Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
File: R7lNsbPetIBa0mFVS65rpfp0CMs.mft (raw, json)
Hash identifier: MXlOUSIgCtpq6VRPEF55TE8J1heco7xm/IdGBLldK0I=
Subject key identifier: 33:28:FB:1F:A5:D1:12:51:63:C5:00:D5:C2:FB:B1:BA:95:9F:00:87
Authority key identifier: 47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
Certificate issuer: /CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Certificate serial: 019D270445B6D4CF33476C5AD3E3A6549401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
Manifest number: 1881
Signing time: Wed 25 Mar 2026 22:01:24 +0000
Manifest this update: Wed 25 Mar 2026 22:01:24 +0000
Manifest next update: Thu 26 Mar 2026 22:01:24 +0000
Files and hashes: 1: R7lNsbPetIBa0mFVS65rpfp0CMs.crl (hash: ZePgOSPeIZXZ8+iryHlihEn4rqivX6iUdjPPTPxXoAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:45:b6:d4:cf:33:47:6c:5a:d3:e3:a6:54:94:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Validity
Not Before: Mar 25 22:01:24 2026 GMT
Not After : Mar 26 22:01:24 2026 GMT
Subject: CN=3328fb1fa5d1125163c500d5c2fbb1ba959f0087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:7d:33:d3:01:96:f9:50:06:96:4f:53:aa:
76:6c:f6:52:f5:be:97:df:09:73:e9:ef:07:e3:5a:
c4:c9:34:24:3f:0e:d8:e7:30:04:83:cd:ff:8b:3f:
2e:36:a2:e5:ac:03:7c:af:b6:4e:58:18:a8:f3:ba:
21:63:4b:90:08:45:92:0a:49:10:10:0a:b1:b6:59:
46:55:d0:61:b9:fc:39:f2:c9:88:da:5d:71:86:ae:
08:42:2d:ea:2a:eb:ab:c0:cf:f2:72:e2:ca:d0:1e:
83:dc:cd:46:72:ba:92:b9:09:4a:e9:58:04:34:88:
66:0e:7e:5a:7a:23:5c:81:17:99:ff:a3:db:77:7a:
47:27:d0:d3:e2:89:f0:97:7a:68:1d:b7:c7:ed:1f:
c2:f6:89:13:27:6e:e2:05:5e:44:79:69:a8:5d:46:
ab:2d:c1:54:0d:e6:0e:a7:21:68:2e:2d:43:ad:9f:
1e:49:7b:32:1d:a3:f8:74:ef:db:34:47:e2:95:36:
cb:09:b7:9a:f1:91:42:ad:76:f4:33:9d:95:97:be:
d9:fd:e1:bc:2d:a6:65:af:09:e4:5b:a8:e1:fc:f5:
97:c8:ae:15:f6:be:07:50:25:0b:3f:0b:4d:2a:e1:
48:a2:f2:7d:61:30:b6:63:2c:f0:4a:6a:7a:4c:9d:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:28:FB:1F:A5:D1:12:51:63:C5:00:D5:C2:FB:B1:BA:95:9F:00:87
X509v3 Authority Key Identifier:
keyid:47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ed:09:9f:2d:24:68:2c:a0:8b:de:21:8a:c4:c8:22:a5:09:
60:ab:a0:3c:13:24:d4:4a:96:11:85:cb:e2:f8:19:07:14:62:
a6:b8:f4:b1:ec:31:74:ed:43:8b:f6:35:8c:48:33:e6:af:61:
e0:99:c4:fd:8b:af:78:09:fa:9b:09:fa:67:a7:4e:51:54:ae:
66:63:be:4b:5f:44:2d:05:a8:bb:3e:ce:a5:8a:6a:86:e3:b6:
da:21:61:ed:8f:5e:f7:8f:c1:c8:c6:d7:70:e0:3a:00:1f:52:
02:69:8e:ea:5c:c8:29:01:fd:2c:67:36:46:1a:d3:06:3d:b4:
a2:30:d2:db:11:13:be:25:75:b6:d5:d3:56:fb:d2:b6:a1:25:
0a:e5:48:57:9d:63:1c:04:a4:90:78:0a:68:ac:f4:57:79:b6:
f5:07:20:10:83:5b:ce:15:70:0b:aa:0d:d7:4b:3c:5e:17:39:
c1:35:ce:f2:d8:44:6a:0b:e2:b3:e4:60:6d:97:d0:d2:e9:94:
21:33:eb:c2:36:87:45:56:23:be:5f:23:56:e7:66:4d:99:2e:
df:81:0d:02:4d:89:41:ee:5a:12:2a:b0:8a:95:f0:1f:bf:c8:
44:52:78:42:1c:14:86:1d:e6:26:8d:10:26:a2:3c:5b:49:ac:
90:5c:64:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:24 2026 by rpki-client