Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier: /ZutWN6c7XzCThKaYdiF8R/Dtp8H0n6Ho7+vpqqdBEY=
Subject key identifier: EB:28:28:E3:2B:2B:DF:83:71:19:99:E6:E4:47:6B:BC:A1:CD:6D:72
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 019D382EAA8E7A3D4B0CDCBFD6B19C5229CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number: 0F13
Signing time: Sun 29 Mar 2026 06:01:15 +0000
Manifest this update: Sun 29 Mar 2026 06:01:15 +0000
Manifest next update: Mon 30 Mar 2026 06:01:15 +0000
Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: XCM9vnnCSBXcFwZN7ekA2TxVexmI/Y44iJmMtGhzhlE=)
2: PCSAe779gtpQ1Sa05bIdrwV78eg.roa (hash: 1GxEJL4LImItt+ibKMd5aWwhrXtd/cVEdDLJESE/oBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:aa:8e:7a:3d:4b:0c:dc:bf:d6:b1:9c:52:29:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Mar 29 06:01:15 2026 GMT
Not After : Mar 30 06:01:15 2026 GMT
Subject: CN=eb2828e32b2bdf83711999e6e4476bbca1cd6d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f3:1c:7b:e9:5c:10:85:53:1b:43:e1:0a:d6:
14:37:bd:4d:41:b5:f1:10:f7:0e:3a:78:33:10:58:
24:5f:d9:39:16:e7:8f:3f:65:d0:15:76:08:4b:bd:
26:e0:74:b6:0d:2e:b2:32:57:92:f1:f3:4d:4a:02:
7d:97:71:25:bb:c9:81:9c:82:ef:4f:88:bb:b6:c4:
12:d8:6f:0d:7d:45:fa:ca:08:75:63:88:d3:ab:cf:
52:a4:15:de:42:2e:40:00:1f:5b:11:b0:1a:51:57:
3d:c2:f7:43:90:d7:c6:73:e9:b0:53:76:d9:19:b8:
18:b9:ec:8a:1b:c3:5c:00:4a:81:ba:02:cf:13:78:
11:22:4b:14:d9:c6:36:70:74:19:3b:c2:91:ba:a4:
63:15:49:79:ee:53:c8:e6:b0:24:40:10:b7:80:b2:
fa:6b:61:f6:52:86:5e:64:a8:94:62:48:bb:ad:ef:
94:65:42:00:3a:c3:73:55:0c:44:8d:dd:cc:3a:1b:
a2:cc:0e:e5:54:bc:91:53:d5:ed:ce:7b:97:8b:0f:
37:8b:85:ba:af:1d:f2:fa:3d:93:9a:09:26:19:57:
8e:21:59:84:5a:ae:b1:0f:b6:58:72:ee:4c:40:6e:
d8:c4:0e:14:cc:c1:7f:bf:24:8b:e0:b6:ee:a1:05:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:28:28:E3:2B:2B:DF:83:71:19:99:E6:E4:47:6B:BC:A1:CD:6D:72
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:08:21:c6:65:22:9f:d4:9e:a4:f1:be:93:bd:01:cf:b9:22:
f4:7e:17:ae:63:14:1d:b3:58:f2:23:52:94:bf:56:a1:20:80:
cc:7b:32:53:06:8f:2e:db:2d:d4:3a:42:c4:d9:04:6a:44:c6:
5f:13:7c:ee:0f:39:bc:ae:58:be:2b:66:c7:a5:11:e0:88:98:
e1:01:de:63:1a:c8:3c:c1:e4:5c:29:00:61:20:89:70:44:ee:
4c:d7:68:67:a6:a0:f8:13:27:1d:36:19:0f:c1:ae:1c:a1:a3:
92:2a:8b:72:e9:65:20:d6:c5:5e:ee:46:08:e0:07:53:ae:17:
10:b9:bd:77:cb:e6:24:fb:5f:e1:4b:d5:27:30:6a:ee:80:54:
b6:07:27:fd:10:f5:43:e6:54:8d:82:13:9a:96:cf:72:b9:94:
a9:65:3e:79:c8:96:18:8d:9f:bf:4b:28:4a:ea:54:0d:12:e6:
98:7d:94:25:2e:62:93:cf:e2:9b:91:90:ab:50:93:38:11:ff:
15:c1:0e:9f:1c:7a:a9:f5:31:b6:30:e8:1e:13:07:7e:56:51:
6d:b6:2a:a8:a8:2e:9f:a6:cb:95:46:70:a4:07:5e:d0:7f:d8:
86:1a:1c:17:88:92:f1:9b:ff:7a:2c:dd:08:cd:9f:13:64:73:
74:19:97:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:37 2026 by rpki-client