Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File: m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier: kj+ko6GcGxCYttnUZnGN4MJ5LiSdvYBJqUricaxzL4s=
Subject key identifier: 50:0A:44:8B:07:FA:CD:29:5E:97:B1:8B:CA:D3:EE:42:5D:EC:AE:2A
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer: /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial: 019D27A8B4F94F71B4986DB2F55DE314350C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number: 12F7
Signing time: Thu 26 Mar 2026 01:01:00 +0000
Manifest this update: Thu 26 Mar 2026 01:01:00 +0000
Manifest next update: Fri 27 Mar 2026 01:01:00 +0000
Files and hashes: 1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: OAj/8WQP3LHOg6RMzZ+WuA4e6fE3SPEDCqJvC78zFYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b4:f9:4f:71:b4:98:6d:b2:f5:5d:e3:14:35:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
Validity
Not Before: Mar 26 01:01:00 2026 GMT
Not After : Mar 27 01:01:00 2026 GMT
Subject: CN=500a448b07facd295e97b18bcad3ee425decae2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:d1:e1:37:a1:fe:7b:8b:24:99:f2:18:e9:
2f:f4:f0:ad:05:76:6d:3b:f0:4c:d0:f8:ee:7a:fc:
cb:ce:84:ca:19:b2:e7:4f:c8:0b:68:4e:13:20:6b:
28:09:3f:9b:c4:06:ec:08:b4:b5:61:7a:ae:76:d7:
a6:34:bd:7c:b6:12:c1:17:e6:63:a4:e4:e2:8d:40:
7e:bc:fa:9d:6d:8e:b0:46:67:23:03:77:f6:fc:33:
24:1b:8a:66:ff:f3:6f:4a:16:3d:16:c4:04:a8:80:
81:90:fa:4f:af:09:36:26:d0:7f:75:68:fa:a6:50:
f9:68:c2:9c:f1:e1:9f:22:73:9f:a4:63:1c:9b:d4:
ec:7b:14:af:4f:aa:a9:ab:6d:86:2a:66:bd:22:b8:
97:07:74:28:2a:de:ab:f4:79:7a:d2:3b:1b:92:27:
72:6b:bd:da:3e:b1:fe:ec:1d:7b:48:47:16:55:4f:
ca:b2:29:84:e5:19:4d:cf:f5:4f:f1:dc:c8:43:55:
58:c2:fd:90:54:17:e4:b3:8a:67:b9:d5:56:5f:12:
94:45:ea:37:b5:04:4e:83:9a:2b:34:6f:3a:69:92:
50:53:31:03:46:6f:3c:14:22:0d:72:50:5b:37:cc:
90:f6:47:72:4e:43:f0:f6:93:5b:2c:01:97:70:d7:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0A:44:8B:07:FA:CD:29:5E:97:B1:8B:CA:D3:EE:42:5D:EC:AE:2A
X509v3 Authority Key Identifier:
keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:75:af:d2:c6:1e:5a:bf:91:75:61:5c:04:14:0e:33:bc:70:
99:18:ca:a9:33:67:1f:40:e3:4f:69:20:91:55:5c:fc:c0:9f:
90:0e:14:38:0b:6d:1e:58:a6:80:45:a5:ba:77:20:ed:30:d7:
e0:91:a9:67:bb:31:e3:af:75:64:9e:dc:81:80:75:1c:f9:f2:
61:f7:71:8c:e4:7e:2a:bb:89:fe:b0:b5:03:6c:cc:5b:02:be:
31:38:3a:28:ee:34:7f:c9:09:09:45:43:dd:84:71:2a:e6:b6:
99:33:85:ca:aa:98:23:8d:6d:3a:02:29:5e:c3:c6:fa:5b:2c:
0f:75:91:33:34:6f:0e:af:cb:f5:4d:45:39:90:6c:ce:b8:a1:
dc:8d:fc:c6:cc:3b:0b:00:4b:f7:aa:5b:7a:6e:58:64:eb:ba:
2f:db:88:e4:39:5d:1b:c9:98:47:3f:f0:9a:e3:37:d1:82:bf:
9a:97:0b:81:8c:b7:52:08:43:ae:80:cb:e2:cc:70:99:8f:59:
63:3a:f6:67:b7:c9:f2:3e:c3:1b:92:cc:b9:da:03:04:82:21:
b3:89:d6:f4:c0:59:72:60:d3:66:10:a6:4b:be:cd:29:79:c1:
63:fe:45:bd:3b:56:f9:59:b0:b5:b6:0c:e6:c6:e7:9b:50:17:
c8:32:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:18 2026 by rpki-client