Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
File: i5epFTYKSH1c9dXGZeW_4f_1Np8.mft (raw, json)
Hash identifier: 5Z2iI+zOuw3GFaqwS6lA9tFRw9/3zWeSRd8PPp3jr7g=
Subject key identifier: 7B:FF:0C:FC:C7:4C:8A:7C:F7:EA:BF:1C:26:3B:1C:D4:37:2C:14:2D
Authority key identifier: 8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F
Certificate issuer: /CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
Certificate serial: 019D38661B88CF92B0C5F1BAF11701244BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
Manifest number: 072C
Signing time: Sun 29 Mar 2026 07:01:48 +0000
Manifest this update: Sun 29 Mar 2026 07:01:48 +0000
Manifest next update: Mon 30 Mar 2026 07:01:48 +0000
Files and hashes: 1: i5epFTYKSH1c9dXGZeW_4f_1Np8.crl (hash: kehY3Gei7Bgv1OrIJM7L4Ooil79+2jC5F7nvP9B9Ifw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1b:88:cf:92:b0:c5:f1:ba:f1:17:01:24:4b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
Validity
Not Before: Mar 29 07:01:48 2026 GMT
Not After : Mar 30 07:01:48 2026 GMT
Subject: CN=7bff0cfcc74c8a7cf7eabf1c263b1cd4372c142d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:36:6c:1a:56:42:f5:3e:45:ee:33:5a:2f:
fa:77:7f:f1:d4:12:2d:3e:88:69:42:71:18:1a:60:
a6:2f:37:80:8f:4e:5f:08:d0:a0:84:52:f7:d2:9b:
a6:57:ed:b0:01:d0:6b:9f:00:d9:e5:e6:ac:51:00:
02:54:f0:62:a5:72:7a:f4:d1:3f:f4:e2:3c:1a:29:
ab:ec:7d:e6:cb:26:43:4d:fe:23:98:42:f5:09:7a:
cf:36:db:eb:29:31:74:30:24:82:b0:f0:97:d1:e6:
19:12:b9:52:19:ad:19:9f:89:09:13:28:1e:24:10:
dd:aa:16:b4:00:53:6a:fd:a2:0c:be:e4:4c:73:49:
37:24:cc:0d:15:23:b3:61:df:96:2c:82:1b:d7:c8:
b2:92:e0:13:5d:9a:5c:e9:22:df:d0:35:7a:b7:d9:
de:f8:5d:40:1a:d5:48:9f:25:a4:9f:77:ed:f7:c5:
5c:20:67:11:7f:f0:eb:99:ed:48:55:e0:2c:5a:cc:
89:43:cc:78:0a:72:e2:81:59:48:da:06:40:51:83:
cf:03:d0:71:b6:a6:51:b8:3f:4e:02:6b:db:4f:86:
98:c3:e1:20:d9:9a:1f:70:36:4a:cd:fe:f5:35:2e:
65:4a:6a:c9:cf:e0:75:87:da:a7:91:5a:f9:3a:8d:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FF:0C:FC:C7:4C:8A:7C:F7:EA:BF:1C:26:3B:1C:D4:37:2C:14:2D
X509v3 Authority Key Identifier:
keyid:8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9a:a2:f4:54:af:1a:49:1f:ca:a1:b2:38:cd:42:40:96:47:
a8:6a:9f:df:59:cb:44:4b:fb:df:db:b9:3d:8d:0d:5c:21:be:
02:21:8a:d2:b2:06:39:65:7d:2e:fe:01:37:b6:bc:9d:d7:27:
0e:cf:92:92:68:1e:50:5d:aa:b6:64:7b:e6:90:38:44:4c:e7:
cb:52:e7:ff:11:5d:79:16:cc:24:b0:5b:c1:4e:6f:de:ce:29:
6c:f5:2b:e1:72:b0:b0:30:af:9f:23:d8:e5:5b:61:70:d5:d8:
64:b5:06:58:10:e6:87:c4:8c:71:06:ce:fd:3c:09:1e:90:47:
05:ae:89:50:3a:cb:1a:4f:1b:4a:10:29:0a:5a:e4:45:c4:ec:
ca:7f:70:3c:ab:f0:e6:ac:be:de:40:c2:82:e0:1a:69:7a:8a:
c7:ba:ed:63:fa:05:49:24:59:5e:7b:ac:53:4b:8f:67:47:d8:
73:da:1c:54:bb:46:62:42:75:e8:26:94:03:9c:10:f8:a5:9c:
db:2f:7f:86:3e:4f:f0:9e:a5:0d:cb:d8:39:e7:df:02:da:f9:
cf:83:8e:cc:16:8c:12:a3:72:26:86:a6:f8:6c:ee:fa:0d:08:
eb:45:7e:8d:d6:04:93:1c:67:90:8c:4d:d2:df:ed:ac:66:47:
4a:7b:5c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:38 2026 by rpki-client