Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
File: eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft (raw, json)
Hash identifier: e0CaxuTrJEtfR/z4FZZwDB2C3zvgKgCIKwGdO+mPu+Y=
Subject key identifier: F8:BD:D8:E0:C3:E4:88:95:8F:47:EF:B2:EE:7D:D6:3E:CE:93:D5:9C
Authority key identifier: 79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
Certificate issuer: /CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Certificate serial: 019D258361063DE33CAC1D2792C33A9D4B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 15:01:00 +0000
Manifest this update: Wed 25 Mar 2026 15:01:00 +0000
Manifest next update: Thu 26 Mar 2026 15:01:00 +0000
Files and hashes: 1: eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl (hash: QYYgqxIbtl+iVtJAmIandgIvH9Ln2tIz4wGNURxUtcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:61:06:3d:e3:3c:ac:1d:27:92:c3:3a:9d:4b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Validity
Not Before: Mar 25 15:01:00 2026 GMT
Not After : Mar 26 15:01:00 2026 GMT
Subject: CN=f8bdd8e0c3e488958f47efb2ee7dd63ece93d59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:9d:9a:f2:6e:e8:e2:cf:40:5e:63:a4:97:
1c:fd:43:4c:30:a9:4b:76:9e:95:25:8a:af:05:e4:
3a:8b:c4:ad:75:93:6b:29:4e:49:d2:08:e3:90:83:
c4:ea:cd:d3:59:ec:16:e7:bb:44:f2:63:11:d8:4a:
c2:d9:23:96:fa:72:51:18:a5:9c:3f:76:23:59:68:
d2:b5:9d:f4:37:3c:f9:8f:8c:57:ba:93:2c:7f:c7:
b7:a8:9e:a7:db:90:72:4f:4d:3f:1d:0e:28:88:c4:
78:1b:20:f0:7f:7a:cd:b2:0a:59:ea:ae:5b:6e:3b:
d2:0a:02:cc:3c:2f:dc:a4:31:95:c8:23:56:53:f3:
3c:f9:f0:2a:9e:c4:af:0b:65:6e:10:17:00:38:d4:
96:91:44:26:fa:f8:f1:27:be:86:11:e4:70:4c:21:
a7:ef:30:1e:78:23:a7:18:d1:e1:0a:2e:c0:52:f2:
2f:a6:1a:81:d6:8a:63:6c:be:69:99:2d:78:cb:fc:
3f:d0:b8:dc:b7:71:9b:fe:35:40:e6:5b:00:13:c8:
39:2e:65:24:6a:d7:56:df:82:00:38:09:a5:16:fe:
1e:20:c0:0e:c0:28:2c:e5:da:1a:4a:c1:57:5d:06:
35:32:cb:50:24:a0:b2:b1:9b:e1:8c:d7:ff:7c:2a:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BD:D8:E0:C3:E4:88:95:8F:47:EF:B2:EE:7D:D6:3E:CE:93:D5:9C
X509v3 Authority Key Identifier:
keyid:79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a7:f5:89:d7:96:f1:32:2f:97:08:0f:27:c6:51:cf:78:35:
74:22:6e:67:d3:6a:4d:a8:40:b5:00:1f:11:f4:c7:e3:eb:cd:
7d:25:55:3f:8a:5b:ad:a9:84:1e:26:f9:2f:06:68:a7:a4:64:
00:fa:de:4f:6e:0d:74:26:9c:78:a4:bd:b2:c1:14:0e:2a:43:
ab:38:c2:fc:fd:3a:0c:ed:1a:1f:ae:7f:c8:7e:07:f6:a6:53:
05:66:b4:d3:06:64:e7:8e:00:4c:39:f2:bd:95:e8:24:de:77:
73:49:93:64:01:78:2f:af:09:94:0c:52:ca:37:bc:e2:0c:0b:
4c:09:2b:f4:42:5f:8f:2c:4e:db:0d:42:cf:ac:df:2b:11:da:
a3:47:1b:1b:18:2e:a4:1c:74:07:ba:0c:07:b6:cc:d0:fd:09:
69:a8:3b:33:4d:aa:18:65:9e:92:41:62:d1:ab:82:53:ce:60:
be:14:4f:95:ce:d8:4c:a9:2e:ab:70:72:58:b1:93:53:f2:e8:
d8:d5:f2:36:af:71:81:64:eb:e9:51:7a:1e:97:ff:f7:5e:1e:
6e:c6:5f:cb:94:4c:92:60:0b:e8:3b:3b:e0:fd:bb:ee:88:7f:
43:3f:88:b9:36:e1:f6:df:bd:cd:af:95:67:b5:ac:4d:e8:74:
c2:bc:1c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:31 2026 by rpki-client