Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File: t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier: V98aBq6o8jMY/RvZAJiWk0tGR6RoTw6WnFhw4r4gZek=
Subject key identifier: 77:8F:05:62:25:E7:50:70:67:57:4A:3A:70:B5:30:6B:86:1E:DC:ED
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial: 019D25F10011BA753BD0DF3469D5BCD578F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number: 05E4
Signing time: Wed 25 Mar 2026 17:00:44 +0000
Manifest this update: Wed 25 Mar 2026 17:00:44 +0000
Manifest next update: Thu 26 Mar 2026 17:00:44 +0000
Files and hashes: 1: RhYPlB5kqIX-dmV0ZFbkO4F9FQA.roa (hash: B4giMGx1nCtQi2hJ6Q8i5DGTsStHwrUH2rtSDwaQt6Q=)
2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: bZhFHLd5yOp9eSDire/bWa+3eA5XmdiG1oYA9EvPXsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:00:11:ba:75:3b:d0:df:34:69:d5:bc:d5:78:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Validity
Not Before: Mar 25 17:00:44 2026 GMT
Not After : Mar 26 17:00:44 2026 GMT
Subject: CN=778f056225e7507067574a3a70b5306b861edced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ba:6c:de:28:9e:e6:70:ab:12:04:6e:bc:26:
76:b0:1a:da:89:9c:60:0a:13:5a:80:65:53:9b:8d:
66:a7:ff:9e:6e:ac:d6:0b:3c:e3:a1:32:3d:31:c5:
a3:83:b6:a4:03:3e:55:27:38:06:8e:ff:c5:fd:a4:
d1:da:a6:d6:7c:43:0e:13:fb:3d:83:c3:f0:9e:f9:
46:fa:63:0f:a2:09:49:ba:17:ee:6c:d4:2c:4e:5b:
7f:10:ff:19:52:72:6a:d9:de:94:40:d0:30:87:bb:
01:2d:99:00:3d:43:2c:c2:06:67:d5:0b:39:19:9e:
b9:9f:76:c5:85:c8:93:97:7c:9b:94:89:0f:da:dd:
39:37:cb:2d:30:1b:d1:48:45:7c:4c:ea:3b:5a:7b:
df:bd:1c:d7:04:75:f1:aa:8a:de:d9:92:f5:5d:37:
8b:79:61:f1:50:64:4c:bd:c8:34:46:23:de:82:a4:
7f:8c:a4:03:a0:67:9c:e7:fe:f8:10:95:fd:9f:77:
4b:7b:22:cc:6d:33:a1:9a:de:7d:ea:19:ad:35:99:
06:90:36:0f:64:af:9c:c4:5b:15:0b:6f:a9:e3:41:
74:21:35:1c:84:be:68:5f:04:a5:2b:f1:4b:0b:b4:
59:d2:db:82:5f:8b:71:c9:32:2e:51:69:8c:e7:86:
32:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8F:05:62:25:E7:50:70:67:57:4A:3A:70:B5:30:6B:86:1E:DC:ED
X509v3 Authority Key Identifier:
keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:10:5b:8f:5f:37:9d:52:ca:8e:22:84:fd:e3:14:84:c4:78:
77:88:77:68:88:29:14:41:fa:ac:46:3c:33:2c:c9:9e:a2:56:
b4:8f:62:bc:08:e9:58:72:8d:e8:b5:67:8b:c5:91:cf:15:68:
44:0b:3f:c8:60:dd:75:eb:4e:62:78:5e:ce:38:e9:b1:69:25:
93:42:af:17:3a:d1:9e:19:f1:72:5e:be:97:30:27:a6:7f:5b:
24:34:ba:f0:f5:42:83:9b:4d:5f:9d:57:3c:82:a2:74:c5:e9:
4d:f7:6a:b9:95:ec:36:a1:ad:23:3b:c6:64:3e:3d:66:c0:1f:
0e:13:09:4b:a7:ea:6a:60:39:a8:4b:35:2a:fc:3f:df:f6:8f:
a5:85:bf:ae:53:d4:50:84:14:95:e5:32:9c:4f:46:f1:db:3b:
09:a5:15:28:29:4d:45:0b:36:dc:12:77:cd:a6:65:71:34:b6:
a8:eb:1d:e7:64:fd:6a:f8:56:15:77:40:12:75:ad:a5:cb:16:
bf:54:13:b6:bf:0e:72:79:82:96:e0:81:f1:e9:fb:3a:c0:6e:
cc:88:3d:62:84:e6:11:dc:fc:04:ee:4b:35:0d:0d:2a:33:26:
53:fc:2a:6f:08:2e:54:1b:76:35:42:9d:49:a6:f5:40:a7:c9:
17:ce:01:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:01 2026 by rpki-client