Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
File: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json)
Hash identifier: q5SnKOS07XnXUpOUyP2k/hzxz6brhV+R8kisq6p4KrU=
Subject key identifier: 61:77:E9:A3:12:C0:EB:F9:15:9D:F0:4A:00:B4:43:A0:2F:74:07:D1
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Certificate issuer: /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial: 019D37F770904CB614ED7F309BE50B7681F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
Manifest number: 0F77
Signing time: Sun 29 Mar 2026 05:00:56 +0000
Manifest this update: Sun 29 Mar 2026 05:00:56 +0000
Manifest next update: Mon 30 Mar 2026 05:00:56 +0000
Files and hashes: 1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: KrhwSNr5q6IJaJlvcTAVsNXYOVF/g7fIYhUOtcfIedI=)
2: nl2woE4tEUQD3CSF7qKSvews-N8.roa (hash: L5p+cCQTpEMxnRlqVhomZChKjWD7GqqQzUPRzvLGeYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:70:90:4c:b6:14:ed:7f:30:9b:e5:0b:76:81:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Validity
Not Before: Mar 29 05:00:56 2026 GMT
Not After : Mar 30 05:00:56 2026 GMT
Subject: CN=6177e9a312c0ebf9159df04a00b443a02f7407d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:20:e7:08:94:cc:c9:16:96:47:6f:0e:85:
39:22:93:5c:c6:21:32:79:af:2b:7d:92:a7:3f:4c:
e6:f9:8f:93:a4:10:ba:a0:06:eb:38:5c:c4:67:e5:
5a:b7:ed:d2:6d:76:35:28:1e:53:ef:91:63:f1:96:
6c:7e:1f:93:92:a4:ad:e5:53:34:eb:26:f3:75:6a:
47:44:d8:7f:76:bc:76:7b:5d:5d:cd:a4:58:57:8b:
e1:a5:e3:4c:04:69:be:57:0b:f7:6e:84:8a:e4:ca:
85:d7:1d:52:9d:e3:70:75:3c:24:d9:ec:97:72:a1:
3c:41:b5:f6:c6:e6:2b:39:23:62:38:e4:8e:b4:92:
8f:31:e7:a4:2a:38:db:e5:72:ae:ad:eb:d5:0b:44:
e4:be:50:91:35:71:e6:4b:7e:9e:74:16:22:10:35:
e0:de:b2:f2:f2:cc:b0:70:6e:55:18:53:76:d0:1f:
35:97:44:c1:5b:b1:5e:b1:3b:1c:58:69:58:84:d4:
50:b7:63:24:be:fe:5b:12:03:ff:e5:71:c9:1a:26:
00:04:83:ae:73:51:b2:83:8c:8e:bd:1e:b9:e1:bf:
b4:20:05:ff:b0:ac:44:1c:9d:92:34:cc:cf:0e:9b:
66:7b:1a:5b:52:6b:6f:df:c0:7e:0c:0e:47:65:73:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:77:E9:A3:12:C0:EB:F9:15:9D:F0:4A:00:B4:43:A0:2F:74:07:D1
X509v3 Authority Key Identifier:
keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:95:9e:87:06:74:fe:48:8a:76:2a:af:91:c6:fd:82:91:34:
11:69:86:4e:c8:32:e6:f9:7c:e3:99:70:11:ed:0e:cd:3f:d3:
b6:50:56:70:bf:95:b4:1f:9c:20:28:46:2e:75:b0:25:47:a8:
18:92:56:aa:fa:82:db:25:b3:4d:75:44:2c:c0:d7:3e:b6:fd:
73:0c:16:b4:a8:cb:bd:fa:f7:dc:9c:e9:6e:56:e3:b9:7c:b1:
e8:d0:5d:16:3d:08:f7:5d:b0:28:dc:fc:1f:a9:a1:e1:a2:db:
c0:fc:f8:0c:86:ad:72:b0:84:91:58:6e:94:9f:57:0b:0c:a1:
6b:7d:11:b0:b0:6d:39:27:53:c0:50:63:83:71:4f:c5:69:70:
e8:b0:fd:26:94:ff:8e:ea:27:81:e0:07:c7:3c:15:46:45:94:
fe:95:62:46:47:27:b3:81:0d:82:9e:67:b4:30:4c:6c:1b:19:
75:f0:6b:ab:68:1a:43:18:35:67:2a:ec:52:a7:82:a5:a4:e3:
b7:52:9e:29:c3:8e:ca:57:9b:71:8a:b8:73:72:0a:fb:d4:b1:
e5:0d:b8:ff:d7:b3:be:01:69:e1:60:39:61:a1:4e:ec:c5:5e:
a6:f3:dd:cc:12:cb:83:ce:f0:44:85:07:80:20:bd:e7:f8:b1:
53:8b:d4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:47 2026 by rpki-client