Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File: 73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier: BYE2K5YHIMUnVzC8E33ykMAiVtFzSCngwl8mAqvfmNE=
Subject key identifier: 7B:63:BC:AB:64:68:3A:62:64:1B:B7:6B:9E:9B:69:02:4D:EA:6C:10
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial: 019CAA2149CE27ADCE5E531EB4EA67693D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 16:00:34 +0000
Manifest this update: Sun 01 Mar 2026 16:00:34 +0000
Manifest next update: Mon 02 Mar 2026 16:00:34 +0000
Files and hashes: 1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: Hli2JNRx3dee4eSpUhxInn+N/W4nGFDSljfpHc0rxCo=)
2: s3XOS3QA_OLCEJgqKQs1DGSZPSE.roa (hash: zm1kL82qrnuSElGfAwXwitkc6LPDrRud9bFF8MtyuyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:49:ce:27:ad:ce:5e:53:1e:b4:ea:67:69:3d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Validity
Not Before: Mar 1 16:00:34 2026 GMT
Not After : Mar 2 16:00:34 2026 GMT
Subject: CN=7b63bcab64683a62641bb76b9e9b69024dea6c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:b1:f9:12:e5:37:3c:5b:86:e4:b8:12:44:
7b:fe:80:88:85:ce:56:5e:be:15:db:7c:b6:7e:3a:
d4:b6:d6:e8:d6:f3:02:10:2c:cf:72:42:91:87:9d:
36:8b:78:a9:e6:d9:96:35:80:31:66:e2:0b:b5:d3:
e2:e1:e8:37:7b:93:8e:64:24:6e:6a:0c:d7:9b:3d:
ba:d0:e9:a6:42:94:e3:95:42:8a:43:8c:8c:5e:5c:
0d:08:8a:e6:17:27:eb:b6:fc:be:71:e4:3a:87:db:
0d:4b:65:a9:88:87:e4:f6:d6:d5:7c:a3:c0:d7:e5:
95:6b:a2:c3:e4:51:36:23:15:9c:77:3d:84:3d:3b:
c8:19:3e:09:e3:2c:16:d2:8d:17:25:be:97:b5:a8:
45:09:63:07:40:74:d7:09:13:86:23:67:05:c8:89:
fd:25:2b:3e:b7:f5:55:dd:27:83:32:c8:40:5b:86:
6b:8d:80:f9:0f:b0:59:dd:63:4b:2a:a5:bb:17:db:
66:05:f6:90:44:e8:15:ea:22:80:ca:44:85:58:bd:
4f:5c:27:f2:11:f5:66:45:8a:dd:52:22:9e:47:e6:
19:d1:d3:cd:c0:12:06:8e:e9:69:19:79:82:49:8e:
f8:56:7d:c8:c0:86:66:06:f3:46:27:db:af:22:a1:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:63:BC:AB:64:68:3A:62:64:1B:B7:6B:9E:9B:69:02:4D:EA:6C:10
X509v3 Authority Key Identifier:
keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e3:c9:e1:6d:f1:39:4c:b2:2d:83:cf:58:2f:9a:4e:af:7c:
bc:f5:8c:1d:34:a9:84:ca:ab:44:15:76:66:ee:cb:e5:9b:94:
e8:66:e9:bd:8b:27:d6:4d:37:06:b3:bd:61:64:48:a0:9e:30:
4f:8c:67:5b:aa:a1:09:3b:4d:1d:df:e2:1b:ff:d6:3f:4d:2f:
ae:84:c2:a8:c2:0c:13:02:53:78:8a:a6:bd:a9:6b:1d:43:39:
fd:53:f0:b2:a7:b1:2f:7d:22:29:53:e0:8a:32:10:b2:0e:41:
dd:52:15:05:be:0d:e6:7a:e1:f0:25:56:51:43:81:8d:a2:5d:
a6:9c:7e:98:ff:db:29:e9:fb:45:17:44:a6:32:c9:95:24:b2:
96:ae:af:41:0b:97:1d:2b:07:ad:f8:56:e9:d0:d9:4d:ff:8a:
a4:69:e5:4d:49:ab:3e:a5:f9:96:77:2c:20:a2:58:aa:c1:fd:
56:df:6b:5a:6a:13:f7:6c:d5:27:5e:d3:e6:b3:05:06:91:00:
cf:03:4e:f1:8e:70:94:b2:eb:a4:f9:20:2d:28:6c:6c:61:f9:
05:84:4d:57:b6:03:8d:2f:32:a1:b9:ee:ce:c2:fc:3c:38:9b:
75:94:b2:8b:6c:34:22:02:00:cc:37:44:be:ed:fe:bb:e9:e7:
bd:35:38:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:04 2026 by rpki-client