Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File: m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier: ECWEnaa2pGEmmnIwjsiv0NAnyo7pnF5vV8ZZb1ROB/0=
Subject key identifier: EB:2C:EA:11:23:C9:B5:36:77:79:4A:38:E2:EF:0D:84:84:17:17:7F
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer: /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial: 019CAFECA8A80D4F6FCADDCF99BC488ADCC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number: 12B9
Signing time: Mon 02 Mar 2026 19:00:48 +0000
Manifest this update: Mon 02 Mar 2026 19:00:48 +0000
Manifest next update: Tue 03 Mar 2026 19:00:48 +0000
Files and hashes: 1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: bjxz9/+2A1/0gYEXvRfVGbs+mVxqJBIEN7ZhCWJRbxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:a8:a8:0d:4f:6f:ca:dd:cf:99:bc:48:8a:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
Validity
Not Before: Mar 2 19:00:48 2026 GMT
Not After : Mar 3 19:00:48 2026 GMT
Subject: CN=eb2cea1123c9b53677794a38e2ef0d848417177f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:9a:6b:d1:00:ee:58:4f:63:6f:b8:71:d8:
cf:10:5f:9b:1d:4c:b8:ca:51:7b:5c:d9:68:dd:72:
a2:f7:c1:1b:42:00:0e:a2:9f:dd:3d:8e:6a:c1:42:
cf:4d:42:8f:72:7e:3f:df:ba:33:37:0e:85:5b:a4:
bd:63:e8:83:b1:d8:3c:fb:0c:1d:b5:8a:0e:f8:06:
5c:6a:1f:cd:ea:51:b3:e6:8a:01:ed:4a:8c:29:33:
26:8d:ad:01:04:53:3f:2a:a8:ca:b3:40:91:ce:65:
60:fe:c1:d7:06:e3:e7:a8:97:95:35:69:75:3c:76:
e9:f5:36:02:8c:3a:1e:15:65:1d:1e:1f:84:a9:49:
57:f9:23:ae:58:ae:f0:a8:94:43:01:18:97:43:c0:
79:83:a4:35:d5:7f:43:8c:0b:6e:0e:49:e7:36:b1:
79:a5:ef:cb:22:0e:23:57:5e:3a:8e:da:b8:a3:93:
a9:36:23:0a:72:d7:45:f7:23:a9:68:c2:56:ff:a1:
1d:cb:b1:27:2f:a8:b0:10:3a:12:18:ce:7c:13:ec:
88:a3:b0:20:22:d6:0f:cd:d6:fa:bb:ca:b9:9a:6c:
89:03:c6:d2:2f:27:5c:c4:22:e5:91:f3:26:e1:d9:
95:11:41:f6:d2:7a:44:dd:2a:9b:bd:d3:cb:c4:64:
58:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2C:EA:11:23:C9:B5:36:77:79:4A:38:E2:EF:0D:84:84:17:17:7F
X509v3 Authority Key Identifier:
keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:67:76:4b:54:7a:46:8f:f1:b5:97:58:2c:41:18:82:0c:c5:
8b:79:a9:10:32:a1:27:b2:48:8d:3d:b9:af:2a:b8:54:0c:10:
cf:18:21:6a:86:7d:fb:7f:5d:4c:24:36:72:d4:e3:59:cb:c2:
b1:19:b5:6f:82:bf:7e:c5:fe:0a:f6:de:83:a7:0e:6c:5a:8c:
7e:bb:59:3f:22:44:39:a1:8c:ed:40:4c:aa:2f:97:7c:9b:0e:
3b:32:52:21:0e:79:94:df:97:39:ca:c4:f6:79:40:d1:a6:e0:
f0:1f:91:c6:52:68:60:fa:85:33:c4:74:fc:b9:a2:7f:b3:8b:
bd:ff:7b:03:09:8b:1d:25:ea:ca:6d:35:22:cf:1b:78:46:ae:
76:0c:81:c6:95:a9:f5:70:ed:82:6e:ff:3a:3c:a2:48:f2:93:
65:fe:ec:2d:40:3c:6d:f4:26:bd:1a:1c:81:d2:27:e0:77:b0:
4a:2d:64:28:9c:9e:1c:88:c3:b7:eb:c1:5a:7a:b9:5d:e4:10:
79:c4:82:a5:d3:0a:93:c1:70:59:ec:a5:fa:95:cc:54:5c:1a:
85:ec:ce:1a:79:df:60:7c:9d:11:9f:9d:7a:f6:20:e1:73:b5:
fd:6e:9a:86:a9:a9:e9:3b:c3:dd:78:dd:b3:e3:02:35:dc:94:
3b:cd:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:47:15 2026 by rpki-client