Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
File: b7yr8HwZyKIKdpqoKQcaszgvWIo.mft (raw, json)
Hash identifier: WruiUG4+0f0ZeyE8iscR/kpsFWN+AlPsKuvuHmzzE6s=
Subject key identifier: 87:85:0B:73:65:34:E7:B9:DB:F4:4F:A9:F5:29:ED:C1:69:74:6B:E1
Authority key identifier: 6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
Certificate issuer: /CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Certificate serial: 019FA26100280CF00CADFBBE8E0360A5C5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
Manifest number: 19CC
Signing time: Mon 27 Jul 2026 07:01:33 +0000
Manifest this update: Mon 27 Jul 2026 07:01:33 +0000
Manifest next update: Tue 28 Jul 2026 07:01:33 +0000
Files and hashes: 1: b7yr8HwZyKIKdpqoKQcaszgvWIo.crl (hash: /4r1eZlm+mlY+E98zw/I9p63g+hp89N/tIM0vwCBL3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:61:00:28:0c:f0:0c:ad:fb:be:8e:03:60:a5:c5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Validity
Not Before: Jul 27 07:01:33 2026 GMT
Not After : Jul 28 07:01:33 2026 GMT
Subject: CN=87850b736534e7b9dbf44fa9f529edc169746be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:0a:a1:b6:08:26:ff:65:7b:18:2e:98:39:
ef:c3:0d:b8:a3:be:0b:02:59:55:ee:91:aa:f2:b0:
a0:b9:6f:7c:62:14:87:47:ca:ad:a1:b1:4e:64:4c:
56:47:99:5f:a1:ca:d2:6a:ce:6c:65:14:13:56:c1:
eb:99:1d:d0:c7:da:aa:34:d2:29:95:ca:42:09:27:
a2:86:10:8b:e3:39:61:d9:fd:72:d6:60:4a:8a:30:
87:cb:08:1b:d5:16:70:86:f1:b0:32:6b:46:3d:a2:
3d:81:5a:de:2e:9e:8f:59:19:63:1c:f4:43:45:94:
89:2c:2c:f4:28:c6:fa:1a:21:36:b3:21:75:64:de:
d0:b0:52:c6:58:51:41:41:43:05:d7:32:4e:42:44:
97:aa:6e:61:4f:28:b6:cc:6d:a4:a4:80:d6:36:4b:
5d:03:eb:fa:f4:68:16:11:06:09:8f:a1:cf:4a:37:
f0:6a:cf:e0:86:8e:d2:9a:72:82:ea:dc:87:f7:91:
4d:5f:b6:38:69:d8:b6:68:34:6b:52:d0:2f:05:a3:
61:26:67:19:c8:65:11:7f:0c:7d:2a:69:90:86:71:
f3:91:1c:21:9f:28:74:56:e1:81:46:72:90:cf:01:
6f:38:2d:32:a9:27:3f:50:57:69:75:7b:c2:a4:df:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:85:0B:73:65:34:E7:B9:DB:F4:4F:A9:F5:29:ED:C1:69:74:6B:E1
X509v3 Authority Key Identifier:
keyid:6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d4:14:66:ff:8b:64:8e:35:bc:ab:79:65:cc:b3:02:5d:02:
fc:99:42:8d:51:b8:86:f8:fa:bf:7c:85:3a:d0:6c:28:7d:d3:
ae:9f:96:fa:78:9c:6c:0a:db:ac:a2:80:d6:d1:56:23:92:cd:
22:b2:6e:81:60:d1:e8:d4:60:7f:0b:5f:33:0b:ce:bc:06:68:
5a:c0:91:3c:c0:8b:85:9a:8b:51:e6:6b:b7:60:c2:db:84:58:
59:7a:b7:bd:ca:f5:7e:83:22:1b:fc:0a:8a:ac:fc:56:8d:bd:
91:b4:b9:14:20:eb:48:93:88:a0:96:90:2f:38:06:33:50:a8:
bf:8d:a1:c9:5f:af:89:f4:d7:93:f1:31:af:1e:c4:30:52:9f:
35:42:8c:5c:c1:5f:95:93:08:e1:e6:bd:55:d3:85:2b:fa:44:
b8:7c:50:12:7e:6f:48:ce:ab:75:b1:1e:07:56:7b:05:42:49:
66:39:f3:82:82:13:7f:60:68:b8:3a:4c:99:33:98:5c:51:1a:
27:40:24:7d:7e:5d:80:26:5c:4c:19:b7:01:78:59:02:3f:59:
67:e3:62:4f:ad:ac:eb:6a:d1:3d:06:bf:9a:36:f1:46:0e:08:
64:0a:be:3c:bc:cc:76:b2:12:aa:8e:7c:ec:7f:30:0c:d4:37:
8e:51:d6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:04:25 2026 by rpki-client