Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: 1dXZzlHmuuTaSn+mFv9S+zrFfrnaN00taaCwNrhs2BY=
Subject key identifier: 73:40:93:87:8A:0B:7E:5C:D9:26:86:F7:20:AB:3D:B4:DD:CB:18:C4
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 019CAD22AF826CF27DA46F9C416F31D81BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 144D
Signing time: Mon 02 Mar 2026 06:00:57 +0000
Manifest this update: Mon 02 Mar 2026 06:00:57 +0000
Manifest next update: Tue 03 Mar 2026 06:00:57 +0000
Files and hashes: 1: _wLbQqpNFVUZXfwkKPHS2EvNsME.roa (hash: b13XNsSSVdJxlN2jmJcwJ/ExmpGXyR6dAM9BzylibwA=)
2: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: brM3FsjElIjmGC5dgjTVXOVzroN4hdR+mGxJtaVcBMQ=)
3: k3fmZjh5Nd4d9i-yTk1YzO9a-ow.roa (hash: mS6dHnW2WbLdF67XEsAw2GyVUdDMoZ8sBWqhN+eeuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:af:82:6c:f2:7d:a4:6f:9c:41:6f:31:d8:1b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Mar 2 06:00:57 2026 GMT
Not After : Mar 3 06:00:57 2026 GMT
Subject: CN=734093878a0b7e5cd92686f720ab3db4ddcb18c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:7d:fe:f3:22:cc:26:1d:d1:09:f8:74:57:
85:ef:7a:8b:eb:0f:31:42:01:fd:64:a2:14:64:cd:
11:fe:db:92:92:07:76:7b:12:65:3d:06:30:3e:8e:
a0:d3:a1:93:47:56:fd:0f:a0:d0:19:c2:d0:b2:b0:
0b:dc:a7:ea:9e:97:75:b1:2f:79:12:78:3a:79:ea:
18:59:27:63:f4:85:47:67:44:27:50:a9:02:1f:5d:
3a:03:62:d0:a9:cd:60:3a:14:37:e2:6b:e7:c2:73:
a0:cc:ef:c4:74:1c:f6:9b:a9:f3:c6:22:ad:d6:40:
e0:37:08:1c:a2:20:cb:32:54:71:50:27:f2:b9:ac:
55:9b:9a:8f:23:93:8e:60:52:9a:ab:01:b8:b3:07:
68:4b:f6:f7:72:1f:b4:fa:c6:8d:82:92:22:73:a9:
d1:c8:ab:41:fa:88:93:13:9f:cf:ce:9f:57:4c:60:
46:43:dd:c7:f5:93:44:3e:87:fd:af:92:fd:76:c3:
39:43:56:c5:9e:e7:8a:28:35:76:0c:ef:d8:ed:47:
1c:a7:bc:16:e2:20:b7:5c:b7:01:49:48:0f:89:65:
ed:47:f0:30:0a:72:b9:8d:46:dc:4f:27:ba:47:41:
10:81:70:92:85:47:93:56:1d:f5:fa:57:e4:f8:ed:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:40:93:87:8A:0B:7E:5C:D9:26:86:F7:20:AB:3D:B4:DD:CB:18:C4
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:23:b1:1a:2b:7f:cf:14:18:10:eb:8e:5c:0c:bc:1a:57:a9:
25:b6:2a:f9:6d:fe:9f:28:a3:81:d1:3d:2f:84:e9:38:5c:7f:
f6:52:b6:ef:f3:ea:15:31:63:61:2e:38:34:dd:bc:d9:01:02:
e1:30:17:03:af:61:de:8f:62:41:e1:4e:19:c4:37:6c:13:ac:
8c:56:57:4b:a0:4e:b2:8d:aa:d0:fa:e0:1d:f5:3f:16:33:8f:
42:03:a1:3b:e7:49:55:7a:dc:1b:e7:4a:db:20:d4:5d:3c:27:
dd:38:ef:24:31:b3:c0:20:8d:db:6d:69:72:0a:a9:a2:ab:5a:
dd:1e:b0:c8:c4:7e:c9:4b:22:88:a9:b8:71:4c:5d:7f:d9:84:
fb:2b:86:89:d3:5e:b6:fc:d7:fa:29:22:10:bc:f7:a1:06:2c:
a1:67:e5:b1:fa:0f:e7:7d:50:c0:ff:28:1e:e7:b8:00:44:1b:
29:9e:19:97:92:6c:66:b3:b3:f3:bb:e5:41:a8:52:50:07:e3:
c3:39:07:11:2f:70:28:6d:d8:2b:f9:e9:6b:e3:50:9c:ae:dc:
25:f6:ed:a1:60:d0:14:57:a4:c3:24:55:df:7c:e7:15:f7:ff:
9e:ef:20:6f:ae:a2:02:55:f6:f1:d0:07:19:b8:6d:00:89:b3:
83:1c:54:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:55 2026 by rpki-client