Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
File: b7yr8HwZyKIKdpqoKQcaszgvWIo.mft (raw, json)
Hash identifier: jD+NkaVfnaQ3viZFSqoAT35ICdYh8yVxmwrFYRwtPKw=
Subject key identifier: CD:0E:6F:60:BA:8C:1B:6E:D4:20:CF:5B:72:CF:E4:A1:6C:2A:9B:25
Authority key identifier: 6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
Certificate issuer: /CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Certificate serial: 019D3A53B11626AC7EDB1814AE167DDB3AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 16:00:56 +0000
Manifest this update: Sun 29 Mar 2026 16:00:56 +0000
Manifest next update: Mon 30 Mar 2026 16:00:56 +0000
Files and hashes: 1: b7yr8HwZyKIKdpqoKQcaszgvWIo.crl (hash: pp0ctXgdPCzDPNjOnqz7Mqy1NmFt5jYjcdkarEPqyIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:b1:16:26:ac:7e:db:18:14:ae:16:7d:db:3a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Validity
Not Before: Mar 29 16:00:56 2026 GMT
Not After : Mar 30 16:00:56 2026 GMT
Subject: CN=cd0e6f60ba8c1b6ed420cf5b72cfe4a16c2a9b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:52:f3:bc:9e:48:71:7f:9c:b1:01:27:3f:
7e:3f:5b:a5:27:94:35:4b:4a:07:14:16:af:88:e7:
50:c4:c8:70:44:32:f7:ed:1c:03:18:c1:22:59:6d:
d1:6f:6f:89:04:3f:ae:6f:0c:2a:da:7b:fd:4d:d7:
f3:cf:1c:ce:82:99:de:b6:b5:3f:c2:67:a0:b4:cb:
a1:19:5f:00:c2:91:4a:92:bc:36:ad:f0:5b:a5:24:
34:2b:00:9a:2b:63:48:40:c4:43:02:30:db:e7:46:
c9:f4:e4:ed:8a:d4:10:24:de:a5:05:ee:4d:52:9f:
fe:02:3c:1c:bc:ff:a6:0f:d1:64:1c:49:20:03:ee:
d3:58:a8:f5:df:56:36:2b:6f:30:63:ec:4e:59:77:
07:48:07:84:c1:ac:69:12:a3:01:aa:9d:08:fe:e6:
4a:75:81:b7:24:3e:88:a1:e8:f2:5c:e3:13:be:4b:
d3:49:e7:fe:dc:f6:74:4a:c9:97:fe:06:6c:a5:6b:
8c:e7:b0:70:57:7c:5f:91:51:c3:7c:5b:fb:95:59:
3f:07:35:43:21:4b:1b:d9:7c:13:13:fc:e1:57:ed:
a6:b3:78:af:99:3e:4c:e2:2f:78:68:53:6e:1b:c9:
c0:b3:8d:7e:88:03:65:bc:bf:3a:f8:6c:15:71:f9:
5f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:6F:60:BA:8C:1B:6E:D4:20:CF:5B:72:CF:E4:A1:6C:2A:9B:25
X509v3 Authority Key Identifier:
keyid:6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f9:c2:97:9a:3a:7d:e9:e9:81:39:58:30:84:af:ff:df:6e:
ec:65:71:ad:f5:fc:1d:13:63:4e:22:1f:11:a7:cd:f1:69:24:
34:46:4d:1a:ac:2d:19:c9:a6:c8:3c:04:77:d8:4a:c2:d2:14:
25:02:06:ad:88:5f:d8:95:25:ac:c6:08:df:fc:02:1f:e0:c7:
d2:8b:f2:9b:e4:0f:b5:41:69:f6:7a:83:69:00:30:34:a9:6d:
3d:df:9b:97:87:53:0e:75:16:a7:21:a9:11:6f:92:6d:12:17:
ab:49:22:53:07:fc:ec:20:65:57:0c:fd:fe:19:6b:e4:bc:d8:
6a:f5:70:c7:ea:ec:56:bf:2d:a8:33:4f:55:dc:36:42:f8:bd:
3b:15:10:eb:34:69:37:96:6d:8f:6b:a0:cb:9c:c2:ec:ec:32:
25:71:43:09:fd:95:ec:6d:ab:68:a9:b6:50:9f:08:67:b6:4f:
e1:78:d6:2a:b4:06:18:53:52:50:98:d3:8e:5f:23:70:b0:1f:
53:8f:15:66:45:17:75:56:c1:df:4c:e3:b7:cb:47:20:49:a1:
35:64:53:f8:2d:78:9c:df:ef:c4:54:84:bc:e8:7e:b1:d6:85:
1a:db:00:0c:cd:88:dc:9f:c3:62:0f:c6:2d:93:d2:7a:06:27:
26:35:1e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:39 2026 by rpki-client