Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d841d4-2d94-4917-930e-bb0ad10109f2/1/t7eCBzKSRCr-gLr7D7H3KGzzQFI.mft
File: t7eCBzKSRCr-gLr7D7H3KGzzQFI.mft (raw, json)
Hash identifier: qAejQmQMtRhHkL0TrYujtkadRuUr+W3WBFpB1O9Vtok=
Subject key identifier: 09:B3:BA:C3:7D:40:3C:8C:10:04:F0:BF:80:AC:DB:8D:EB:B1:18:E2
Authority key identifier: B7:B7:82:07:32:92:44:2A:FE:80:BA:FB:0F:B1:F7:28:6C:F3:40:52
Certificate issuer: /CN=b7b782073292442afe80bafb0fb1f7286cf34052
Certificate serial: 019D38D3964F678DD9E067A4C86922862AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7eCBzKSRCr-gLr7D7H3KGzzQFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d841d4-2d94-4917-930e-bb0ad10109f2/1/t7eCBzKSRCr-gLr7D7H3KGzzQFI.mft
Manifest number: 5B
Signing time: Sun 29 Mar 2026 09:01:23 +0000
Manifest this update: Sun 29 Mar 2026 09:01:23 +0000
Manifest next update: Mon 30 Mar 2026 09:01:23 +0000
Files and hashes: 1: t7eCBzKSRCr-gLr7D7H3KGzzQFI.crl (hash: bmDKJM1qWBXZ4r5L3LJgNAfezqpqwHjZ2Z7krt4EIhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d841d4-2d94-4917-930e-bb0ad10109f2/1/t7eCBzKSRCr-gLr7D7H3KGzzQFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d841d4-2d94-4917-930e-bb0ad10109f2/1/t7eCBzKSRCr-gLr7D7H3KGzzQFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7eCBzKSRCr-gLr7D7H3KGzzQFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:96:4f:67:8d:d9:e0:67:a4:c8:69:22:86:2a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b782073292442afe80bafb0fb1f7286cf34052
Validity
Not Before: Mar 29 09:01:23 2026 GMT
Not After : Mar 30 09:01:23 2026 GMT
Subject: CN=09b3bac37d403c8c1004f0bf80acdb8debb118e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:87:b0:a0:dc:f1:2a:95:e6:19:f4:99:3a:
3c:79:21:c9:55:19:60:8c:fc:b1:0c:34:87:31:50:
5c:22:e6:af:12:90:82:f9:13:fd:1e:5e:ce:ad:6a:
94:bc:7f:ba:4f:cd:97:85:ab:25:44:84:5c:d1:1b:
72:ae:e5:a6:39:2d:44:db:f5:0c:8d:da:64:69:a5:
f2:d7:bd:ad:4a:f4:18:ad:97:0c:b0:38:6c:2a:63:
f8:c6:c0:66:86:43:d5:bd:1f:ab:39:42:cc:11:4d:
5c:03:c9:5b:ca:42:a7:aa:c7:76:b3:77:bb:03:45:
b9:00:ed:e5:a1:01:a1:55:24:a3:ab:6d:a6:9a:f8:
72:2d:3c:c1:59:65:5c:9d:cd:ea:5e:86:d1:56:d7:
99:47:33:e4:9a:f4:35:38:7e:a2:b1:e6:76:9e:3e:
07:9a:d7:d1:e7:72:64:cd:4d:a4:7b:a9:30:fa:c0:
d6:e1:b6:5b:98:30:c3:df:79:85:29:31:56:51:88:
99:a9:13:f7:39:b4:36:8e:56:c9:fb:71:ff:a1:70:
f1:b3:78:70:5e:ae:00:82:5f:c8:6c:11:37:69:c9:
0f:71:bd:24:06:3d:54:29:8e:df:72:3b:fa:08:92:
4a:ff:db:55:61:e0:34:2c:cb:d9:73:a7:a8:51:00:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B3:BA:C3:7D:40:3C:8C:10:04:F0:BF:80:AC:DB:8D:EB:B1:18:E2
X509v3 Authority Key Identifier:
keyid:B7:B7:82:07:32:92:44:2A:FE:80:BA:FB:0F:B1:F7:28:6C:F3:40:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7eCBzKSRCr-gLr7D7H3KGzzQFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d841d4-2d94-4917-930e-bb0ad10109f2/1/t7eCBzKSRCr-gLr7D7H3KGzzQFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d841d4-2d94-4917-930e-bb0ad10109f2/1/t7eCBzKSRCr-gLr7D7H3KGzzQFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c1:47:31:b1:69:f8:38:8e:66:db:b4:05:36:c2:af:91:a1:
10:ce:53:bd:0a:52:8a:88:49:10:b1:0a:4f:50:1f:2c:b9:51:
75:8b:d3:15:ae:9d:15:96:3f:6a:d2:75:cc:f3:98:85:95:6b:
6d:91:d1:03:0c:29:da:f5:51:78:d9:5b:29:3f:06:52:03:a4:
f7:69:33:bf:4c:2f:3b:cd:69:8f:ac:b9:cf:3a:27:f9:e6:1e:
0c:cc:5e:00:7a:bc:98:c7:a9:7b:09:1b:a1:33:db:d6:a3:48:
b8:da:79:10:cd:42:57:5a:53:ee:d6:b4:a5:89:e6:a1:34:37:
29:7a:9e:7a:26:bf:b7:36:e5:a6:73:4f:f6:ec:de:b2:be:63:
5d:cd:56:84:08:a5:4c:ad:ad:2f:d0:80:59:58:a3:63:ea:b9:
b2:41:7a:83:c2:b3:3f:63:cd:df:f7:37:e6:0f:df:04:56:64:
4a:06:0c:8e:86:8b:b8:31:e9:1a:15:d9:05:a2:8f:85:a4:75:
a0:ad:5d:a2:8b:34:53:29:82:c0:12:82:91:87:f9:85:8b:46:
3b:c5:02:af:fd:db:f6:b5:f0:0d:69:e3:9f:76:2e:b1:30:ab:
4d:34:cd:12:12:1d:5e:af:a7:60:ff:8d:15:ad:bb:20:ce:a1:
73:19:f7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:49 2026 by rpki-client