Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
File: d7tRRrULW8gaNXR6K75lKqC3Fnw.mft (raw, json)
Hash identifier: q1AeS3hObCAwtvmButSI6JbWWKcIpSuq2galDzWKmhI=
Subject key identifier: 2A:EF:D7:88:61:59:7D:8D:89:A0:95:7B:6C:C2:81:EC:8F:6B:D5:27
Authority key identifier: 77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
Certificate issuer: /CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
Certificate serial: 019D3940B9D17042677D7A6AE896025B59BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
Manifest number: 1534
Signing time: Sun 29 Mar 2026 11:00:36 +0000
Manifest this update: Sun 29 Mar 2026 11:00:36 +0000
Manifest next update: Mon 30 Mar 2026 11:00:36 +0000
Files and hashes: 1: d7tRRrULW8gaNXR6K75lKqC3Fnw.crl (hash: sssB/pLzLZ3ZbX8f6p17TaN6degrNc3SeixYNjS4ywA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b9:d1:70:42:67:7d:7a:6a:e8:96:02:5b:59:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
Validity
Not Before: Mar 29 11:00:36 2026 GMT
Not After : Mar 30 11:00:36 2026 GMT
Subject: CN=2aefd78861597d8d89a0957b6cc281ec8f6bd527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:f5:38:c0:3a:5f:8b:da:b3:50:d3:98:5b:
97:5e:9a:09:bd:a0:6a:9b:bf:f2:5c:1f:c7:7b:9d:
37:88:a5:1d:57:15:a9:b9:37:0b:62:51:dc:a5:1a:
8f:c5:a9:32:bc:cf:d3:fb:42:4b:e6:16:cb:b2:31:
89:38:63:40:7b:21:34:fd:77:e0:e2:31:29:8f:e0:
83:d1:cd:76:08:c6:ca:3d:90:27:8b:2f:47:c8:4b:
e8:0d:9f:8d:f5:f9:3b:ed:a6:12:7f:20:dd:df:fe:
25:dd:25:91:b9:32:e5:05:10:20:1a:e1:3f:b2:0e:
30:58:06:f7:a5:2c:5d:1d:6b:0d:d2:93:41:88:b4:
0f:ce:73:0c:fe:7a:a4:71:4c:a0:a5:27:82:bb:07:
21:86:9f:dd:e2:97:d0:f5:bc:23:6d:9a:21:6c:66:
a6:1d:96:d1:6c:0b:7a:62:e1:83:ae:01:e0:88:07:
1a:3e:ed:56:bd:d6:95:23:68:66:df:2f:01:54:7b:
2e:b0:69:de:13:98:bc:f3:d9:01:88:48:6e:2d:2e:
a1:62:1a:96:3a:15:f0:3b:71:3d:05:3a:58:3b:a7:
40:fa:4b:51:dd:d5:4a:77:0d:95:5c:c3:e7:11:b4:
05:40:85:62:f5:6b:10:d5:16:ab:1b:3c:2d:87:8c:
27:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EF:D7:88:61:59:7D:8D:89:A0:95:7B:6C:C2:81:EC:8F:6B:D5:27
X509v3 Authority Key Identifier:
keyid:77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b5:c3:e3:0a:55:33:24:71:f9:de:9d:40:a1:92:66:de:45:
61:71:70:28:f5:08:3d:38:db:c4:b3:25:1a:82:36:1b:6b:b5:
8d:c9:20:62:56:94:3f:8c:a1:fe:ba:0a:a0:06:b6:2e:af:a5:
47:27:1a:28:24:9f:7e:18:b2:fc:60:b1:d5:9a:97:6d:5f:05:
da:fa:4e:bc:51:8a:a9:ec:42:12:a2:a2:0b:f7:b8:0c:1b:e1:
ce:f9:4f:fe:55:31:81:08:ed:e4:0d:f4:fe:5f:0d:c0:58:b9:
45:2f:e3:4b:99:0d:5c:7e:b6:83:fa:2f:2b:0f:25:f2:c1:f4:
f8:c2:ea:ac:bb:0e:0b:c8:60:8a:6d:1e:85:3d:d3:35:6d:b5:
b0:d9:1c:93:21:63:fd:b9:56:aa:a3:51:40:1e:78:7e:e4:11:
18:7a:d1:59:dc:a7:ee:c6:d2:01:cd:a3:c7:7b:67:06:51:58:
80:a9:ff:d2:0f:e7:88:f9:d3:20:86:5d:3b:9c:4e:ef:5b:88:
1d:77:8b:36:c8:45:0f:c3:e0:bd:49:a7:68:b0:ae:4f:f6:3f:
62:2f:cd:a4:3e:b1:79:ec:5d:21:b5:b7:f8:d3:11:f2:2a:02:
17:92:99:39:f4:23:c5:33:53:61:b9:f4:0e:27:12:85:e3:0d:
59:05:cb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:18 2026 by rpki-client