Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
File: ezR3xSqsENrC7dQXOrbZTV4k3vU.mft (raw, json)
Hash identifier: hCEofdhog4XooCRldF/KyMbzEg+RsZmj6a9q/aLaX3M=
Subject key identifier: 8D:D3:2D:51:4B:53:42:CB:38:05:4C:6B:33:EA:E1:19:73:27:DA:83
Authority key identifier: 7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5
Certificate issuer: /CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
Certificate serial: 019D27DFD0240FBEC4B13D26173B4EC9D9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
Manifest number: 08A7
Signing time: Thu 26 Mar 2026 02:01:12 +0000
Manifest this update: Thu 26 Mar 2026 02:01:12 +0000
Manifest next update: Fri 27 Mar 2026 02:01:12 +0000
Files and hashes: 1: ezR3xSqsENrC7dQXOrbZTV4k3vU.crl (hash: YNqvXAxIiLapOVKEUnr8P7x0EOL0jiP2EouTZJHBwmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d0:24:0f:be:c4:b1:3d:26:17:3b:4e:c9:d9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
Validity
Not Before: Mar 26 02:01:12 2026 GMT
Not After : Mar 27 02:01:12 2026 GMT
Subject: CN=8dd32d514b5342cb38054c6b33eae1197327da83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:24:d3:2c:46:69:f9:ba:cb:b1:42:87:a7:
41:2e:06:4f:2f:b3:49:e5:92:ce:91:02:21:5c:73:
31:f7:2d:3d:86:aa:13:e2:ba:96:ed:65:b5:95:09:
be:66:31:73:ab:7a:80:f3:d7:56:02:54:4e:4c:25:
5f:48:7d:62:72:e5:7d:c5:bf:33:df:db:50:bb:35:
9a:79:73:85:b4:39:dc:66:50:d6:86:58:0a:03:dd:
dd:49:f1:40:23:86:84:9a:26:2b:17:98:d7:ed:0e:
57:55:6a:d9:d8:9a:18:39:5d:02:47:8d:32:3a:e3:
0a:8f:99:cd:f9:38:d5:a8:b6:bc:39:c3:09:2a:19:
83:c1:7e:4e:a0:59:58:7b:91:4b:d6:e3:cf:e8:b1:
19:33:79:08:c1:41:2f:d7:b6:6b:62:5a:06:98:55:
73:8d:7a:d3:b0:89:72:ea:11:28:ce:48:39:8a:ef:
6d:92:b8:27:2e:49:08:e7:14:de:fb:8b:37:11:a1:
11:48:80:09:17:a0:01:0e:52:3b:f6:4b:8e:23:27:
49:5a:e8:5b:24:8c:8d:b6:cc:5f:6c:cb:e8:8f:f9:
6d:d5:11:e6:38:dc:84:c6:b8:77:c0:bc:2a:df:04:
e3:4f:de:59:b2:2c:ea:82:16:1f:20:31:9e:8e:a6:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D3:2D:51:4B:53:42:CB:38:05:4C:6B:33:EA:E1:19:73:27:DA:83
X509v3 Authority Key Identifier:
keyid:7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:89:a9:2d:15:f7:4b:67:93:e4:09:01:05:72:b1:f2:e5:27:
d5:7c:dd:82:2a:2a:80:b0:27:54:09:85:5c:7f:f0:03:b5:4b:
77:12:50:ce:8b:67:91:51:8f:24:14:fc:e3:98:72:fa:20:58:
c4:5c:05:0a:2f:1d:60:32:e0:0d:9f:d5:ab:a3:97:3f:a2:0d:
14:19:c3:31:9c:2f:6c:b7:71:a8:a2:9a:31:e7:aa:ec:5e:c9:
19:20:84:a8:89:ea:b5:e7:fa:47:18:54:37:98:cd:1b:8b:54:
26:f9:d6:c9:28:d2:50:47:82:fe:62:1c:9b:e5:5b:a3:30:7e:
aa:de:10:d1:5c:7c:55:ea:76:e0:da:1f:21:45:61:ea:e8:69:
0e:40:a5:2f:c8:ff:c2:f2:b9:ed:90:df:eb:e0:5a:72:d8:7c:
fb:2e:e6:d1:c5:86:a0:ec:51:0a:6b:0d:9e:e0:d6:3f:db:c8:
ea:8d:25:a2:bb:f5:75:b1:fa:89:6f:c8:f3:fe:af:b2:aa:f9:
ad:28:32:ea:1c:8a:f4:09:f8:e5:88:cb:fc:19:1f:a3:28:3f:
37:bb:a9:15:37:b0:4f:35:18:34:cb:01:b7:02:35:5b:ea:b8:
88:77:2e:6c:37:d7:ea:9d:78:b4:10:0f:a8:3d:5e:86:9c:7b:
72:8b:4e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:55:02 2026 by rpki-client