Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
File: t7GVtlEuyHh9maGy5OvYCIT5gLI.mft (raw, json)
Hash identifier: GIlarq8E+i/NWrOV/3oBNbMJSnbM4wNPai05Gk3LcAc=
Subject key identifier: 96:1B:97:06:B1:5E:ED:4A:D0:0D:1E:1E:07:8C:A5:32:DA:2F:3C:93
Authority key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
Certificate issuer: /CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Certificate serial: 019D9A3F0D4A60D0A12046E9FFC136AE6D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
Manifest number: 049D
Signing time: Fri 17 Apr 2026 07:01:56 +0000
Manifest this update: Fri 17 Apr 2026 07:01:56 +0000
Manifest next update: Sat 18 Apr 2026 07:01:56 +0000
Files and hashes: 1: UFJMBp4uub3i0PII1KHLVKqEMXw.roa (hash: P90+UkJxUgu+4FLpaN+LpqKZd3cpv3EFSdnasvG1wnk=)
2: t7GVtlEuyHh9maGy5OvYCIT5gLI.crl (hash: cP/XPf7gj4JOF32Ptzh0D3d/ro7BAMYaDUPWGdY5uzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:0d:4a:60:d0:a1:20:46:e9:ff:c1:36:ae:6d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Validity
Not Before: Apr 17 07:01:56 2026 GMT
Not After : Apr 18 07:01:56 2026 GMT
Subject: CN=961b9706b15eed4ad00d1e1e078ca532da2f3c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:60:af:17:56:ec:d6:92:10:cf:08:c3:85:
67:7c:7f:f2:36:e2:38:f1:f2:ea:93:d2:32:ea:ef:
8e:b6:87:af:e4:ad:a8:cf:54:58:c8:cc:ba:eb:02:
fc:25:bb:ae:3c:3e:42:f2:65:ff:ec:48:50:be:45:
6b:b2:14:e8:22:ae:45:b8:d2:61:5f:81:15:b1:81:
82:76:1b:7c:28:dd:a3:9e:77:2e:05:49:a3:ed:21:
13:f9:ed:e3:11:02:f1:09:5d:15:9f:5b:a5:c0:9b:
40:2a:c0:0f:94:ef:02:81:1c:2e:f2:b3:0a:cf:2b:
86:f3:c0:b7:0e:40:94:f3:6e:6e:7a:f6:13:ac:49:
ef:ae:73:54:4a:f3:68:99:a9:ce:11:2b:8a:96:92:
2c:cf:ad:43:a9:28:13:6a:a3:7a:65:b5:0f:b4:3d:
88:3e:90:d8:da:d0:9a:f2:aa:80:e5:e0:d9:d8:2f:
0e:59:1b:d1:f0:2c:29:d9:44:a3:dc:36:e8:23:77:
92:7c:1f:65:58:45:7d:35:16:25:34:68:6f:66:c2:
ca:8f:35:3d:87:ca:91:bb:21:74:e4:16:d2:0c:c3:
92:a7:c6:1b:e8:45:d8:3f:4b:cb:55:48:4e:db:8c:
09:b8:33:06:d5:d1:e7:c8:80:75:86:12:4f:3b:35:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1B:97:06:B1:5E:ED:4A:D0:0D:1E:1E:07:8C:A5:32:DA:2F:3C:93
X509v3 Authority Key Identifier:
keyid:B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a1:da:92:d0:85:7f:46:19:c6:84:f1:77:8f:62:89:bd:4d:
2e:9d:85:9f:4b:24:91:36:90:03:ec:48:6d:3c:a3:2d:fa:09:
d3:b9:83:4f:4a:c4:10:a4:7d:a9:69:11:42:2c:da:ca:33:b3:
26:35:89:a4:d5:49:a6:03:b6:15:6a:5f:dc:5c:52:0a:4f:1f:
c5:43:a9:c9:1e:4c:50:31:c6:8b:fa:73:6d:b1:e5:a3:f3:63:
a9:0f:48:50:a2:96:ef:0d:35:f3:7b:21:dc:c7:cb:db:c2:a7:
4f:13:13:8e:62:09:73:3f:55:ad:62:90:dc:30:1a:24:9c:b2:
25:da:aa:6b:98:0b:6d:41:e3:43:25:2d:6a:d6:e1:c7:e1:dd:
68:d2:fe:33:98:25:63:27:82:d2:73:90:78:09:84:1a:c8:2e:
59:63:70:31:66:7c:e4:0d:96:71:e0:28:01:98:63:1d:ae:2c:
15:60:8f:20:d7:53:b7:7d:9d:fa:fd:f3:f4:80:15:9f:62:30:
ba:1b:f5:6c:5e:c6:83:7d:12:82:4a:06:9e:dc:85:fd:3d:7c:
23:0b:a5:63:88:42:d9:cd:8a:ce:d3:42:cc:1f:04:9d:cd:c0:
83:d8:70:79:ce:b0:62:ce:5d:7c:26:41:b2:39:12:9e:34:6f:
6a:8d:db:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:37 2026 by rpki-client