Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
File: R7cYcu1kXJZm1VEavHjwfE06uKw.mft (raw, json)
Hash identifier: NVqT3Le/9KawHp543AMfo28xPFK0pcAzQfdTBpcYDho=
Subject key identifier: 6C:F5:E9:9C:4B:4A:F1:E7:13:5A:CC:4D:A8:05:C9:AD:C9:DF:36:DC
Authority key identifier: 47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
Certificate issuer: /CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Certificate serial: 019D288435A169EA5CE8907425BF172EFCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
Manifest number: 052B
Signing time: Thu 26 Mar 2026 05:00:46 +0000
Manifest this update: Thu 26 Mar 2026 05:00:46 +0000
Manifest next update: Fri 27 Mar 2026 05:00:46 +0000
Files and hashes: 1: R7cYcu1kXJZm1VEavHjwfE06uKw.crl (hash: Ry2vtN7jsQrla8jMukhP5v44y+/6/gnIYqYHszWa4qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:35:a1:69:ea:5c:e8:90:74:25:bf:17:2e:fc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Validity
Not Before: Mar 26 05:00:46 2026 GMT
Not After : Mar 27 05:00:46 2026 GMT
Subject: CN=6cf5e99c4b4af1e7135acc4da805c9adc9df36dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:99:8c:aa:b4:76:06:f3:dc:75:84:49:f0:
b9:bd:94:f6:64:e1:5d:64:c5:83:2d:e2:84:dd:33:
d1:a2:3e:a8:88:51:9a:60:ec:e4:ff:54:60:0a:36:
d4:9c:c9:5d:d3:06:70:bd:81:35:ad:bf:66:91:4d:
40:bb:c2:9c:b9:9d:0f:6e:62:cc:fc:40:25:b2:2d:
bf:7b:db:49:fe:48:fc:c6:d1:aa:a8:52:ac:eb:8d:
b2:79:83:09:d6:4d:01:83:df:fc:f8:14:2e:c2:76:
a7:17:00:8a:08:99:d9:7d:39:55:be:a4:2e:66:0b:
df:a7:79:b8:19:82:3f:d2:db:89:8a:ea:c5:ed:9a:
04:92:2e:ce:1e:ee:66:9a:86:a1:0d:b5:df:8c:f7:
de:41:07:a8:73:4b:21:93:a3:6a:8a:29:0a:56:d7:
7b:a6:c8:e7:94:20:10:1c:66:a7:f2:ac:49:53:df:
24:7d:c9:e4:71:d4:fe:4f:e3:65:75:f8:d7:c4:a2:
f6:de:ef:94:f5:aa:9c:40:f9:7f:39:86:24:83:2d:
3d:4f:e1:44:56:e0:54:fe:f8:26:bb:ae:c0:6a:5b:
aa:5d:4a:f4:0b:9f:88:71:6c:60:64:15:d7:a8:54:
c1:0b:21:da:5d:c5:38:6c:b3:2c:52:58:1b:58:3e:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F5:E9:9C:4B:4A:F1:E7:13:5A:CC:4D:A8:05:C9:AD:C9:DF:36:DC
X509v3 Authority Key Identifier:
keyid:47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f5:64:a1:61:26:04:ed:d7:75:c1:3d:c3:07:a1:f0:58:95:
78:26:4e:ec:cf:7b:15:b8:4a:cf:fa:d2:98:da:46:c1:67:cd:
a6:a4:9a:6d:c0:c6:3a:64:b3:4a:c8:f7:bb:a3:fa:36:45:65:
02:31:1f:c9:f4:8f:2e:3e:dc:d2:e8:48:d4:14:de:60:ee:da:
66:16:62:77:51:1b:d0:9e:61:2d:93:d9:48:d6:6a:95:0c:e6:
82:41:01:3f:12:9b:b3:e5:fe:55:9d:d8:36:1f:60:4e:d9:9a:
3e:5b:f9:fd:16:eb:2c:b5:4f:cb:b9:d1:22:0a:a8:4a:fd:9f:
38:0f:d5:dc:68:64:62:fd:4e:37:a6:2c:07:29:91:b0:0a:17:
88:3e:d5:30:8e:f7:ef:9b:61:29:73:75:6e:ee:5c:5f:bd:34:
c8:e9:3a:cc:bd:93:9f:ca:f1:7a:5c:b5:0e:a7:33:ba:4d:68:
fe:bd:bb:e5:41:47:6a:a0:92:42:9a:ed:76:16:e3:1c:3d:b9:
af:69:5f:07:25:f4:15:11:11:98:cd:d7:af:fd:1e:5b:d0:bd:
c6:f2:be:49:71:c6:76:55:d7:87:bd:cb:74:b9:7c:10:62:f2:
3f:db:e1:8d:3a:8a:a5:ff:2b:4e:fe:35:3a:68:35:56:97:2b:
ee:ac:18:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:52 2026 by rpki-client