Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier: qMJOx856iALik9VBdob+Zk9glfk3nkWuFv0po7nR5H8=
Subject key identifier: A2:8E:51:83:F5:EB:FF:7E:E5:42:E3:3B:A2:73:17:5F:25:86:CB:76
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial: 019DCED091752993BED41F7FF04BAFA96D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number: 0D90
Signing time: Mon 27 Apr 2026 12:01:08 +0000
Manifest this update: Mon 27 Apr 2026 12:01:08 +0000
Manifest next update: Tue 28 Apr 2026 12:01:08 +0000
Files and hashes: 1: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: gbTTP1AO+8aeycpHN6KasbVbozqOAhW9YWPcbqJRWkY=)
2: s7ALXCsQ6iydnmcMndLJwyBEVrA.roa (hash: 2KKTFrZRTTsfpxmpCTn5aGO1P1QcLn41Vrt2Tl7hzrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:91:75:29:93:be:d4:1f:7f:f0:4b:af:a9:6d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Validity
Not Before: Apr 27 12:01:08 2026 GMT
Not After : Apr 28 12:01:08 2026 GMT
Subject: CN=a28e5183f5ebff7ee542e33ba273175f2586cb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:42:32:65:68:f7:76:c6:24:80:c8:42:69:ed:
a2:cb:ee:56:1f:ab:c7:fa:7b:0a:2d:87:6a:ed:4a:
fd:6c:c3:de:64:7d:1c:bb:14:f5:0e:cb:61:8d:88:
2a:56:c1:01:08:39:e1:96:90:f6:07:c0:bd:05:dc:
7b:3f:a4:7a:96:ff:c4:58:19:52:79:1c:29:b7:20:
0a:0d:90:16:4a:4d:70:3b:15:36:15:70:69:1e:12:
5b:c4:3f:9a:6a:3f:f7:ec:59:77:b8:9f:0f:d9:da:
27:30:dd:ec:2a:53:21:c7:81:49:61:76:50:fc:67:
a6:31:3e:da:0e:ed:b9:3c:c2:22:3b:e7:bd:c6:65:
3d:6b:af:ea:2f:32:d9:02:e9:8e:3c:58:6d:2a:e2:
7a:e2:52:da:06:c0:46:f1:d3:84:bb:3c:c8:3f:08:
f1:51:9a:30:f1:2f:8b:15:62:46:9f:d1:d2:89:eb:
d0:a2:06:3c:46:67:38:6a:67:e3:56:4b:32:35:bc:
30:63:a6:ef:ea:43:87:7e:8e:ee:e1:e6:b9:77:99:
2c:bc:ce:3e:35:5d:77:74:bc:c0:2b:33:57:6e:4c:
65:03:6e:34:f6:24:e8:e4:aa:18:b2:ac:cc:db:e2:
fd:d7:80:30:c8:83:b4:0e:61:9b:c5:20:fe:6d:1e:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8E:51:83:F5:EB:FF:7E:E5:42:E3:3B:A2:73:17:5F:25:86:CB:76
X509v3 Authority Key Identifier:
keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:86:a7:c4:74:e4:66:f7:d0:42:79:0b:d0:e5:46:02:a3:13:
74:a1:be:78:2d:a7:2b:d9:d4:96:f9:bd:d2:72:e0:64:c6:c6:
61:34:c4:d2:2a:ff:44:ac:76:16:e2:4d:38:59:ab:09:af:f7:
c5:a6:f7:75:3f:bd:ff:24:90:fa:14:4e:97:1b:86:90:2b:83:
26:7b:1c:63:1a:34:6a:b1:33:7c:24:af:b1:63:fd:90:ab:86:
26:57:0a:02:e8:b6:56:58:0b:7f:b2:99:38:98:a1:ea:54:de:
59:4b:20:6a:16:33:c0:f6:23:d1:25:ba:df:7e:0a:66:65:41:
ab:c3:15:9f:35:4c:c8:06:15:09:68:0e:0f:9c:bf:0c:23:4d:
5a:21:32:ca:76:19:f1:24:e4:e9:c8:65:b8:4d:a1:62:d5:3f:
19:7e:ed:f6:9c:90:53:35:63:13:bf:3c:d8:43:9e:41:f8:3e:
02:52:22:12:93:c9:22:d8:78:7e:f7:21:0e:47:58:89:9e:f7:
47:c6:21:27:6c:7e:0f:49:71:dc:fc:45:ab:74:a3:3e:2f:fb:
d1:8c:7d:74:b4:93:46:90:39:e7:c1:bd:ec:97:da:93:50:15:
9c:ec:91:6e:e4:5e:f2:96:e9:fb:e8:46:0d:35:76:c3:f1:d6:
b1:b0:71:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:31 2026 by rpki-client