a:33:a0:f3:12:0b:d2:
ca:b6:ab:cc:d1:af:96:6e:63:48:c5:ca:2a:b1:31:
16:fd:ff:e4:1a:75:f4:22:01:5c:8a:bb:f7:1d:c0:
eb:e9:a1:5f:7d:95:39:5d:a3:55:a6:4c:51:ae:eb:
d3:4f:70:f1:97:28:d1:28:1f:86:06:e7:59:ba:da:
ed:91:ec:50:2e:b2:44:56:91:4c:41:4a:f0:6d:68:
14:c7:22:29:3b:cf:57:f4:d8:ac:c4:0e:e9:55:1a:
ad:8b:4e:fe:9b:de:1d:f1:94:6b:c5:b5:63:5e:dd:
bc:f2:fc:15:a1:73:de:1e:5f:7e:ea:08:d5:38:c7:
4a:df:f5:04:27:73:68:6f:59:bf:db:df:2a:61:3f:
51:c2:70:42:e0:ee:8f:f2:02:9e:01:7d:2f:ab:dc:
5c:66:ad:20:81:10:a2:9c:6c:ef:c8:ab:b0:d3:18:
3a:a5:93:ca:42:a2:68:e9:cf:a2:55:8b:20:83:5a:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:12:70:7A:90:36:3D:8F:31:B2:39:53:1B:59:7E:51:1F:B1:6D:00
X509v3 Authority Key Identifier:
keyid:EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9d:0d:36:1c:4c:26:7a:6b:4d:20:f9:f3:7d:29:92:c9:1f:
1f:76:48:d2:3d:5d:60:69:65:c6:70:2e:ea:32:ee:5d:25:c3:
67:e9:9b:5b:07:6d:f5:dc:05:64:bf:df:29:7a:4d:51:2c:8c:
81:dc:ef:21:56:d5:10:77:91:6b:0c:79:66:b4:3c:c0:e7:77:
98:c8:24:b3:d1:10:ab:03:2d:ce:78:2a:89:ec:33:c4:60:72:
8d:4a:97:67:b5:55:f6:f4:cb:4d:d9:f0:4f:2f:9d:2e:11:94:
a8:99:97:b9:51:c5:e9:f4:c0:84:52:7f:c5:f3:41:61:b9:6b:
a7:93:c2:a0:11:14:3c:db:d5:ed:46:d3:6f:38:c0:bc:7e:cb:
7c:c0:bc:1e:f2:7c:62:90:f3:05:d2:10:b6:b7:a8:74:96:e4:
4c:ba:96:c7:21:80:00:c8:b8:da:63:f8:9d:08:65:87:e0:8d:
d5:c6:af:20:dc:2e:45:ce:3f:a0:4d:49:53:19:a2:f3:2a:ce:
c4:ba:3b:7b:eb:02:98:56:35:ed:46:b4:ab:1d:5c:85:3a:16:
45:1a:dc:3e:38:73:9d:34:82:5d:f3:e0:da:6c:ed:1b:11:94:
08:82:a7:6c:dd:c6:ad:9f:b3:4c:16:ad:74:b1:5a:4d:d0:d7:
62:06:4f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 08:23:07 2026 by rpki-client