Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File: 7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier: 5+IcyerfSeW9iRS8A8s19jk3VsPz7b85SIEB9xuXGOM=
Subject key identifier: FF:1B:CD:56:CD:A4:80:98:9E:BB:20:1D:C6:25:E0:CD:F6:00:91:E3
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer: /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial: 019D38654DB1B118615EE59E99DE153DB7EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number: 0B05
Signing time: Sun 29 Mar 2026 07:00:56 +0000
Manifest this update: Sun 29 Mar 2026 07:00:56 +0000
Manifest next update: Mon 30 Mar 2026 07:00:56 +0000
Files and hashes: 1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: GlN/BAvLdWEJMz4rPSCf3VqYeY0gn/PooNTaVJP+/Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:4d:b1:b1:18:61:5e:e5:9e:99:de:15:3d:b7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
Validity
Not Before: Mar 29 07:00:56 2026 GMT
Not After : Mar 30 07:00:56 2026 GMT
Subject: CN=ff1bcd56cda480989ebb201dc625e0cdf60091e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:48:de:e5:a0:bb:9b:48:03:c5:89:43:39:
08:ab:49:e3:c6:6d:44:df:bc:56:ae:e6:94:68:86:
b7:8f:58:b3:47:90:53:18:43:e5:cb:46:28:8c:0e:
65:c7:cc:22:bf:5f:0d:41:de:65:3b:f3:63:70:38:
bb:69:ad:53:93:15:d9:9d:9f:26:d4:a6:74:41:d1:
84:fd:cf:8e:f7:27:14:57:92:15:d6:92:97:66:77:
ca:f9:9e:ed:28:92:25:a5:c1:8a:52:67:58:ea:c7:
fd:eb:cc:48:f0:e7:49:85:57:4d:23:33:32:4e:3a:
5c:6b:d3:37:ab:68:c3:ac:a9:56:fd:a5:33:5c:e8:
1e:9d:84:be:ba:d8:a5:a2:5e:c5:00:63:5b:ac:d8:
fc:44:61:9a:28:bb:94:67:26:9d:16:13:53:c6:ec:
d3:bb:95:20:d6:ed:0e:5a:bd:7d:9f:cd:56:f6:12:
aa:a1:a5:a9:af:65:73:74:e1:e7:70:10:64:89:de:
27:70:03:3f:ff:1d:5b:f0:b8:5e:8f:20:9d:69:f5:
d8:53:d9:3b:37:3c:9f:56:54:ff:3d:86:32:3a:09:
5f:67:47:27:98:3f:bc:5f:c0:53:3e:c3:ac:0e:ee:
e8:bb:00:ab:6d:a1:16:bc:11:99:e0:29:56:09:0d:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1B:CD:56:CD:A4:80:98:9E:BB:20:1D:C6:25:E0:CD:F6:00:91:E3
X509v3 Authority Key Identifier:
keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e4:a1:d9:37:84:c0:f5:10:db:c2:46:6e:50:18:fd:cf:99:
2d:b8:22:3b:59:cd:fe:c0:c1:54:55:aa:32:aa:90:9c:98:7e:
3c:79:45:fa:bd:71:ad:02:a5:c0:10:e6:2d:5f:3c:fb:19:57:
ec:e3:23:d7:af:13:bc:90:91:90:ad:a8:57:dd:f5:d2:08:65:
d9:53:f6:55:24:34:03:d2:db:a0:5a:fe:ee:05:88:dd:1f:05:
06:49:20:f9:4b:94:0e:80:12:4b:6e:57:8a:83:ca:c8:03:b1:
f0:05:db:fe:25:24:8a:1f:ff:0b:89:39:cd:ad:9a:43:23:b2:
12:ed:c2:18:f3:b4:80:a6:97:f5:96:cc:ff:c1:0e:13:4c:98:
f1:53:a0:70:1e:29:16:af:82:60:d3:88:41:87:35:2a:05:0d:
9b:5d:9c:b3:70:21:07:9e:a9:25:a9:88:74:0f:07:29:e4:6c:
76:56:62:41:82:09:f2:0f:49:ad:41:26:39:c2:c0:87:ed:4c:
6d:32:fc:40:94:40:6a:4d:2c:dd:a6:27:dc:56:44:41:ff:52:
86:ed:a3:fa:27:99:b5:5d:82:8b:99:9c:72:92:6f:3f:91:11:
a0:a9:e3:fa:0e:3b:21:b8:95:94:f3:be:4b:c9:f0:df:a3:26:
f7:bf:d1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:00 2026 by rpki-client