Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier: OP/laJ6EAXICjfKzkBX4OjqAwUJq5yHef5huHVBvJ+4=
Subject key identifier: B8:59:8A:79:60:38:AE:8E:EF:75:E8:33:93:89:E5:E1:AC:59:1A:1D
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial: 019D36E43F8B50E98654A88FCCFB3AB81A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number: 07B7
Signing time: Sun 29 Mar 2026 00:00:21 +0000
Manifest this update: Sun 29 Mar 2026 00:00:21 +0000
Manifest next update: Mon 30 Mar 2026 00:00:21 +0000
Files and hashes: 1: FdbE8gLBJPaXpYaXJBSvvCFsnb4.roa (hash: dTLvAdXPyt6Wu2rqAm637RJ0hAUBe/Pvjzn8bfwfdaw=)
2: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: oXVbTPBZyZPtrZ+3Xj8etCLVQVLrjsCJTEAkmfaa5Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:3f:8b:50:e9:86:54:a8:8f:cc:fb:3a:b8:1a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Validity
Not Before: Mar 29 00:00:21 2026 GMT
Not After : Mar 30 00:00:21 2026 GMT
Subject: CN=b8598a796038ae8eef75e8339389e5e1ac591a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:01:d2:93:6a:4d:32:8c:9a:dc:00:85:3e:
85:af:c8:ef:fc:48:e2:e2:fb:86:2b:8d:48:cf:f9:
96:2e:6c:0e:35:86:53:46:e6:a6:62:79:ef:e1:95:
cc:35:ac:f8:8a:0f:68:91:31:e8:9d:03:0b:a7:ee:
5e:34:c1:09:c8:f8:56:63:1a:a6:7b:8a:32:36:e4:
03:5b:eb:0f:f7:1f:58:4e:dc:78:3e:57:6c:36:60:
93:c9:82:92:34:a6:88:c4:50:1f:d7:9b:26:63:18:
86:34:e8:ed:66:ec:84:71:9c:4f:e4:06:1b:8d:e5:
ac:52:3a:2f:26:c9:9e:2e:6b:49:6b:cf:63:97:95:
45:c7:bb:67:24:47:3c:0f:ff:23:e3:a2:d0:7e:84:
3e:96:95:65:b8:10:cf:02:2d:e6:77:fc:26:b9:1c:
08:b9:7a:36:5f:ce:80:81:02:e9:72:7c:74:da:f0:
6d:76:71:01:bb:24:93:76:74:0f:57:28:ca:01:ae:
86:44:47:9e:c7:06:1a:f7:82:73:16:10:1b:7a:ac:
d0:5d:2b:19:ac:04:b9:4f:87:c5:44:fc:9a:b4:a6:
a0:1e:f4:23:a5:c6:78:c0:66:8b:28:61:14:38:b1:
c5:f7:a8:10:0e:8e:a6:b8:a8:93:de:74:aa:e2:f0:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:59:8A:79:60:38:AE:8E:EF:75:E8:33:93:89:E5:E1:AC:59:1A:1D
X509v3 Authority Key Identifier:
keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:41:5a:70:0b:dc:04:e6:62:00:e2:17:5c:71:cf:9d:a8:55:
ba:a1:13:e3:a9:44:25:84:ef:0a:0f:d5:fd:75:bd:5f:25:8d:
ca:8c:a4:3b:d0:48:70:29:04:0f:87:be:2c:67:2b:47:7e:c6:
0a:99:99:7a:3f:a4:88:32:18:7d:91:43:7f:36:5b:b7:99:fb:
11:5a:31:57:11:2f:21:72:c8:66:2f:f0:b7:64:8b:84:32:2d:
7b:1f:9e:4c:55:e1:4f:52:94:70:32:7a:bf:30:22:1c:b3:62:
9a:90:a6:77:49:a7:11:f4:8c:49:f3:8b:ed:03:52:eb:00:a0:
4a:89:82:b3:d9:fb:af:eb:3d:63:e9:f7:55:e5:3a:5d:60:ce:
a1:ee:27:14:13:54:cb:4b:99:0d:6a:dc:18:65:2d:eb:7b:22:
c3:b4:00:c4:17:10:aa:0b:e9:bc:45:cd:ef:34:eb:f8:c8:87:
62:9c:22:01:7d:d3:b7:08:d4:46:ff:d9:a5:4f:6a:38:25:82:
34:31:80:a8:c4:6c:07:19:1f:c6:96:38:e9:32:9e:39:99:b4:
7e:16:80:b9:2b:40:f9:43:d2:4f:d6:af:e0:84:ed:00:07:2b:
6f:5d:40:ce:97:b2:cc:4c:d3:97:ae:04:0f:1a:5a:07:bd:5c:
d1:81:12:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:23 2026 by rpki-client