Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier: p0Ks393MCktavujqkh3X8umPbI4oMtl5xAuQu/gucVg=
Subject key identifier: 28:A6:CB:1C:1B:6F:EB:9D:3D:1C:BD:FB:A9:D8:89:4D:B9:F6:CF:50
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 019D28BBD5C71FCC83ABB298A47768D2DD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number: 079F
Signing time: Thu 26 Mar 2026 06:01:31 +0000
Manifest this update: Thu 26 Mar 2026 06:01:31 +0000
Manifest next update: Fri 27 Mar 2026 06:01:31 +0000
Files and hashes: 1: c1HdnsaldKTIKaEky6ateQiz5kY.roa (hash: C5p2Kdt/yLKTGq1QeYyJYKudSwTzAauf7jP1eJuSAr8=)
2: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: X8knBvgCMEx6Vkun+TmnSaRL0eYQCV3Xb7LFSHT/YWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d5:c7:1f:cc:83:ab:b2:98:a4:77:68:d2:dd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Mar 26 06:01:31 2026 GMT
Not After : Mar 27 06:01:31 2026 GMT
Subject: CN=28a6cb1c1b6feb9d3d1cbdfba9d8894db9f6cf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:53:87:4f:9e:90:87:2c:fb:c6:fb:42:e9:9b:
82:a7:1c:c7:d1:06:9c:1e:ed:2c:6d:94:63:9d:be:
9c:1a:1b:11:de:10:cc:86:1d:c6:b3:83:6b:47:27:
f1:c9:43:90:c3:7a:34:c8:e2:b6:32:e1:7c:bf:2b:
9c:c7:8b:32:ff:45:de:66:3d:1f:54:40:f1:c9:72:
19:c7:7b:b1:ce:66:26:04:5c:f8:70:34:c8:14:39:
30:6b:ff:8f:59:ea:a8:53:9e:24:80:dc:0c:a1:84:
96:bd:41:90:3d:55:94:0d:38:e4:53:db:c2:9d:c1:
2f:a4:60:6b:63:f8:61:b9:4a:c1:01:9f:f1:d4:b8:
a6:6c:12:62:f9:bc:39:68:14:81:62:f0:55:96:3c:
bd:d3:ea:89:12:c0:d0:86:01:7a:11:9c:05:11:c9:
46:d1:f3:1c:03:86:db:17:a6:e8:9c:99:46:43:fc:
9f:60:c3:19:8d:79:c5:17:b1:bf:83:32:28:f0:56:
08:31:da:0a:26:07:69:92:ec:7b:81:b5:1e:5b:9f:
7a:93:a5:28:ab:fb:55:83:5a:37:af:6e:67:bc:f8:
7b:a4:fb:96:f3:4f:bc:5f:ab:c5:1c:da:76:95:5a:
0d:8e:1c:42:70:22:96:cc:77:c9:08:58:6e:ba:2b:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A6:CB:1C:1B:6F:EB:9D:3D:1C:BD:FB:A9:D8:89:4D:B9:F6:CF:50
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cb:0d:93:a1:1a:ae:8c:00:14:a0:dc:0d:9d:cd:95:fa:9c:
c1:1a:a9:47:38:c4:7d:44:5f:b3:fd:50:3a:ba:2a:e2:5e:8b:
5d:6c:73:45:62:b8:8f:a2:a6:d3:8a:04:68:69:b1:1b:8b:4d:
9f:ca:d3:7e:f2:f9:1a:77:96:20:68:3a:9b:e9:01:e2:63:f6:
51:dd:97:88:2e:96:c6:78:3b:ad:f9:02:f4:73:13:06:eb:0b:
9f:c1:dc:5b:63:b0:af:0e:1f:97:79:92:97:5e:04:25:21:24:
7f:20:ff:f6:5f:1d:29:eb:ea:7a:23:27:bd:56:09:3d:ee:f1:
f7:3b:dc:28:5a:8a:b9:a7:87:f3:31:d1:ef:d5:e9:84:35:0f:
0c:1a:73:88:6d:54:8a:40:54:fb:ab:e5:ca:de:e4:cd:1e:81:
6a:bb:57:8d:b9:dd:4f:c4:b4:f9:3a:d0:11:6c:24:e9:1a:65:
b1:3c:1a:30:41:4e:8d:04:cb:46:1a:05:2a:b2:9b:52:f3:7d:
57:2e:a3:e7:0f:f8:9a:e4:6b:b4:8c:3f:1b:5f:28:3a:6d:b3:
b4:ef:dd:53:7a:0e:39:77:86:00:a7:8d:48:c7:a3:f2:f6:aa:
7e:ad:c9:cb:b0:d8:0b:c4:42:e8:a7:76:bf:42:e8:a8:c0:7d:
a5:69:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:45 2026 by rpki-client