Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/d9dc0c-e2a5-4aad-9ad3-d9c563d499c0/1/B7kGAtmAjOess_ex_XIm7YKSJbQ.mft
File: B7kGAtmAjOess_ex_XIm7YKSJbQ.mft (raw, json)
Hash identifier: e2Mh/HDTw/Uec9gSOSWgc7ozcncYbJl4rnzRvn5htjc=
Subject key identifier: 94:08:14:11:44:D0:40:8D:99:2B:7E:F5:10:65:75:55:CE:2C:3E:16
Authority key identifier: 07:B9:06:02:D9:80:8C:E7:AC:B3:F7:B1:FD:72:26:ED:82:92:25:B4
Certificate issuer: /CN=07b90602d9808ce7acb3f7b1fd7226ed829225b4
Certificate serial: 01A04016E9EF9E82C2CE7B3A4838A64316AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7kGAtmAjOess_ex_XIm7YKSJbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d9dc0c-e2a5-4aad-9ad3-d9c563d499c0/1/B7kGAtmAjOess_ex_XIm7YKSJbQ.mft
Manifest number: 49
Signing time: Wed 26 Aug 2026 22:00:38 +0000
Manifest this update: Wed 26 Aug 2026 22:00:38 +0000
Manifest next update: Thu 27 Aug 2026 22:00:38 +0000
Files and hashes: 1: B7kGAtmAjOess_ex_XIm7YKSJbQ.crl (hash: GproNGJoQy9o+mrXLBjIPV1XJ0e10/pblciNm945gMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d9dc0c-e2a5-4aad-9ad3-d9c563d499c0/1/B7kGAtmAjOess_ex_XIm7YKSJbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d9dc0c-e2a5-4aad-9ad3-d9c563d499c0/1/B7kGAtmAjOess_ex_XIm7YKSJbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7kGAtmAjOess_ex_XIm7YKSJbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:16:e9:ef:9e:82:c2:ce:7b:3a:48:38:a6:43:16:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b90602d9808ce7acb3f7b1fd7226ed829225b4
Validity
Not Before: Aug 26 22:00:38 2026 GMT
Not After : Aug 27 22:00:38 2026 GMT
Subject: CN=9408141144d0408d992b7ef510657555ce2c3e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:76:08:8f:10:8b:67:ef:24:94:4b:32:a9:
12:b1:53:8b:f3:84:19:d8:0c:8d:97:27:1f:b5:2a:
57:d3:c4:5f:01:2d:92:b4:8f:50:ca:25:b2:47:24:
20:78:56:7a:94:10:e9:0e:fe:74:5f:68:2f:3e:09:
cf:29:ed:69:12:90:e6:12:fe:e3:c8:ff:5f:5e:eb:
76:ee:dd:19:fb:6e:27:8b:d2:e5:10:10:2b:6e:35:
2a:68:55:3d:24:af:e7:2a:77:6c:f6:df:3c:ca:af:
77:2b:86:11:a5:6e:2f:c9:b8:8e:e1:e9:1f:07:d6:
fd:9f:20:b9:59:b0:96:57:69:74:27:bd:bd:8f:86:
d3:6b:a4:57:0b:d6:17:e6:1a:55:05:ab:70:3b:1a:
c1:11:19:db:bb:69:26:47:df:54:a2:80:14:70:8f:
c3:c0:3c:8e:77:8b:8b:11:0a:f5:92:db:86:96:62:
cc:cd:fa:ab:9e:c7:88:1a:8e:d3:b8:b7:ef:53:05:
28:75:53:13:94:a1:a5:94:5d:a7:59:d9:14:83:6d:
e9:f1:f9:ec:46:4e:84:db:44:e0:e7:1e:9c:b7:97:
cc:1e:5a:84:ca:fa:b9:78:57:97:1c:58:74:44:fb:
8e:4c:59:00:76:18:84:e8:ff:e4:b5:2b:b6:13:5d:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:08:14:11:44:D0:40:8D:99:2B:7E:F5:10:65:75:55:CE:2C:3E:16
X509v3 Authority Key Identifier:
keyid:07:B9:06:02:D9:80:8C:E7:AC:B3:F7:B1:FD:72:26:ED:82:92:25:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7kGAtmAjOess_ex_XIm7YKSJbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d9dc0c-e2a5-4aad-9ad3-d9c563d499c0/1/B7kGAtmAjOess_ex_XIm7YKSJbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d9dc0c-e2a5-4aad-9ad3-d9c563d499c0/1/B7kGAtmAjOess_ex_XIm7YKSJbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8a:af:5c:7e:9e:59:30:9e:28:0c:61:0b:75:07:a8:f6:3e:
89:4c:e2:4d:d3:f5:74:de:fa:eb:99:73:1b:b8:df:58:9e:79:
51:62:41:ef:33:57:af:83:b0:23:0a:28:44:96:c2:e3:09:03:
fc:f0:58:2e:05:28:9f:9b:3a:77:67:ac:69:81:e4:80:06:c4:
29:15:a1:dd:94:03:9f:a1:f8:6f:a0:4e:5e:51:b0:05:dd:87:
1f:7b:c1:64:58:31:4f:61:6e:10:cb:4b:97:a8:fd:eb:ad:97:
0f:f0:06:81:e5:b7:97:d0:19:1c:27:4e:94:50:0b:d1:87:1c:
28:bb:67:2e:be:eb:89:c4:0f:8b:d5:06:85:03:21:ac:c0:04:
00:08:74:13:36:5b:a2:f8:a9:39:9f:68:e7:17:e8:15:0f:3a:
98:ac:a3:7d:d9:1c:b6:25:22:cf:01:cc:65:04:a7:8c:1d:7f:
3e:3c:c7:89:11:5f:d8:d7:ba:dc:0c:00:d3:e9:0c:a9:14:6d:
0c:98:32:9f:50:32:32:f7:69:a6:84:ce:c3:89:d8:d9:54:e9:
13:c4:0e:59:5a:45:41:48:35:51:6d:97:63:b0:23:54:1c:c7:
54:7d:0a:73:f0:17:45:23:a9:b0:2d:f3:f1:01:30:70:e7:7a:
52:eb:86:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:44:19 2026 by rpki-client