Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
File: L7GbEAHBEHH7osw0FMxHW2wpCcc.mft (raw, json)
Hash identifier: 20/JXCGyU/sPCkp9dXtwaFaTmz4nz757BtNfMmZMGEs=
Subject key identifier: CB:BA:6F:E1:03:95:4B:A7:62:F2:BC:D9:65:AB:94:6A:71:7A:0D:3B
Authority key identifier: 2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
Certificate issuer: /CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Certificate serial: 019D27722F2AFCC109D7D5B9F7FC6DD9F8D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
Manifest number: 1881
Signing time: Thu 26 Mar 2026 00:01:27 +0000
Manifest this update: Thu 26 Mar 2026 00:01:27 +0000
Manifest next update: Fri 27 Mar 2026 00:01:27 +0000
Files and hashes: 1: L7GbEAHBEHH7osw0FMxHW2wpCcc.crl (hash: 6PMizkQHfGPj87SOmdlqDO0xC92Pi6QFfzTSrza5E9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:2f:2a:fc:c1:09:d7:d5:b9:f7:fc:6d:d9:f8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Validity
Not Before: Mar 26 00:01:27 2026 GMT
Not After : Mar 27 00:01:27 2026 GMT
Subject: CN=cbba6fe103954ba762f2bcd965ab946a717a0d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1b:7a:fd:a7:68:5e:83:78:eb:6b:07:15:71:
86:a0:d0:b6:61:9d:e0:19:8d:35:4c:44:4e:2d:80:
d1:16:e3:f9:0d:f3:15:dc:50:0e:90:7f:17:b8:22:
24:ba:f2:60:2b:f3:f3:12:1b:c1:2e:c5:47:5a:7b:
12:e6:6f:70:24:db:2f:45:9a:bf:07:a3:56:a5:48:
7f:a3:f2:05:df:ae:42:06:65:d4:9c:e4:bf:fe:10:
20:2b:97:37:79:02:19:cf:33:5b:ce:46:48:a5:8c:
41:15:e1:cd:ad:06:61:a9:04:d5:0f:e2:7f:74:24:
58:b2:63:a7:dc:0f:b2:51:3c:b9:ee:b8:c0:c4:27:
50:a0:b6:f5:ab:85:f4:db:25:48:12:ef:c6:2d:88:
84:fa:76:ea:66:43:a2:23:9d:cb:75:e5:90:09:1f:
33:4f:74:36:78:e1:9c:c7:e5:e1:38:3a:05:cb:6d:
92:60:be:30:06:5b:7b:51:5d:5f:02:76:b0:b6:82:
2c:9f:6d:b5:6c:62:1f:a9:45:e8:0c:3a:b4:03:fb:
11:46:50:2c:f1:f5:30:51:d7:e5:6f:c5:f4:27:90:
e7:89:fa:d8:67:26:fc:e1:02:82:ac:7e:30:bd:bf:
08:0f:bd:d2:9d:86:28:37:1e:bc:db:9d:f8:09:f1:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BA:6F:E1:03:95:4B:A7:62:F2:BC:D9:65:AB:94:6A:71:7A:0D:3B
X509v3 Authority Key Identifier:
keyid:2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b5:1a:b2:13:34:d4:cb:f1:c2:f0:a6:56:24:13:74:e0:1c:
f0:48:ea:36:44:f7:6f:e3:5a:71:ed:3c:78:32:30:7c:d6:b7:
da:33:c8:79:4b:72:79:07:f3:d3:43:5f:61:89:66:f3:fa:e9:
c1:0d:ea:ac:ed:79:63:48:a7:2e:04:e6:7a:f8:5f:ed:fd:c2:
34:73:02:03:69:c0:53:5f:ab:f3:2d:4e:6b:19:81:76:af:13:
9e:57:b2:ae:5b:0e:5c:f3:17:89:2e:c9:96:81:f8:08:07:17:
e5:99:77:3c:1b:69:f7:46:b2:32:cc:dd:96:82:b3:b5:9e:ca:
ea:94:10:7e:ed:2c:ee:b1:ff:1a:88:4f:df:82:d8:e3:67:e5:
56:1d:61:b2:68:f8:77:a9:3a:ba:72:88:33:dd:33:fb:63:51:
dd:c8:58:cc:c9:52:1e:0c:d4:22:80:01:e6:ec:eb:c8:66:25:
40:4e:8b:be:66:e6:60:99:2d:fa:81:dd:7a:75:b8:70:c6:bc:
82:50:7b:10:5b:08:d4:f2:a9:fc:e3:d1:58:40:91:d5:7f:2c:
9d:88:c1:4d:d0:2d:a0:c4:35:43:2c:4c:71:9e:61:01:c4:27:
45:5e:81:42:b7:8f:fa:f4:2a:b1:a8:9f:71:a1:68:54:91:be:
20:8e:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:05 2026 by rpki-client