Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
File: i7i2EnIdTUwtB8v-LklemGoPAm0.mft (raw, json)
Hash identifier: B5nSNtVuqmjNGjazXfUHDPrOQWex7Pfi3muUWoXTKDU=
Subject key identifier: 34:D9:66:FD:0B:2D:A8:38:DE:B6:40:7F:F5:FB:84:0F:D6:9C:EF:C8
Authority key identifier: 8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
Certificate issuer: /CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Certificate serial: 019D27E0168714D2982B8E7A13236E347920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
Manifest number: 0868
Signing time: Thu 26 Mar 2026 02:01:30 +0000
Manifest this update: Thu 26 Mar 2026 02:01:30 +0000
Manifest next update: Fri 27 Mar 2026 02:01:30 +0000
Files and hashes: 1: BN6g_D94xKyP47gk6IfNIcBTfDQ.roa (hash: 3HzJpZ8HtfAFz7+UBD2zP1SoqdzFz5KbeKPs56DQawc=)
2: i7i2EnIdTUwtB8v-LklemGoPAm0.crl (hash: Oq6XF/5xOHmePwJF7e3iufoThwR6Nk5p00cCnwRdbmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:16:87:14:d2:98:2b:8e:7a:13:23:6e:34:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Validity
Not Before: Mar 26 02:01:30 2026 GMT
Not After : Mar 27 02:01:30 2026 GMT
Subject: CN=34d966fd0b2da838deb6407ff5fb840fd69cefc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:fc:11:5a:32:71:5a:9d:a6:4b:0e:9b:22:
9f:30:fd:e9:53:05:8a:41:96:91:52:43:aa:33:19:
26:cd:60:18:a1:0a:b4:c0:81:e0:3b:56:2a:46:e9:
87:18:25:bf:f6:e9:37:cf:34:b3:25:21:20:d0:08:
8c:ac:05:99:45:f6:3c:3c:9d:d7:5e:a4:e1:99:e8:
7b:b8:fa:58:1f:73:c2:c7:a2:d8:33:f3:25:38:c4:
0a:de:24:07:95:88:24:5c:2c:ff:03:33:b8:5c:e6:
f9:21:e1:c7:71:fa:48:ef:63:cd:b5:c2:bd:bc:cc:
d6:3e:c3:dd:4a:db:3c:f9:56:f1:21:ce:7a:0f:cd:
b8:3c:e6:15:0d:fe:5a:89:fc:b5:72:a0:b4:d3:1f:
23:43:0b:88:c3:07:82:0c:21:67:49:f5:6e:17:07:
40:64:23:80:79:a2:44:3e:d7:28:d5:68:cd:2f:42:
c7:39:1d:8f:b2:0d:ef:26:81:b6:e6:fa:7f:3a:e9:
a1:b3:a5:2b:6a:f9:ae:fa:33:f1:e1:06:a4:b7:9b:
f1:bd:26:7b:0a:c3:6c:b8:33:46:67:fc:09:37:ea:
37:bf:f0:fb:e9:84:f8:96:86:a9:9b:e2:3d:66:e4:
c9:15:66:65:9f:92:78:e0:91:67:f7:bd:5b:8c:d8:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D9:66:FD:0B:2D:A8:38:DE:B6:40:7F:F5:FB:84:0F:D6:9C:EF:C8
X509v3 Authority Key Identifier:
keyid:8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ea:a1:36:d3:ee:d1:b0:f4:0d:78:d5:6f:aa:55:14:58:bb:
27:83:0e:89:7f:80:d8:71:1d:0e:19:bb:ca:c2:73:b9:84:74:
50:a9:d8:af:8e:e7:94:a4:aa:46:45:92:3c:98:48:e4:d2:55:
d0:2b:aa:84:da:50:b5:65:9b:da:20:f2:63:06:11:8b:d1:99:
c9:7f:ba:42:c9:98:0e:5d:5d:51:27:0c:19:69:57:c9:22:bd:
9b:58:a4:b9:d1:4b:34:3f:6a:74:9d:3e:e5:b6:90:91:96:42:
0f:fd:e4:5e:b9:38:62:17:83:a9:72:e0:94:05:98:c2:f2:44:
95:1a:06:5d:49:9f:54:7a:3c:e7:02:4d:41:33:37:7a:c8:1d:
f5:4d:5d:c2:69:e7:28:2b:46:c8:53:35:4c:69:4d:6d:91:3a:
a9:04:db:4b:9f:0b:e1:ee:27:ad:8b:d3:07:37:63:ef:36:0f:
2e:38:b6:ea:fb:cf:b5:9b:5a:0e:88:33:66:fd:7d:23:0f:d0:
d1:8e:6c:33:dc:48:01:d9:89:50:61:39:ba:ea:7c:04:fd:dd:
38:26:e5:30:30:b5:9e:a1:ad:f0:a7:cf:01:44:17:6f:c2:78:
86:d9:db:a2:23:b7:38:0d:fa:d9:4f:75:aa:89:6a:61:28:05:
ea:bd:a2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:42:25 2026 by rpki-client