Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
File: 7t4TuXp8d4rYAT-v-isbtkh2LPw.mft (raw, json)
Hash identifier: Km/CpBYidRuSTjA7gqjQ/Ml4vBO/K3SqSv8b2+P1ziU=
Subject key identifier: FF:17:FA:8B:8B:94:E7:13:A9:B6:00:99:7F:97:58:E4:71:22:64:4A
Authority key identifier: EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
Certificate issuer: /CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Certificate serial: 019CC3732D80948D471753AD1A2F4EB4A9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
Manifest number: A2
Signing time: Fri 06 Mar 2026 14:00:31 +0000
Manifest this update: Fri 06 Mar 2026 14:00:31 +0000
Manifest next update: Sat 07 Mar 2026 14:00:31 +0000
Files and hashes: 1: 7t4TuXp8d4rYAT-v-isbtkh2LPw.crl (hash: B56w1E8hVGp4bsBTTeEaLmql2x5o3d6piIq29OyUPD4=)
2: rJsk5UMhrb6yg-v-N5l8AaeXSUI.asa (hash: r6SGrYKI+ASOCBn2fHuASlLRkC7+wUAXBFPIKFArmfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:73:2d:80:94:8d:47:17:53:ad:1a:2f:4e:b4:a9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Validity
Not Before: Mar 6 14:00:31 2026 GMT
Not After : Mar 7 14:00:31 2026 GMT
Subject: CN=ff17fa8b8b94e713a9b600997f9758e47122644a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d5:84:82:db:d7:14:f7:48:bf:e7:da:45:bb:
ad:ba:7b:54:76:d1:75:41:21:64:03:c4:3d:0c:89:
40:b6:7c:0b:f1:1d:cf:6f:f1:f7:37:13:14:c0:14:
e2:cc:b8:e3:ab:e5:e6:9e:42:7a:8c:89:09:9e:ac:
01:de:22:ea:29:a3:21:5c:f9:aa:90:fb:0b:af:4d:
b9:f0:40:8c:81:88:80:90:ba:1e:59:a9:ba:1c:69:
c7:cf:74:dd:55:2e:8b:df:34:7e:62:37:20:45:dc:
64:c3:be:97:17:5e:94:55:fb:c0:cc:c8:0f:45:ea:
7b:26:3e:93:ac:b0:d0:42:fa:44:5c:41:b0:a2:55:
bb:b2:bf:57:99:f0:c8:f5:66:d7:bd:86:5e:f6:d6:
17:be:6c:68:50:d1:e9:27:45:0d:41:6a:96:1d:d6:
4b:3f:eb:30:56:9d:37:f2:90:bb:a5:c0:21:5d:9f:
bc:ee:10:07:31:a9:bd:e9:a6:74:d0:ea:ed:9e:0c:
bc:88:ba:30:05:56:fe:29:39:99:66:dd:4a:ae:b0:
70:38:97:9c:98:1f:8f:9b:6c:66:cb:89:74:13:f8:
d7:13:35:90:db:94:86:f4:9c:18:df:ea:f6:62:cf:
e4:3d:46:13:4d:65:81:7c:74:03:f5:4c:d8:54:11:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:17:FA:8B:8B:94:E7:13:A9:B6:00:99:7F:97:58:E4:71:22:64:4A
X509v3 Authority Key Identifier:
keyid:EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:09:58:c4:3f:63:3e:df:0d:82:1e:b3:ab:9b:cf:f4:1a:b2:
aa:73:a1:4c:54:83:7a:90:bd:23:b4:14:c7:4a:78:89:30:43:
a6:47:8b:17:05:ec:24:21:fb:76:87:0c:f9:69:8d:b9:0d:c2:
17:2f:7e:ab:4e:63:b1:b2:b6:05:dc:63:fb:a0:fc:ac:ae:43:
84:e8:96:a0:7a:f4:07:4d:ed:8b:bf:ee:19:74:d4:5f:aa:08:
f9:45:80:83:b5:55:50:6a:63:09:fb:a5:5b:27:59:de:2a:0a:
89:1f:8d:92:0d:7e:2e:bc:69:b7:09:c8:35:c1:95:d6:2e:6b:
aa:ec:37:85:69:d4:eb:74:a9:2d:ec:77:61:26:1a:b3:90:c2:
22:33:67:26:d1:03:e8:49:05:0d:84:f4:15:12:a7:b1:12:07:
18:ee:69:64:52:5d:07:d5:37:7f:68:89:62:c3:cf:e2:70:06:
00:fd:f1:06:6c:87:22:5d:06:80:b7:6e:c3:e4:a3:76:4d:42:
0a:69:96:97:12:de:a7:f5:05:ad:d6:ab:5f:b7:55:ad:54:f4:
c5:b0:e8:ca:f8:ee:e5:3c:c3:9f:1e:a1:50:eb:0d:5f:64:27:
cd:7b:a7:78:47:06:5e:71:c6:03:bf:63:ba:0e:61:6d:84:a9:
b2:1a:62:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 17:11:29 2026 by rpki-client