Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: MitpGWpGIoZ7f2ud1cov8iz7R5n2Gdf/qypHf8jHdqU=
Subject key identifier: 79:D3:FC:09:04:A8:18:8D:65:1D:2F:C0:0D:FC:04:C2:63:C5:50:14
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 019D24DF04E375819CB3FA949413EB88DF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 148B
Signing time: Wed 25 Mar 2026 12:01:28 +0000
Manifest this update: Wed 25 Mar 2026 12:01:28 +0000
Manifest next update: Thu 26 Mar 2026 12:01:28 +0000
Files and hashes: 1: _wLbQqpNFVUZXfwkKPHS2EvNsME.roa (hash: b13XNsSSVdJxlN2jmJcwJ/ExmpGXyR6dAM9BzylibwA=)
2: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: s56gETLM+/g9RHv3yWt/gzx+9PEIzobbASXpOjApivo=)
3: k3fmZjh5Nd4d9i-yTk1YzO9a-ow.roa (hash: mS6dHnW2WbLdF67XEsAw2GyVUdDMoZ8sBWqhN+eeuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:df:04:e3:75:81:9c:b3:fa:94:94:13:eb:88:df:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Mar 25 12:01:28 2026 GMT
Not After : Mar 26 12:01:28 2026 GMT
Subject: CN=79d3fc0904a8188d651d2fc00dfc04c263c55014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fd:97:73:b8:89:bd:d9:84:f6:ed:fa:d6:73:
1c:5b:96:ce:a4:4c:cc:a3:db:d7:16:50:06:33:4a:
94:67:39:18:61:2e:7a:10:20:a1:1f:11:ad:5b:56:
07:ff:92:3b:60:37:43:9b:a1:af:cf:58:9d:c0:1f:
a8:1c:ae:89:9e:63:8e:ea:b1:00:2c:b4:32:fc:cb:
7b:8c:7d:09:64:48:ff:14:89:6a:9b:14:0d:4b:17:
a6:d3:46:f6:54:9f:c2:20:52:e3:8b:ec:90:ab:fb:
f0:1b:4d:57:70:07:9f:5c:b4:16:72:22:ac:77:a1:
dd:af:e8:26:e9:a9:96:9e:84:37:02:ba:78:2d:47:
d8:c2:60:b9:25:a7:a8:b3:e2:04:c5:b7:a2:51:21:
60:62:4e:e5:ee:bc:89:38:04:6b:a4:27:16:3f:0b:
f9:b0:36:15:76:94:65:da:53:1d:c0:3b:49:ac:a4:
ce:dc:66:03:7c:e3:4b:1d:eb:23:52:1a:12:81:65:
38:06:db:2c:95:8f:ea:79:45:df:d9:34:88:ad:e9:
85:4d:43:db:70:fd:4d:f7:e9:bd:09:44:2b:af:bb:
84:26:7e:c7:15:c9:73:e4:40:d6:f5:d3:03:54:ef:
9d:82:bf:31:0f:c8:6c:f8:de:0f:40:1b:bf:9a:a0:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D3:FC:09:04:A8:18:8D:65:1D:2F:C0:0D:FC:04:C2:63:C5:50:14
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b3:60:04:84:a9:fd:36:1a:15:d8:e6:7a:88:a0:79:14:ee:
54:96:9f:28:4c:af:00:ed:d6:e1:07:69:44:4d:47:e4:47:7e:
86:fd:98:e1:aa:d8:a9:21:41:c1:ea:d8:93:57:0e:c5:78:94:
63:98:f2:37:16:a4:58:d3:2b:bd:2e:e8:b5:14:5d:32:6f:55:
ef:b8:b8:81:0b:f8:48:06:61:24:52:51:96:5a:ed:b5:d5:79:
8b:49:f9:e8:e7:97:79:be:32:78:a7:17:8e:ef:65:f7:c6:f1:
dc:a0:24:c0:5d:de:c5:0c:d7:b1:fa:70:73:14:e3:32:8e:e0:
cb:25:98:c5:b6:32:0f:ee:0d:98:29:23:fe:f1:e2:71:cb:91:
04:70:38:32:68:3d:56:66:b2:29:56:87:29:b5:f1:12:ea:b1:
05:d7:cc:38:25:2a:b8:19:98:f8:dd:34:11:d4:3a:07:e0:94:
2f:12:cd:2c:26:61:c9:81:dd:94:7b:38:7a:e8:de:c1:85:4d:
01:35:40:34:b7:30:1d:09:de:5a:d5:8b:71:f9:4d:1c:ed:71:
93:59:ff:4d:39:01:fc:e5:95:b2:3c:b5:aa:80:8c:d8:5c:d6:
49:db:17:83:b0:af:4f:33:f5:c0:d4:39:35:7a:b6:b7:d3:3f:
3a:4d:16:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:16:28 2026 by rpki-client