Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
File: t7GVtlEuyHh9maGy5OvYCIT5gLI.mft (raw, json)
Hash identifier: dn1Q05fsdDJwoeV2IzvuNhuqGROWp+L7lYqJHXumzHg=
Subject key identifier: 89:BF:FE:FD:CE:B3:84:88:1F:75:B1:DA:D4:B0:BF:16:69:26:81:19
Authority key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
Certificate issuer: /CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Certificate serial: 019CAEA2D3B82FB151EE5548DDD5E0B4EE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
Manifest number: 0423
Signing time: Mon 02 Mar 2026 13:00:32 +0000
Manifest this update: Mon 02 Mar 2026 13:00:32 +0000
Manifest next update: Tue 03 Mar 2026 13:00:32 +0000
Files and hashes: 1: UFJMBp4uub3i0PII1KHLVKqEMXw.roa (hash: P90+UkJxUgu+4FLpaN+LpqKZd3cpv3EFSdnasvG1wnk=)
2: t7GVtlEuyHh9maGy5OvYCIT5gLI.crl (hash: JaP3F6TWg79m0YtqAUScG7E0LmVmM2DXBdE4nXWAYEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:d3:b8:2f:b1:51:ee:55:48:dd:d5:e0:b4:ee:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Validity
Not Before: Mar 2 13:00:32 2026 GMT
Not After : Mar 3 13:00:32 2026 GMT
Subject: CN=89bffefdceb384881f75b1dad4b0bf1669268119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:26:2f:08:93:21:a1:6a:59:7b:7c:b6:b6:42:
cb:d5:e1:7b:8b:44:f1:fe:bd:e4:cf:99:e8:2b:d6:
11:0f:25:25:5c:39:36:eb:69:37:9a:b0:a2:e7:5e:
e0:96:72:cd:a3:d3:d3:bf:45:7e:4f:fe:2a:38:e8:
31:18:66:47:d2:0b:7f:6c:2b:bb:8d:22:29:3f:df:
7a:23:32:7d:a1:c9:8f:98:49:a5:47:33:7c:74:37:
6f:35:aa:fa:3d:35:2c:24:47:10:83:6b:f9:ae:c7:
93:14:55:9c:d3:52:07:99:be:08:69:f2:b6:fd:4c:
5c:1c:f7:4d:80:d9:9e:28:6b:53:db:b5:46:7b:a5:
05:a6:6f:b7:ae:3e:35:c1:75:e8:58:51:88:79:91:
9a:db:88:92:14:e8:b6:74:f1:be:70:d4:f7:b3:c6:
6a:a0:cd:cc:a2:31:8c:e2:1d:a4:93:43:26:a9:49:
ca:e7:b6:e1:93:13:0a:56:bc:93:98:74:6c:25:5f:
b2:a3:b9:45:a9:07:f7:82:55:f7:80:5a:4a:8d:d2:
07:3f:42:e8:cc:80:5e:38:c5:da:d6:06:67:b4:00:
39:bf:cb:c3:88:f3:56:23:1c:31:b2:10:42:0d:b8:
f0:a7:32:6f:ad:42:b9:74:69:3b:5f:49:c9:82:a2:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BF:FE:FD:CE:B3:84:88:1F:75:B1:DA:D4:B0:BF:16:69:26:81:19
X509v3 Authority Key Identifier:
keyid:B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:42:fb:9d:9a:1f:19:78:bb:48:15:73:ad:77:88:98:c6:0f:
37:5e:ca:55:f8:55:f5:1c:52:55:d6:d5:27:bf:00:7f:dc:ac:
b8:33:92:97:9a:dc:45:f5:f7:10:a3:07:cb:6f:49:c2:b6:dc:
87:03:f1:7f:43:48:6f:4c:8e:2a:f1:3e:0c:86:80:c1:96:2b:
07:a8:fc:48:d5:13:d7:72:82:35:eb:1d:20:35:6e:99:14:ba:
cf:aa:86:d7:83:99:9c:61:c0:eb:7e:cd:5e:3d:b6:77:e9:87:
8e:20:ff:a2:3a:8b:55:e3:0b:e7:02:dc:61:ed:e0:75:17:98:
2c:f3:38:1f:50:85:71:13:9a:da:8d:35:5a:9c:17:9a:7c:22:
40:c1:8e:af:cf:fd:a3:80:d8:41:51:22:17:d1:3f:d8:83:98:
27:52:e0:39:8e:8e:5a:42:19:1a:32:de:e3:c4:99:4b:1f:34:
40:4c:78:0e:ef:f0:3b:11:12:22:b6:7c:0b:ed:08:d1:3e:47:
8d:b4:9b:6a:92:80:c7:d9:d4:34:83:20:98:0e:0e:96:01:ed:
b6:2d:98:4f:54:09:18:ab:5d:13:5b:70:53:bb:54:b6:30:d3:
e2:55:6b:47:f2:a9:96:d8:a2:67:b5:1c:5a:e0:3e:43:7d:51:
fc:5e:04:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:42 2026 by rpki-client