Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
File: R7gMqpfBMUfWgMgJdviksVyt4E8.mft (raw, json)
Hash identifier: XeQuI3R/JbE2vKK0wd6z6TaOQWW07cN8tjesaPOtzTY=
Subject key identifier: 9D:81:C9:FE:43:F1:C7:F0:C6:B7:EC:6E:85:89:5C:5A:86:AB:0E:F5
Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f
Certificate serial: 019D28BBE559236FA24FD7D658FE9E4C336D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
Manifest number: 130D
Signing time: Thu 26 Mar 2026 06:01:35 +0000
Manifest this update: Thu 26 Mar 2026 06:01:35 +0000
Manifest next update: Fri 27 Mar 2026 06:01:35 +0000
Files and hashes: 1: AWOByOdLz-pDy9BT7H091K60qsk.roa (hash: O+97VBEDvL8gvGoSX/7wNxbWE7fg1IsWzOjltD6ZxKM=)
2: R7gMqpfBMUfWgMgJdviksVyt4E8.crl (hash: Y+B6nFd4TWL9yc3Xv/fgqJKHoaoyzdizjqM51urs/Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:e5:59:23:6f:a2:4f:d7:d6:58:fe:9e:4c:33:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f
Validity
Not Before: Mar 26 06:01:35 2026 GMT
Not After : Mar 27 06:01:35 2026 GMT
Subject: CN=9d81c9fe43f1c7f0c6b7ec6e85895c5a86ab0ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:2c:6d:b1:32:95:b7:02:2f:c6:d4:a5:fd:
8a:1a:81:2f:75:85:b4:6a:9c:8a:ed:10:93:5e:5c:
24:9a:f6:81:ee:07:a5:6f:78:f4:0d:6d:7c:16:02:
1d:5b:89:4e:90:5c:d6:5f:29:78:b5:19:77:82:d9:
32:4c:40:62:61:33:58:db:5b:a5:fb:a4:81:50:dc:
ea:9b:d6:62:72:1d:4f:fe:4a:16:a8:b0:b5:c4:4e:
ce:51:cc:36:b2:c0:91:d5:6a:27:89:92:23:28:1a:
28:55:a0:ba:58:10:4b:74:e6:0d:71:33:44:58:7e:
89:b0:2b:47:58:85:36:83:97:1c:93:ae:6a:dc:65:
4f:1b:ca:4b:9d:88:5c:79:0e:25:a9:3a:02:16:e5:
a0:f6:16:38:1f:93:8d:66:3b:85:5a:c8:50:54:9d:
1a:de:76:59:5c:12:4a:17:bb:8b:23:5f:58:4e:ce:
2b:4c:b3:2e:f3:3f:3f:58:fb:18:80:6f:46:10:b0:
6a:13:2c:a0:c1:3f:fe:26:c0:77:25:da:bc:ca:4b:
0b:d9:5c:b9:86:b7:ca:be:ef:d4:bd:66:73:dd:7e:
4c:4d:59:d6:0c:f3:70:f9:e0:0e:6a:a8:da:d0:b4:
6b:b8:7e:0e:cd:9b:42:72:74:05:9d:e8:82:e8:8d:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:81:C9:FE:43:F1:C7:F0:C6:B7:EC:6E:85:89:5C:5A:86:AB:0E:F5
X509v3 Authority Key Identifier:
keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d5:20:94:e8:4e:ce:6f:47:ff:b4:3c:04:75:c0:62:74:5d:
4f:d7:0b:b9:97:44:70:32:28:71:c0:c0:bf:54:ba:66:7c:08:
3c:d5:a1:de:cb:b3:0e:d6:b6:a5:c4:77:66:af:d1:c0:46:24:
2c:21:2a:d8:af:cd:c6:a8:cd:ad:e7:ce:6e:8b:6e:b5:b9:51:
dc:86:6e:32:c3:eb:57:88:80:a7:fc:08:ef:80:25:0c:ad:e7:
b2:cc:84:6e:94:fe:b3:40:cb:a5:a2:e6:ba:ec:4a:0d:31:9e:
92:19:b8:e5:b1:32:c7:b2:6e:55:4d:18:ab:a7:1b:03:e3:e1:
f4:40:af:72:1f:d1:5e:d3:60:6a:8c:6b:b1:6c:ff:22:8b:6c:
a1:10:d7:b0:70:fa:a9:dd:b9:77:01:db:2f:e7:69:23:ff:cb:
87:4e:ba:b2:b0:4f:3b:b3:03:9d:08:e1:fa:e8:1f:0a:4c:f8:
06:28:68:ec:17:0e:ba:74:04:c4:aa:9c:cf:d2:a1:8f:8f:9b:
7f:d0:bd:4f:41:f7:c9:e3:58:bb:2c:68:37:ae:36:e2:f5:c0:
71:8d:25:32:9d:42:82:49:2f:eb:a9:96:fd:80:22:f5:a7:26:
76:fd:6e:60:6c:ab:af:7c:f0:97:21:0f:20:04:03:0b:17:0c:
de:4a:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:53 2026 by rpki-client