Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier: 7SI3Eodx2W4rcHj7h9usHyHIxTDDBZo+3Yyfe5SRa6w=
Subject key identifier: 89:C0:BA:70:44:1B:03:36:E2:0F:20:39:B4:68:01:69:1C:F0:6F:7E
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial: 019D390A1EA55E1E7C888D7ABB1E451A136E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number: 0613
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: zeUHx+8o3YGgpObVTxJ3sCzSfg7ule+h9VikqmgUNwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1e:a5:5e:1e:7c:88:8d:7a:bb:1e:45:1a:13:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=89c0ba70441b0336e20f2039b46801691cf06f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:8c:02:c1:44:1c:e4:28:ff:f1:fe:9e:54:
f4:29:8a:6b:9c:70:4e:d8:ae:a0:0b:40:ec:d1:89:
af:95:91:4e:1b:db:00:9b:48:23:2e:3a:a9:32:10:
71:12:d7:e9:3f:4b:9c:0d:f0:fa:15:a3:e3:ce:b7:
91:b7:42:36:20:6f:a0:fb:03:a6:3d:12:71:9b:01:
b3:ba:c4:11:fd:26:79:d3:1c:e2:6c:20:16:c5:15:
3e:2e:47:5b:ca:b7:64:7c:02:a8:ee:2b:83:f8:0e:
84:df:e1:68:ef:49:f2:87:e8:7d:71:fc:d6:88:9e:
b4:17:01:83:89:c5:3b:5c:bb:24:e2:fd:18:e1:a3:
22:89:c2:01:87:4d:dc:9b:49:cb:7d:a5:50:25:e1:
0a:3b:85:0f:a9:5c:1b:d2:af:86:b7:a2:fd:34:8d:
f0:6f:54:16:b0:eb:65:00:a8:53:e9:1a:bb:8d:e1:
2c:8c:99:80:ef:14:24:d5:e4:28:28:37:b8:8a:d9:
25:46:63:38:1f:43:7e:1f:b8:24:80:d5:e5:21:19:
4c:1d:8c:72:07:7b:66:cb:47:58:f6:bd:8f:88:1a:
50:5a:0e:56:ca:ec:76:31:b5:6d:41:d1:f1:d4:6f:
e1:50:ac:98:63:18:b9:34:df:d9:ba:f4:6b:e3:5d:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C0:BA:70:44:1B:03:36:E2:0F:20:39:B4:68:01:69:1C:F0:6F:7E
X509v3 Authority Key Identifier:
keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:84:09:7b:ae:24:96:f8:6f:71:23:06:e1:19:6b:ec:56:20:
9b:72:a1:50:64:5b:14:f4:e8:19:7c:66:41:92:ec:b7:62:b1:
75:6a:4d:56:ba:ed:cf:b9:5e:c3:e3:11:8e:b4:96:82:ed:c4:
43:d8:e5:d1:a4:42:7f:fc:0d:65:1b:13:de:3c:1d:55:f0:a6:
cb:d2:83:6d:28:79:67:f9:7f:03:0e:48:74:d8:4a:91:da:e6:
9a:b3:41:4f:89:0b:f9:b0:10:7e:c1:f9:c8:ad:2f:02:3e:b0:
b4:4b:58:ec:5c:a5:06:2e:e2:d5:c5:76:77:7a:ec:2d:b8:1c:
51:20:17:d8:c9:2b:3b:f8:bc:48:80:ff:fe:aa:fd:e1:3f:19:
f5:ff:ea:6d:bf:e0:a2:fa:d8:19:98:b2:09:2e:1e:4e:82:95:
a5:95:3c:8a:f5:c0:76:de:f1:c0:36:58:9c:c7:6b:74:cd:50:
9c:a7:67:de:0c:c2:1f:f7:4f:4b:20:5f:b4:d1:41:e1:25:bd:
0e:22:a6:8a:ed:f7:f2:9e:05:c9:62:0e:fa:0e:43:97:0f:f2:
04:88:57:21:1d:f7:f2:11:96:19:70:56:00:67:fe:b8:ac:88:
b7:dc:4d:55:63:b5:83:09:1b:0d:a9:6a:52:a1:27:6e:07:a1:
b3:bc:98:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:35 2026 by rpki-client