Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
File: s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json)
Hash identifier: WBg9oKKdhmrASYNRhGj0b1ONrJtGMWvP7tEgz0Nt/5o=
Subject key identifier: C2:4F:56:1E:6D:0A:DF:46:61:54:0E:58:BE:AC:FA:12:E2:45:21:76
Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
Certificate issuer: /CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Certificate serial: 019CAB6ACE8312A776E3F9321B3326FA4F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:00:29 +0000
Manifest this update: Sun 01 Mar 2026 22:00:29 +0000
Manifest next update: Mon 02 Mar 2026 22:00:29 +0000
Files and hashes: 1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: SbBnWsZOi6luhDJfJ+qZuI1cIYZPs+A8RQyMnZihXcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:ce:83:12:a7:76:e3:f9:32:1b:33:26:fa:4f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Validity
Not Before: Mar 1 22:00:29 2026 GMT
Not After : Mar 2 22:00:29 2026 GMT
Subject: CN=c24f561e6d0adf4661540e58beacfa12e2452176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:7f:71:54:10:96:3d:6a:c8:0f:e5:f5:ef:
cc:3d:22:ea:6d:13:62:17:cc:f9:d3:93:db:b3:f6:
6a:68:94:9d:52:91:5e:ce:dd:b2:1f:4d:e3:43:56:
24:62:4c:ec:a9:51:9d:58:ff:92:72:44:5e:29:34:
94:83:0e:09:77:f6:e7:bc:f8:0d:0d:c8:e0:0b:2b:
a7:83:5f:28:62:18:f4:af:e1:7e:33:0e:09:af:9f:
f3:b3:f4:25:2b:4e:df:49:2e:9b:a3:b1:61:0d:d1:
d3:79:6c:c8:8f:15:51:11:83:f0:8d:73:57:23:db:
07:b7:ea:d1:3e:a5:46:53:40:35:cd:52:91:3a:03:
51:37:e5:d2:7f:8c:75:ec:77:53:17:2f:e6:7e:9f:
bd:43:ce:85:a9:f1:29:46:b4:23:80:54:28:d6:0a:
90:79:b6:f7:6f:da:62:fd:36:91:f5:be:97:12:a5:
a0:4d:2f:5f:d8:a6:89:66:fb:32:26:7c:59:cf:67:
e2:14:f9:5a:2e:d8:88:d6:c1:1a:5d:d3:b3:ff:c7:
1c:82:50:3a:f4:2e:7b:86:24:d5:bc:17:6a:3a:eb:
86:9e:eb:85:b0:3e:2d:41:89:bd:a8:f2:31:75:5b:
db:b9:08:76:bb:9a:cc:b7:78:93:17:f2:aa:26:12:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4F:56:1E:6D:0A:DF:46:61:54:0E:58:BE:AC:FA:12:E2:45:21:76
X509v3 Authority Key Identifier:
keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3f:c2:7b:49:2d:ed:0b:30:29:01:1d:00:e8:f1:e2:0d:4a:
62:09:18:2a:20:25:90:9b:67:5b:45:5a:33:af:e5:9d:28:fc:
e4:1a:23:72:bf:d9:01:45:90:e8:5b:85:68:e6:25:5c:6c:46:
e7:e0:f6:9a:4a:41:98:32:d9:7a:dd:54:24:b5:07:9a:aa:39:
cd:56:00:aa:75:25:06:dc:a2:69:5e:f2:b0:7e:3f:00:90:c7:
6b:36:a2:87:74:48:c8:dd:5d:1d:e1:1f:ca:5b:29:84:70:71:
68:c1:db:87:8a:85:45:b6:ca:2e:96:53:1b:45:b9:67:06:9a:
86:f3:e3:7e:a0:cb:7f:c2:31:ce:78:00:d1:6f:9e:40:da:bd:
b9:2f:77:50:84:8a:fd:66:9f:24:68:af:f8:7f:4b:15:93:59:
6c:34:2b:1c:73:33:7b:6f:66:81:13:5e:ea:9a:1a:19:9a:0f:
4a:64:a7:51:2a:61:5f:b6:df:5a:7f:8c:74:2c:98:b5:d8:15:
2d:59:14:c6:a3:d2:93:2e:72:4a:e3:c8:07:46:8a:a5:f4:db:
00:23:98:94:1b:79:b6:a2:ac:1d:23:dc:65:c3:ef:20:db:72:
23:df:13:8d:50:fd:cd:68:93:96:f6:b0:22:0b:a6:9e:04:8b:
fa:43:f2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:48 2026 by rpki-client