Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
File: b7yr8HwZyKIKdpqoKQcaszgvWIo.mft (raw, json)
Hash identifier: XGiQYJuzDcsUO8uk/kTXFJqwIktFKnjWmbwh2DDWnnY=
Subject key identifier: EA:F5:08:C2:B8:6F:C6:3B:A7:3A:DC:0F:2F:1E:07:A2:DB:EB:42:DF
Authority key identifier: 6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
Certificate issuer: /CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Certificate serial: 019D2704D0A8B06905EAB046481F993CDF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:02:00 +0000
Manifest this update: Wed 25 Mar 2026 22:02:00 +0000
Manifest next update: Thu 26 Mar 2026 22:02:00 +0000
Files and hashes: 1: b7yr8HwZyKIKdpqoKQcaszgvWIo.crl (hash: yr+asdrKTNvaEWnck2EnAdOXoORislp5x8EA82bcOGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d0:a8:b0:69:05:ea:b0:46:48:1f:99:3c:df:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Validity
Not Before: Mar 25 22:02:00 2026 GMT
Not After : Mar 26 22:02:00 2026 GMT
Subject: CN=eaf508c2b86fc63ba73adc0f2f1e07a2dbeb42df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a8:89:a4:3a:db:70:d7:7f:80:06:a1:31:9e:
f7:66:90:f0:ee:59:94:7e:05:e0:d6:25:ff:fc:86:
d0:29:7d:9c:4c:44:8f:be:57:5d:0b:3f:ae:ea:75:
6a:2b:b0:b8:5d:f6:f3:bf:ba:b4:1c:45:61:d0:a1:
18:a9:9b:82:2a:29:0b:aa:6e:6d:1f:3e:01:7f:b1:
e1:8f:a9:73:1a:2e:c4:68:c3:93:6f:7d:20:52:07:
c8:38:4c:a1:6b:23:f4:08:7d:3f:83:1c:a6:b0:55:
d3:84:6f:53:28:97:f6:2e:02:a6:8b:37:81:2a:03:
8a:c4:d8:3d:17:dc:e4:a9:04:57:d4:79:45:5a:fc:
14:ea:e2:8f:56:2a:de:63:f8:d9:c4:00:29:d7:3a:
95:57:3b:df:f3:6f:a4:32:fa:85:70:69:df:e8:bc:
75:74:8f:28:32:5a:f9:a7:e5:b5:9c:72:ce:78:15:
7e:f0:62:b9:15:7c:bd:78:ec:e9:0f:2a:7f:fe:35:
db:9d:5a:0c:08:e2:ea:d4:50:dc:ad:9d:c1:05:80:
e5:75:51:d1:cf:6e:3d:e7:98:56:f5:a0:7c:3b:6e:
e9:1c:a4:f7:d8:4d:30:5b:fd:a7:62:38:06:04:2e:
6e:43:76:2b:d6:73:e9:00:bd:1e:03:c6:13:f3:48:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F5:08:C2:B8:6F:C6:3B:A7:3A:DC:0F:2F:1E:07:A2:DB:EB:42:DF
X509v3 Authority Key Identifier:
keyid:6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6a:16:dd:93:a0:82:64:9f:7a:7d:a1:64:69:01:16:5c:2a:
77:4f:ac:e0:c0:28:17:52:ca:93:e6:fd:23:b7:68:f1:fa:c4:
fc:7c:4d:cd:2d:c1:63:8a:60:71:97:7c:2a:12:1d:ba:e7:92:
9d:76:7a:0d:89:86:8b:01:35:79:1c:06:ef:c6:30:6e:62:96:
25:5f:36:19:3a:63:18:dc:fc:92:29:89:1d:29:4d:9d:6e:9c:
63:62:65:0d:e7:69:a3:ac:f6:60:df:79:8e:e7:81:26:47:48:
05:8f:c1:41:26:38:ff:fa:f7:3b:2d:ce:5b:55:76:4b:8b:bc:
a9:5a:d5:4e:6a:d7:17:b3:ac:9c:04:24:c8:a1:c9:1e:a2:2f:
ad:c5:2e:7f:ee:82:c1:02:d6:69:f2:4c:70:fe:6d:18:17:79:
16:f4:42:98:c4:c1:00:3a:3c:54:4e:06:c7:65:9c:f2:78:97:
5a:ff:e7:cf:7e:7b:9b:aa:c8:8e:2d:67:1a:33:d2:95:61:3e:
12:bf:e0:06:8a:30:1a:7e:68:db:ee:e9:60:0b:cc:a1:88:9f:
5f:0c:26:9c:07:eb:bb:b8:76:b0:30:82:a7:5b:02:26:d3:64:
25:07:31:2b:42:95:93:df:00:01:f6:93:69:68:57:49:ff:07:
ac:f8:1f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:43:44 2026 by rpki-client