Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: derAs2hP6VItyMuFCZqPubEnXARUJYXFHNYiKgD5pqs=
Subject key identifier: 6C:89:80:5A:6D:FF:1E:9F:20:64:9B:58:A9:0F:04:99:E0:C7:AA:04
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 019D389C0EF0AA668E433E2497D5586B24D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 131B
Signing time: Sun 29 Mar 2026 08:00:44 +0000
Manifest this update: Sun 29 Mar 2026 08:00:44 +0000
Manifest next update: Mon 30 Mar 2026 08:00:44 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: qLFAlwgrlOIKLBkqmMRX/u0vrC1GTXADK5f1DTZpgOs=)
2: _Uw3PwW3zuhX_9qdNVHM9xLSh_Y.roa (hash: pJtmufqjt3E+bTnB46Z/8QQdZ6WxLHIqysmmyqJfzzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0e:f0:aa:66:8e:43:3e:24:97:d5:58:6b:24:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Mar 29 08:00:44 2026 GMT
Not After : Mar 30 08:00:44 2026 GMT
Subject: CN=6c89805a6dff1e9f20649b58a90f0499e0c7aa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:fc:de:c5:a6:a9:09:25:69:06:a4:d1:95:
4b:1a:cc:10:9c:ba:7d:16:1e:e4:d5:b8:a3:31:e8:
43:68:ca:6c:8e:19:79:fd:bf:d0:42:bf:d9:ef:33:
14:e1:66:52:6f:96:f7:ba:d3:65:33:fb:2d:14:1a:
56:76:e3:67:60:33:3e:47:fb:d2:ab:19:93:50:64:
e0:67:74:d1:fd:c2:ee:49:3b:92:71:f0:7b:6c:20:
1f:b4:4a:55:44:47:33:bb:79:c8:a4:f0:51:5e:c0:
63:4d:62:71:2e:ef:f9:14:79:e9:ad:ce:33:c4:6c:
dc:d9:5c:09:0f:67:6c:eb:41:cb:61:b0:75:ae:e7:
64:d1:ed:32:6f:6b:86:8d:1c:b9:11:00:51:bd:09:
a3:52:8e:ea:47:bf:e5:a5:0c:da:79:78:ce:4a:c8:
65:ea:16:54:e3:f6:4a:37:7e:4e:19:68:a7:d6:58:
df:bb:42:df:6a:77:42:9a:8a:20:88:18:d4:f5:3d:
da:58:67:46:fd:f8:4d:71:ac:8e:16:c4:3c:7c:f6:
bd:87:b7:07:f0:9c:01:4b:0f:05:89:66:f6:5b:9d:
5c:99:6f:af:8d:11:53:1b:0a:e1:f5:39:36:8c:6e:
ff:b7:f8:d3:b1:e7:d3:a8:fe:8e:27:7c:03:0d:b0:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:89:80:5A:6D:FF:1E:9F:20:64:9B:58:A9:0F:04:99:E0:C7:AA:04
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:da:aa:78:3c:72:3b:5c:0c:1a:22:a6:9e:d8:47:0b:49:0e:
45:eb:67:30:bc:0a:52:13:2e:d5:a2:8e:9b:e6:77:49:92:0d:
c2:bd:12:55:25:98:17:dd:50:8f:98:6f:ad:9b:b4:22:be:37:
e9:38:51:fe:9a:8b:31:a1:64:55:77:7a:a7:cf:2f:5e:e0:87:
e1:df:ce:4b:7b:9a:8d:f0:0d:07:5c:23:58:79:fc:88:10:ef:
00:c2:70:4e:7e:42:3b:26:56:f0:7c:3b:b1:ed:b7:14:7d:5b:
73:3d:1d:6f:27:2a:c2:41:e8:38:51:e7:65:ad:57:0a:b1:1b:
99:3e:9b:46:64:6b:23:af:57:f2:b9:3d:42:77:86:84:39:e0:
f5:b3:26:72:2c:38:51:78:58:eb:2d:59:1f:8f:5b:69:93:7f:
1c:7e:fc:53:f9:56:57:23:af:2d:2c:5a:65:75:d5:81:6a:c0:
5e:77:c5:69:e5:46:52:24:77:3e:23:0e:98:a7:f5:cf:22:75:
c9:48:c2:57:17:bf:31:48:ae:61:2b:d4:c0:40:15:3c:35:00:
19:08:1c:bb:20:ed:60:31:ff:c6:c8:f3:0d:ce:f1:77:94:e4:
23:31:34:8e:d8:78:b0:c2:70:2c:51:4f:2c:6e:bd:9e:78:4f:
ab:8d:7e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:47 2026 by rpki-client