Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
File: s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json)
Hash identifier: mYA55kEHm7n7efozyUoLktpBVrT7OMANSf+acHGrxfU=
Subject key identifier: B3:1A:ED:AD:42:71:FB:EC:2D:59:7D:1A:A4:F0:FD:A7:56:25:84:86
Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
Certificate issuer: /CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Certificate serial: 019D28F204067777B15CB1F3BE7A6C575BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 07:00:42 +0000
Manifest this update: Thu 26 Mar 2026 07:00:42 +0000
Manifest next update: Fri 27 Mar 2026 07:00:42 +0000
Files and hashes: 1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: zFzIV9yYRqkQqFxJPxZqRXYnWN759A6A8uyll1VSklc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:04:06:77:77:b1:5c:b1:f3:be:7a:6c:57:5b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Validity
Not Before: Mar 26 07:00:42 2026 GMT
Not After : Mar 27 07:00:42 2026 GMT
Subject: CN=b31aedad4271fbec2d597d1aa4f0fda756258486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:b4:c8:17:74:b9:ea:50:ca:f9:d6:0c:5f:
63:cf:e5:e7:59:12:77:cb:98:6a:57:c3:ee:6f:6f:
af:8e:9a:d7:6b:e8:96:ec:45:b9:77:56:a0:16:2f:
16:50:b8:c6:b0:a2:cc:37:f9:38:13:b8:98:40:5e:
d4:dd:71:47:9e:d5:f9:d5:ef:12:4e:98:42:d6:79:
f6:f3:18:8e:f2:a0:66:fe:9a:50:53:ab:6f:94:59:
75:77:8c:cd:f1:00:05:27:29:96:76:21:41:dc:5a:
a4:5b:d2:96:a4:13:77:3f:7b:10:08:c4:dc:6a:18:
1c:01:cb:2a:c9:91:af:df:79:18:11:74:e2:60:ab:
c1:10:d0:95:79:97:c4:44:f7:58:5b:6a:ec:d3:e7:
4f:ab:2f:27:58:64:19:61:96:b8:9a:39:b5:99:34:
41:40:c5:f6:6f:43:9a:a0:76:c9:d1:6a:9b:d3:c3:
69:1e:7b:09:5a:14:be:7c:e7:b2:cb:4c:97:d5:26:
e6:f7:d4:a7:52:24:28:e1:91:ee:38:a1:c0:80:f3:
e9:16:90:45:d9:36:e0:24:e8:46:87:b9:ff:fa:70:
b7:5f:df:62:5a:50:91:ea:12:6e:3e:e2:3d:1f:e4:
be:e5:13:ee:f6:17:1f:36:80:1c:4d:ac:d9:2e:20:
72:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1A:ED:AD:42:71:FB:EC:2D:59:7D:1A:A4:F0:FD:A7:56:25:84:86
X509v3 Authority Key Identifier:
keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:96:23:b2:aa:44:0b:e6:da:a2:f1:50:34:48:71:4c:2d:ed:
19:d2:a3:ff:fc:45:a5:dd:8f:bb:3e:05:f2:b0:b3:34:a1:b9:
75:ad:b9:b2:b4:e1:9f:7b:cd:2a:a6:a5:1b:1b:72:b6:04:7c:
cc:0d:18:2e:fe:9b:ff:0c:e8:6e:c0:57:41:34:cf:9b:cb:0b:
a9:32:a4:31:da:e6:4d:17:02:a9:d0:b8:0e:71:4d:18:21:e2:
a1:54:b1:18:fe:c7:b7:82:5d:14:5a:c8:a8:2e:8a:8e:90:2c:
f0:dc:36:65:ed:9e:0c:52:18:90:9c:b4:6b:a5:fd:e8:ba:3b:
c0:ed:22:a8:d2:b2:31:e9:f1:cd:e4:52:02:99:d5:3c:05:5d:
f6:ec:ed:3a:01:55:47:56:d4:fc:68:84:76:14:c4:4b:9c:d1:
84:ef:c6:96:f4:5f:8e:d4:1a:3b:47:1d:00:cf:83:6b:01:0e:
c8:f1:d9:4c:12:00:3f:c7:95:a4:67:79:ca:a7:a0:5d:9f:75:
f3:8e:5a:42:99:d3:d6:1b:78:e6:0d:d5:25:6e:05:2d:45:78:
c2:e7:5f:30:17:a1:04:9b:0b:26:4b:0e:f4:9b:c5:f6:af:ec:
55:ce:f0:dd:ad:a8:13:44:6b:fa:64:06:43:48:b0:50:0b:a2:
bf:78:16:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8gQGd3exXLHzvnpsV1vyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjVlMjFiODQ1YmIxZGRmYWJiMzg4ODgwMmMxOWE2MjI3
NzM4MDIwHhcNMjYwMzI2MDcwMDQyWhcNMjYwMzI3MDcwMDQyWjAzMTEwLwYDVQQD
EyhiMzFhZWRhZDQyNzFmYmVjMmQ1OTdkMWFhNGYwZmRhNzU2MjU4NDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU60yBd0uepQyvnWDF9jz+XnWRJ3
y5hqV8Pub2+vjprXa+iW7EW5d1agFi8WULjGsKLMN/k4E7iYQF7U3XFHntX51e8S
TphC1nn28xiO8qBm/ppQU6tvlFl1d4zN8QAFJymWdiFB3FqkW9KWpBN3P3sQCMTc
ahgcAcsqyZGv33kYEXTiYKvBENCVeZfERPdYW2rs0+dPqy8nWGQZYZa4mjm1mTRB
QMX2b0OaoHbJ0Wqb08NpHnsJWhS+fOeyy0yX1Sbm99SnUiQo4ZHuOKHAgPPpFpBF
2TbgJOhGh7n/+nC3X99iWlCR6hJuPuI9H+S+5RPu9hcfNoAcTazZLiByFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMa7a1CcfvsLVl9GqTw/adWJYSGMB8GA1UdIwQY
MBaAFLO14huEW7Hd+rs4iIAsGaYidzgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84ODE3OGEtN2Y1MS00MzY1LWFhZTIt
ZmU1MDY1MGUxYmU0LzEvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS84ODE3OGEtN2Y1MS00MzY1LWFhZTItZmU1MDY1MGUxYmU0
LzEvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5YjsqpE
C+baovFQNEhxTC3tGdKj//xFpd2Puz4F8rCzNKG5da25srThn3vNKqalGxtytgR8
zA0YLv6b/wzobsBXQTTPm8sLqTKkMdrmTRcCqdC4DnFNGCHioVSxGP7Ht4JdFFrI
qC6KjpAs8Nw2Ze2eDFIYkJy0a6X96Lo7wO0iqNKyMenxzeRSApnVPAVd9uztOgFV
R1bU/GiEdhTES5zRhO/GlvRfjtQaO0cdAM+DawEOyPHZTBIAP8eVpGd5yqegXZ91
845aQpnT1ht45g3VJW4FLUV4wudfMBehBJsLJksO9JvF9q/sVc7w3a2oE0Rr+mQG
Q0iwUAuiv3gWLA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:05 2026 by rpki-client