Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File: 7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier: ajTrw30HbE6qgpGIH8UOSPsAcz9N/ZHoT7LmyRBVr+E=
Subject key identifier: 89:70:57:07:BB:C1:3A:40:A0:E2:1C:20:C5:80:A6:6B:37:09:19:B7
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer: /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial: 019CADFE5B9A400FB4FE510E43777FA109AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number: 063C
Signing time: Mon 02 Mar 2026 10:00:53 +0000
Manifest this update: Mon 02 Mar 2026 10:00:53 +0000
Manifest next update: Tue 03 Mar 2026 10:00:53 +0000
Files and hashes: 1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: dZKAE7tIDBL9BBHc1M094/h3fhQnOHGQy/Vz1JT/z/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:5b:9a:40:0f:b4:fe:51:0e:43:77:7f:a1:09:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Validity
Not Before: Mar 2 10:00:53 2026 GMT
Not After : Mar 3 10:00:53 2026 GMT
Subject: CN=89705707bbc13a40a0e21c20c580a66b370919b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:30:aa:b9:47:a8:83:24:99:e6:09:07:74:
9a:6d:35:dd:5d:15:a4:3a:6d:da:40:78:6b:56:40:
a0:6e:51:68:b0:f0:4d:28:0f:d4:fb:20:0d:1f:91:
14:62:66:3a:ce:4e:eb:96:ef:72:f2:a7:1a:a9:62:
64:80:3d:a3:0d:85:e7:15:9a:b5:a9:af:4c:51:d9:
98:d2:80:92:d6:74:dc:6a:0a:3b:fb:64:ff:b8:1f:
6e:0b:c0:fc:d7:d1:e0:cb:41:34:a5:70:eb:39:f1:
bb:09:da:64:95:23:af:1b:b9:09:6b:db:83:50:44:
f7:ee:94:ba:d7:2f:e2:42:58:25:43:c6:a3:cf:83:
ec:b7:36:1d:ec:89:f6:63:a4:2b:f6:22:55:0d:6b:
dc:6f:62:95:52:a6:d5:b3:3a:e4:2d:8b:02:f8:78:
a8:95:70:da:bc:0e:86:e7:42:91:f7:38:82:2a:57:
33:a0:db:6d:18:76:a9:f2:49:0f:0d:ee:6d:c4:89:
c8:75:eb:ed:1b:36:df:46:b0:f8:2f:56:f2:0e:56:
ba:77:f6:89:61:b0:20:00:1e:85:bd:e4:9a:02:6c:
08:2b:c8:ca:ba:29:ee:dc:46:1b:75:35:82:9f:bf:
c4:83:b7:ba:bd:45:0d:5d:eb:fa:ff:5e:67:c2:34:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:70:57:07:BB:C1:3A:40:A0:E2:1C:20:C5:80:A6:6B:37:09:19:B7
X509v3 Authority Key Identifier:
keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4d:79:48:fd:9e:c3:40:7e:15:6e:c4:08:c5:09:8c:6d:d2:
a6:2c:88:e9:59:63:31:c0:79:d1:3c:6b:9f:ba:a5:31:8b:e2:
94:93:1b:17:c2:df:13:f9:ca:91:fd:a3:86:2c:87:eb:7f:b0:
2d:d9:f7:72:5c:df:53:4a:c5:61:01:f7:01:7e:0a:09:61:0b:
e5:41:36:5e:6e:d7:53:29:98:71:8f:9e:4b:dd:ef:59:9e:1a:
dc:a1:23:92:68:ad:af:ce:dc:a7:f8:08:65:47:62:5a:fb:1d:
e5:f1:5d:d2:f2:d9:53:d3:f9:69:d1:08:d7:e5:d7:5d:26:2b:
80:1b:19:74:38:0b:c6:e2:c3:f3:9a:c4:9a:54:44:17:8c:c1:
c3:8f:58:db:9f:3d:eb:7f:a9:9f:16:2b:18:65:a1:b0:68:91:
22:9b:92:8e:7f:00:ab:d1:5d:e8:f5:12:44:c8:18:04:45:a2:
16:fa:b1:80:1b:76:70:7b:d4:9b:1a:8f:d9:e5:27:47:3c:33:
55:24:3e:38:7c:fd:80:b9:7d:14:a9:76:02:73:55:08:0f:1c:
b4:9d:60:9e:07:a2:79:d8:60:59:9d:3a:89:3d:d2:9b:16:f2:
b9:47:33:46:ad:94:a3:25:98:ab:fb:64:4e:da:1a:9e:ea:19:
bd:d0:1e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:39 2026 by rpki-client