Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
File: k7MitZBI4Qe5Sm2wZVevXwycKQw.mft (raw, json)
Hash identifier: nsCj1tiyqGYRCWF//qMQbwx2CeQq1Bi0rxMfHch3I8g=
Subject key identifier: 92:9B:F5:B1:7C:76:AA:8B:7D:CD:97:6F:67:3E:B8:66:67:24:B8:7D
Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
Certificate issuer: /CN=93b322b59048e107b94a6db06557af5f0c9c290c
Certificate serial: 019D39AF37ED1637300EE30FCA2F9A129F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 13:01:17 +0000
Manifest this update: Sun 29 Mar 2026 13:01:17 +0000
Manifest next update: Mon 30 Mar 2026 13:01:17 +0000
Files and hashes: 1: 8Na-R2PqVFyNzA5u6KAFRMf11HE.roa (hash: 8IZEcdLtXy5KbQ5iic2lrmgZO3w7ovtbGyG4T1KJfkY=)
2: k7MitZBI4Qe5Sm2wZVevXwycKQw.crl (hash: MtC6mpyOQIB+3gxzGOrVQXkp+dI1SRcfEi6KZWo7heA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:37:ed:16:37:30:0e:e3:0f:ca:2f:9a:12:9f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c
Validity
Not Before: Mar 29 13:01:17 2026 GMT
Not After : Mar 30 13:01:17 2026 GMT
Subject: CN=929bf5b17c76aa8b7dcd976f673eb8666724b87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:c9:85:fb:9c:de:cc:3d:a2:d5:f4:0a:ab:
3d:b3:d1:d6:8f:3c:bd:69:8a:f0:79:0d:bc:3f:d5:
8e:dc:ad:82:fd:22:df:17:f8:30:06:38:6a:88:92:
7a:b5:f6:e2:fc:f1:8f:c2:61:4b:0e:66:c5:3c:b7:
7c:d6:45:af:a4:cf:1e:1d:f7:2a:19:4a:e9:d8:ed:
be:df:19:4b:fa:2b:98:f8:9e:58:55:fa:64:31:41:
8b:db:7d:e9:63:f2:dc:ea:0e:f5:e4:68:59:18:1c:
e7:23:88:71:35:c6:54:13:f1:11:63:36:de:9f:4c:
e9:3f:b0:b5:18:21:c5:27:af:5c:09:7a:9b:64:ea:
cd:b9:e7:30:83:8b:e6:72:e2:75:00:0a:17:02:72:
5a:b2:16:14:f3:89:df:3f:b4:eb:7e:f7:72:4d:0d:
8d:e7:09:eb:86:29:31:6f:8d:17:e9:dc:29:e4:b4:
70:21:03:03:75:6b:cb:5d:6c:a1:56:f5:91:07:37:
da:99:5c:29:d2:ba:10:9c:9d:27:2a:6b:7b:3e:f6:
9a:e6:a6:1b:b6:c2:07:06:b5:d3:15:91:ea:2b:40:
09:53:42:d3:fd:8a:b5:b5:df:04:57:6e:49:f2:5e:
ed:23:42:cb:9c:31:79:25:b7:f4:c7:dc:10:81:66:
5b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9B:F5:B1:7C:76:AA:8B:7D:CD:97:6F:67:3E:B8:66:67:24:B8:7D
X509v3 Authority Key Identifier:
keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:25:04:ff:16:b1:85:17:77:46:25:51:91:ac:c7:16:11:b1:
ed:6e:ba:0d:9c:92:43:d0:10:a0:9a:ea:85:63:8c:cf:0e:e6:
07:9b:20:74:8e:8f:b7:74:86:47:5c:42:ba:ef:4b:e1:9c:29:
fd:20:fb:12:60:d1:de:14:9a:c7:a8:92:86:d5:43:43:f3:79:
72:d1:17:13:bd:0a:d6:a6:ef:47:3d:41:81:1d:ca:1b:42:ad:
22:a0:1c:ef:a0:bc:16:95:37:4b:15:ae:7e:77:06:b3:9c:b0:
88:30:96:d5:64:25:42:78:c7:3e:db:6d:0b:72:ca:6a:ac:96:
e7:3e:cc:54:99:c5:c7:c2:53:dc:37:60:d4:22:44:90:0d:7e:
fb:8d:1a:24:3b:ce:94:7d:62:e4:37:00:13:21:77:b2:42:2c:
f5:58:2e:68:34:ad:b7:73:2b:95:eb:c1:73:e6:08:37:84:bd:
08:62:81:8a:5d:97:a5:b6:fc:42:5b:25:37:df:48:95:38:cc:
43:9f:ed:0d:03:bb:a3:70:c8:e0:9a:c4:7d:6b:53:38:4e:68:
c9:4e:82:fd:a4:26:67:1f:8c:cf:e3:26:00:5d:20:53:b5:7e:
20:4f:ab:e9:00:80:50:b3:5e:f0:59:d4:c2:9b:66:9d:c8:63:
e0:a8:06:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:30 2026 by rpki-client