Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/d9dc0c-e2a5-4aad-9ad3-d9c563d499c0/1/B7kGAtmAjOess_ex_XIm7YKSJbQ.mft
File: B7kGAtmAjOess_ex_XIm7YKSJbQ.mft (raw, json)
Hash identifier: dTgkn+5jndyrtVgpK+FV0dAuEz/U4ga/BdY5OkTRuww=
Subject key identifier: 89:60:20:04:7F:2D:10:EB:BF:A1:2F:10:EA:52:26:29:94:64:23:1B
Authority key identifier: 07:B9:06:02:D9:80:8C:E7:AC:B3:F7:B1:FD:72:26:ED:82:92:25:B4
Certificate issuer: /CN=07b90602d9808ce7acb3f7b1fd7226ed829225b4
Certificate serial: 01A0D0ED5FEC92931A9FE9CBB4411360291A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7kGAtmAjOess_ex_XIm7YKSJbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d9dc0c-e2a5-4aad-9ad3-d9c563d499c0/1/B7kGAtmAjOess_ex_XIm7YKSJbQ.mft
Manifest number: 94
Signing time: Thu 24 Sep 2026 01:00:12 +0000
Manifest this update: Thu 24 Sep 2026 01:00:12 +0000
Manifest next update: Fri 25 Sep 2026 01:00:12 +0000
Files and hashes: 1: B7kGAtmAjOess_ex_XIm7YKSJbQ.crl (hash: W0vNQPLCtRJgYV3HPvJQmnrEqzAU3D+wZ7t6zzRKkGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d9dc0c-e2a5-4aad-9ad3-d9c563d499c0/1/B7kGAtmAjOess_ex_XIm7YKSJbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d9dc0c-e2a5-4aad-9ad3-d9c563d499c0/1/B7kGAtmAjOess_ex_XIm7YKSJbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7kGAtmAjOess_ex_XIm7YKSJbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:5f:ec:92:93:1a:9f:e9:cb:b4:41:13:60:29:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b90602d9808ce7acb3f7b1fd7226ed829225b4
Validity
Not Before: Sep 24 01:00:12 2026 GMT
Not After : Sep 25 01:00:12 2026 GMT
Subject: CN=896020047f2d10ebbfa12f10ea5226299464231b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:23:a8:e2:f7:b6:84:3e:7b:af:42:f8:1e:
4e:be:91:19:19:57:90:1e:a7:0f:c2:66:46:14:21:
60:da:21:af:58:f0:d6:a9:02:28:cb:b0:4d:0b:1c:
55:59:43:c0:43:0d:b4:1f:a7:cc:0c:81:a1:8b:ed:
26:e0:b1:1b:9d:a2:0a:40:02:d0:40:21:b2:65:c4:
d5:c8:28:66:01:c3:22:87:5a:96:45:07:65:2e:63:
09:5b:e2:29:f3:85:e9:05:94:1a:4d:0c:f9:97:7a:
3b:09:45:1c:bd:16:15:b2:39:64:70:25:06:46:69:
4b:02:9d:1c:53:07:a5:80:05:0c:fc:41:e9:30:68:
2d:12:29:3e:62:af:50:d6:1c:ea:c7:5a:21:fb:1e:
30:6c:86:d1:94:d6:80:cd:a8:e4:8a:ba:dd:9b:8a:
e7:db:8b:9d:e2:62:4c:76:80:8a:84:b7:04:58:c7:
62:46:58:68:3f:e6:63:e7:0d:a8:b2:61:1a:84:f7:
6c:f3:e9:80:ca:8b:d3:28:55:fe:07:1d:91:36:21:
bf:9d:1f:0d:f8:08:b7:a2:a3:bb:4e:41:3d:48:87:
c9:6f:44:a6:c6:a4:78:54:65:19:c8:78:2c:83:ae:
a5:cf:6d:47:d0:55:63:43:9e:f4:ad:ea:a5:cd:00:
36:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:60:20:04:7F:2D:10:EB:BF:A1:2F:10:EA:52:26:29:94:64:23:1B
X509v3 Authority Key Identifier:
keyid:07:B9:06:02:D9:80:8C:E7:AC:B3:F7:B1:FD:72:26:ED:82:92:25:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7kGAtmAjOess_ex_XIm7YKSJbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d9dc0c-e2a5-4aad-9ad3-d9c563d499c0/1/B7kGAtmAjOess_ex_XIm7YKSJbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d9dc0c-e2a5-4aad-9ad3-d9c563d499c0/1/B7kGAtmAjOess_ex_XIm7YKSJbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:dd:3c:df:7e:7a:44:64:01:a7:41:37:94:9a:31:0e:3b:5e:
35:5c:5f:08:0e:e8:0c:19:f7:18:d5:17:8b:f0:87:29:1e:d7:
0e:02:67:6d:49:f9:bd:7e:31:49:a4:8c:50:1b:6d:c8:17:69:
01:12:12:07:b9:63:ea:3f:32:5b:19:d8:47:77:71:ca:70:0f:
13:b2:11:43:fe:07:3f:04:a1:c3:a0:31:4d:d0:eb:73:6e:5c:
07:9c:46:c4:ca:e0:f5:26:d8:38:76:c1:38:37:e2:37:5e:75:
2c:12:97:20:e6:30:9b:89:bb:ae:4f:f8:c2:40:bf:10:d8:ef:
b1:f8:06:58:21:45:43:34:d8:fd:a4:82:fd:34:82:d3:16:4e:
30:50:d0:1c:99:54:87:3f:fc:06:03:ef:7b:b9:1d:08:0f:27:
62:fb:c3:ee:b5:5f:78:59:b1:bc:68:a3:c8:6d:0e:6a:5e:1c:
14:17:2a:3d:d9:51:8a:7d:cd:03:29:86:1e:05:5a:81:3b:ce:
d6:ef:de:25:2b:6e:ad:f9:5a:bb:ec:95:ad:40:3a:3a:1e:4e:
8d:40:ad:8b:84:2b:4b:ee:b2:80:ec:a5:8f:25:2a:09:e6:20:
17:5d:d0:80:b5:41:5c:f7:1a:1e:18:7b:fe:28:f4:45:23:64:
be:c7:3b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:11:21 2026 by rpki-client