Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
File: R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft (raw, json)
Hash identifier: h1wxwcEu/SBSMqRPpJGlLKCXGCIZ7o5XBuYgbx1+HUE=
Subject key identifier: E9:B0:4C:BF:8A:ED:90:87:7C:15:B1:C7:32:13:16:F5:C7:5F:2F:F2
Authority key identifier: 47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44
Certificate issuer: /CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
Certificate serial: 019D270409DCA5539170605D23DABEFF1FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 22:01:09 +0000
Manifest this update: Wed 25 Mar 2026 22:01:09 +0000
Manifest next update: Thu 26 Mar 2026 22:01:09 +0000
Files and hashes: 1: 97s09hyCEwSW1tVXq3Vs0ebLvbI.roa (hash: iDj/ZgppEBZOJtuYeOfY5BckiNZfxZn4O2NyydogCzw=)
2: R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl (hash: xx9M6UV1ZqidjQoK5GpUqosNgMWd0IlWiXkTgZRNjFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:09:dc:a5:53:91:70:60:5d:23:da:be:ff:1f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
Validity
Not Before: Mar 25 22:01:09 2026 GMT
Not After : Mar 26 22:01:09 2026 GMT
Subject: CN=e9b04cbf8aed90877c15b1c7321316f5c75f2ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:20:b2:fd:79:79:3b:b6:59:e9:d6:06:cf:
8c:b1:e6:eb:ff:c4:66:b2:1d:f2:21:a8:4f:b1:84:
c9:4c:46:1c:81:65:ff:42:55:ef:6f:5d:e4:ab:ca:
1d:8c:5e:4c:ee:da:83:5c:67:c7:b3:65:7d:64:cc:
dc:45:77:f1:d5:b3:52:13:fb:74:c2:81:19:56:be:
66:59:8c:b7:a3:92:7b:30:b9:ef:52:78:0a:36:b9:
17:cc:c6:76:e9:b7:8e:9d:d9:79:74:ef:1b:1b:72:
57:2a:8a:e5:67:0d:ce:b7:14:c3:cb:f1:9c:55:2a:
bb:51:e3:27:38:b7:20:50:97:dc:a1:db:d9:ff:eb:
29:5e:bd:39:28:83:2d:1e:17:e1:3e:35:99:ef:6f:
f8:a0:c7:b0:7d:3a:68:89:e0:1f:c9:be:80:b0:f9:
f0:51:cc:a8:4e:7d:33:b7:68:84:b1:28:d5:25:74:
ed:e2:2e:c6:d8:72:52:74:50:12:1d:fc:6b:6b:14:
86:29:26:58:07:c4:1e:c4:05:fc:8f:2c:ba:ba:47:
c2:34:55:94:6a:5f:55:ec:70:8e:b4:82:e3:69:b9:
91:bd:8e:94:ad:37:a6:da:40:69:26:98:20:4a:07:
f9:3f:44:06:47:9e:37:e7:2f:be:a7:91:bd:1a:ee:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B0:4C:BF:8A:ED:90:87:7C:15:B1:C7:32:13:16:F5:C7:5F:2F:F2
X509v3 Authority Key Identifier:
keyid:47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5c:89:c7:a5:10:ed:47:ac:c2:d8:7f:d4:54:fd:fa:80:e6:
ee:65:06:92:5a:55:88:c3:5f:25:b0:a9:9b:1e:0d:55:8d:8e:
05:09:84:09:21:1c:f1:dc:4b:92:27:ad:ac:98:e9:f8:8f:4c:
32:2a:6a:21:04:40:95:fd:92:33:b7:8e:34:02:d9:7a:6e:ae:
c9:df:16:d9:09:96:c0:4a:f6:be:ce:18:e7:b3:88:5e:f7:aa:
7f:06:bd:1d:e5:b1:9a:2b:2f:46:48:ce:7e:1c:28:2d:d3:49:
0b:82:cc:62:a9:73:c9:cd:e0:b8:b2:2d:70:29:f0:4c:ef:04:
0d:17:b0:35:79:bd:d0:1d:4a:92:12:15:cf:f5:eb:76:b9:cf:
19:59:be:9e:63:70:8b:05:db:36:76:d8:ca:fb:5f:65:30:35:
56:cd:5b:a6:a0:c9:fe:e6:fa:d1:30:9b:38:50:4b:f8:dc:3f:
bb:92:48:07:6d:45:35:3b:67:71:65:90:5b:21:4e:b3:f9:7a:
c9:25:39:14:8b:88:2d:97:a2:1d:0a:e3:2c:89:17:e6:c4:37:
32:9f:e5:7a:ab:7b:40:50:24:de:fb:34:be:54:cd:05:c3:14:
bf:52:36:e4:35:2d:de:e7:55:55:2b:2a:5b:0e:5a:4e:37:8f:
21:81:67:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:11:07 2026 by rpki-client