Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
File: t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json)
Hash identifier: ZUSoXEd3YWm5ilphKldcw6eVMlwOtZUS8DtsVPXkleE=
Subject key identifier: 69:D2:33:8A:26:93:07:DC:9D:81:A4:D2:D7:B6:73:34:BC:EE:C2:A2
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Certificate issuer: /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial: 019D284DAE130A204A792E6D378098D31639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 04:01:12 +0000
Manifest this update: Thu 26 Mar 2026 04:01:12 +0000
Manifest next update: Fri 27 Mar 2026 04:01:12 +0000
Files and hashes: 1: l2K815BrxnyKxX1Z80Pet8asKu0.roa (hash: Eu+brIQ4UCkAdjGsx7xGNJPQX039Fdi67RknQ8veG7g=)
2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: KtjoVymqQ/aiH5Izjhrj19kmTb/bbqytXxb0fnKkRhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ae:13:0a:20:4a:79:2e:6d:37:80:98:d3:16:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Validity
Not Before: Mar 26 04:01:12 2026 GMT
Not After : Mar 27 04:01:12 2026 GMT
Subject: CN=69d2338a269307dc9d81a4d2d7b67334bceec2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:e2:ec:20:6c:b5:72:39:59:11:de:c6:4d:
a1:2d:e0:a6:30:2c:39:4e:a8:70:93:25:8d:90:f6:
27:98:71:06:3e:74:9c:8b:80:b2:d4:46:c2:60:33:
e8:74:4d:55:46:03:75:d3:5e:76:98:65:94:79:57:
bf:08:12:46:6a:61:7e:e4:91:9e:b2:32:dd:63:f1:
41:ac:5f:0b:6b:22:32:dd:63:6a:a8:b5:32:ca:96:
47:b6:40:6b:b5:79:4a:7e:da:4a:c1:00:b3:be:6f:
6a:b9:f5:93:e8:c0:fb:1d:21:9d:dc:73:f3:e3:2a:
5f:96:1b:0b:fa:ef:fc:87:87:c4:09:ac:02:92:7a:
fe:46:04:07:6a:12:79:7b:c5:e7:c2:2f:b4:9e:d1:
be:bb:92:fb:9a:66:2b:0a:a2:92:94:db:af:26:c1:
14:8b:ad:82:a5:e5:86:bb:ff:a8:f1:c8:12:b4:a9:
39:94:45:44:f8:99:d0:1a:7c:71:0a:f6:d1:75:34:
41:95:70:ed:6f:98:de:85:95:e1:12:52:90:48:14:
5c:75:7c:32:fe:86:c5:18:92:56:1c:7d:3e:8c:84:
6e:12:a3:01:c4:b3:c4:39:50:7d:ba:4a:ea:f5:c9:
67:06:a1:82:e2:cd:b7:18:d6:ee:ea:4b:9e:76:94:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D2:33:8A:26:93:07:DC:9D:81:A4:D2:D7:B6:73:34:BC:EE:C2:A2
X509v3 Authority Key Identifier:
keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:21:4c:f3:7e:5c:52:77:42:cb:17:bf:e9:85:43:4b:c4:4f:
5d:6d:f6:b0:0a:03:cf:d6:b4:3e:55:52:05:f9:12:83:ea:f7:
ea:15:30:ca:50:00:81:e6:b5:69:ef:7d:28:0b:b1:b6:6c:53:
e8:cb:86:00:63:bd:6c:b5:e0:29:b5:7c:75:5b:be:a9:ae:e2:
ff:69:2f:bc:7d:b7:78:e1:23:78:5d:b8:f8:eb:fc:87:ab:85:
ae:f4:36:2a:73:89:fd:e9:d7:2e:ac:ad:d6:4d:09:8d:1b:da:
8d:d8:83:4b:97:fe:a3:14:de:46:3d:a1:bd:9f:e5:0c:80:66:
23:28:a8:97:3a:df:45:43:8b:dd:be:43:c5:02:d4:29:49:83:
3e:51:ab:c6:81:b1:f8:25:d4:24:28:29:70:a9:1a:8f:c4:74:
c4:c5:07:e4:b6:74:ef:5c:c8:94:b1:99:06:bf:29:40:57:fd:
2f:97:34:39:d5:06:7e:eb:11:71:7d:2d:c6:db:6e:93:aa:f4:
72:86:4a:78:67:a8:19:10:ee:b7:04:d6:3e:b3:37:2a:19:d7:
f5:50:14:ba:b9:bb:2a:ec:c1:2b:10:73:39:74:73:03:3c:a0:
f4:d9:81:e8:99:c5:66:00:e5:33:04:58:b8:15:71:69:86:4b:
6a:27:8c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:55 2026 by rpki-client