Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
File: t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft (raw, json)
Hash identifier: JV+lFEKWADf373aNts2GHaORAZpCzCgmCRe56n4u3+g=
Subject key identifier: 73:E7:07:CB:9E:35:EF:F5:E6:94:4A:97:DC:C3:78:CB:EB:27:C6:4E
Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
Certificate issuer: /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Certificate serial: 019D3940C2E0F23AD1E0C045F8D2361EFD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
Manifest number: 06E4
Signing time: Sun 29 Mar 2026 11:00:38 +0000
Manifest this update: Sun 29 Mar 2026 11:00:38 +0000
Manifest next update: Mon 30 Mar 2026 11:00:38 +0000
Files and hashes: 1: 3-ZRPzIcEVUi-ra3cIe_QiX4MmE.roa (hash: ioG0rYT2U8xqbe9ZiKXHC8R0PXnU7MQZkccybD0LOac=)
2: t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl (hash: ddK2MUV8LkmR916CZPEqH5dqdEP7wUOcQ23xPPLDnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c2:e0:f2:3a:d1:e0:c0:45:f8:d2:36:1e:fd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Validity
Not Before: Mar 29 11:00:38 2026 GMT
Not After : Mar 30 11:00:38 2026 GMT
Subject: CN=73e707cb9e35eff5e6944a97dcc378cbeb27c64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ad:b7:69:5e:c5:3a:bf:c4:dc:4d:80:f8:a5:
a3:7e:27:11:62:e1:42:60:77:52:d9:d0:65:83:50:
2d:b7:88:5b:a8:03:88:42:10:4f:c5:ab:d0:58:a2:
4d:19:48:5c:41:9c:cb:85:05:22:db:fc:f5:07:c9:
6c:c7:b1:7a:d2:d6:82:1f:89:3d:b7:32:57:0b:03:
20:36:c9:35:f5:a9:93:7d:69:de:35:75:fc:d1:63:
22:1d:16:76:57:c2:9f:fb:30:3e:d5:85:77:33:64:
ed:3f:f0:ad:74:fc:05:cd:52:d9:0a:3b:e1:16:e0:
a1:ac:56:07:2d:cd:85:3e:10:d4:3b:56:35:06:6d:
8a:2e:85:ee:fb:b1:53:f1:af:a5:d8:20:06:b9:03:
ff:93:c8:7b:72:b0:f7:e3:36:03:6d:be:62:5e:d6:
bc:e2:a5:70:28:8c:40:0e:29:04:4f:f4:11:ad:d6:
8b:f1:67:61:de:34:e8:d9:3f:b1:ea:69:13:bc:16:
d5:64:0d:8d:49:bd:5c:b0:5a:f5:93:cd:fc:bf:9d:
5a:89:98:45:57:d3:53:db:d9:5a:e1:61:fa:18:2f:
87:99:67:71:b1:22:f9:72:63:c5:90:cc:ce:e4:3a:
db:a0:34:5b:7c:9f:54:26:6b:ed:f1:cd:1f:19:a1:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E7:07:CB:9E:35:EF:F5:E6:94:4A:97:DC:C3:78:CB:EB:27:C6:4E
X509v3 Authority Key Identifier:
keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:23:6b:a3:86:40:d2:8d:8f:30:3c:ab:e8:13:d3:89:2c:ee:
03:3b:c7:95:cb:ed:59:d5:1f:7e:27:2d:88:c9:c4:2c:16:c1:
fb:bb:41:65:55:7c:59:33:64:b9:a9:d0:41:1a:e2:04:3f:94:
fe:ef:55:ef:66:a7:8d:81:60:76:e8:39:f9:00:04:72:ae:b0:
75:68:02:35:ac:22:e5:65:70:e6:0a:0e:b3:57:f2:4e:81:29:
bc:34:d1:84:d8:76:9d:e4:06:1a:1c:eb:09:2b:6e:b1:5d:3a:
04:3b:1e:fb:da:1c:13:44:0d:7b:3c:67:c0:30:25:a8:be:d7:
a2:58:bb:c7:fc:5d:92:02:10:5e:d7:54:bd:8a:35:9e:df:41:
ea:1c:fe:a4:27:7b:39:3c:ba:63:cd:2f:72:32:09:7e:d4:21:
fb:bc:78:c7:14:f0:cd:e5:1f:6b:1a:6a:22:4b:31:0d:3c:a6:
df:b6:d1:6f:92:d8:ca:86:ba:c4:81:be:2c:7c:50:9d:14:a5:
72:ef:cd:99:0a:2d:ec:90:6b:da:75:3d:fe:21:54:18:c4:05:
ff:87:98:67:6a:4f:e2:8f:75:cc:2a:f8:07:f7:41:e3:df:0c:
dc:c6:21:89:7e:c0:fc:ec:6f:cf:a8:30:53:af:af:d7:3c:80:
0e:98:96:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:45 2026 by rpki-client