Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
File: 07SieHIiWX8W0e5MQ1voaQ8QM9k.mft (raw, json)
Hash identifier: EGjjNV2UqPeUYEtob7dWmO9/tVMnpNZJJOpFAVI4kmI=
Subject key identifier: B3:93:78:88:BF:37:40:6E:E0:BB:03:BA:F1:39:23:41:4F:B2:A7:D5
Authority key identifier: D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
Certificate issuer: /CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Certificate serial: 019D9AABD4B1EB826FF9208A698A21368F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
Manifest number: 086D
Signing time: Fri 17 Apr 2026 09:00:45 +0000
Manifest this update: Fri 17 Apr 2026 09:00:45 +0000
Manifest next update: Sat 18 Apr 2026 09:00:45 +0000
Files and hashes: 1: 07SieHIiWX8W0e5MQ1voaQ8QM9k.crl (hash: /r8I508ytZxCE/FDt9Y82HH8EvzVU9t79OscJhAbuR0=)
2: cvsVj4Nxvo824NrKadr7CqxaETo.roa (hash: 6GdZp9tVQFM/JG4iIzlhh+KgWjJbdYXxpM8R/v3gqEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:d4:b1:eb:82:6f:f9:20:8a:69:8a:21:36:8f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Validity
Not Before: Apr 17 09:00:45 2026 GMT
Not After : Apr 18 09:00:45 2026 GMT
Subject: CN=b3937888bf37406ee0bb03baf13923414fb2a7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f9:3c:81:0a:ed:90:6c:6b:25:21:82:35:43:
71:f0:1d:2e:99:14:47:99:56:81:28:4f:71:b7:09:
d6:08:12:82:24:a5:11:d2:9f:5a:09:90:45:9c:53:
14:e6:16:8e:2e:75:8c:22:3c:3b:ef:db:99:34:91:
13:73:da:3a:f2:00:ef:69:b0:0e:b9:36:e2:44:a5:
dd:5e:51:2e:25:8f:de:a7:16:7a:23:ed:50:12:72:
8f:f4:95:1c:3e:66:cd:0e:9f:bc:b4:a6:b7:c7:9d:
b4:ac:34:b0:11:6d:51:41:87:67:b9:c2:37:47:87:
f2:f8:1f:6d:f9:8b:f4:49:ed:8c:df:c6:e3:33:f8:
32:c9:98:50:09:93:59:bd:88:f8:d2:65:f0:f9:fc:
c3:a7:66:1f:e5:f7:c7:1a:45:c4:6a:11:e9:50:24:
b5:b4:d0:5d:97:88:bd:04:72:82:9f:74:52:ec:43:
57:b9:3f:71:32:1e:47:fe:d2:a6:a9:82:2a:51:cb:
cf:1e:b0:2e:4f:e1:e4:4f:14:58:c2:39:a3:a6:c7:
f7:33:79:fc:dd:13:a5:ce:b9:82:e3:a4:57:fd:a7:
0d:90:46:d0:18:d9:8a:34:3e:7e:3e:2c:33:ad:a9:
37:c2:3e:a2:de:80:fb:a7:06:cc:e6:77:35:5c:b8:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:93:78:88:BF:37:40:6E:E0:BB:03:BA:F1:39:23:41:4F:B2:A7:D5
X509v3 Authority Key Identifier:
keyid:D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c6:52:1a:7e:42:bf:80:29:1d:7c:c8:f4:0a:a8:80:ac:34:
cd:0f:cb:15:8b:70:a8:ce:71:c5:1b:75:22:a3:8d:2a:a1:4c:
da:75:6b:02:4c:52:0d:15:f9:0c:de:73:28:4d:64:a4:c9:47:
84:6a:eb:e9:29:c5:7d:7a:39:88:d0:88:e8:e5:d1:e7:57:fb:
2a:eb:32:29:5d:18:cc:f1:e6:d3:7f:ed:04:53:61:4f:f8:74:
f3:77:ca:8b:80:bb:57:97:79:c6:d3:53:63:2a:ea:7f:33:bf:
29:2b:14:c0:79:e3:74:a8:60:6a:2b:e4:61:33:ff:30:cb:77:
50:d8:32:f7:0b:c1:34:5b:b6:10:d3:16:38:55:e1:fe:b2:70:
8a:05:21:f5:35:14:50:1c:60:3c:52:09:9b:45:ee:e5:3d:c6:
9c:ee:51:39:7c:1b:70:b9:a4:36:c2:95:88:30:26:31:46:cd:
ea:f3:e1:9d:e3:b4:f3:47:ef:14:97:57:85:62:86:43:52:e0:
60:bc:f1:c2:2a:23:25:5d:3e:5e:40:db:78:81:1d:ed:fe:40:
76:0a:20:e0:db:d2:fc:61:9c:47:cb:83:31:e1:3f:c2:28:78:
ac:13:7e:d0:2f:68:7e:02:4d:cc:80:ce:07:41:fb:87:8c:c4:
fa:4a:81:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:03:31 2026 by rpki-client