Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: hg5mHOoYUu4mS4P9QDrignA1YtKb0pXPAkLcivuVdcg=
Subject key identifier: 84:12:F0:21:42:35:42:09:5C:79:EB:B2:C7:46:95:36:A1:E0:8A:7B
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 019D992BA36E4AEFFED61605EBB70C705B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 134D
Signing time: Fri 17 Apr 2026 02:01:07 +0000
Manifest this update: Fri 17 Apr 2026 02:01:07 +0000
Manifest next update: Sat 18 Apr 2026 02:01:07 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: DhCB5/lyHQgHyxYR+AKc2FASBjYRghbtvH9C2i2H54U=)
2: _Uw3PwW3zuhX_9qdNVHM9xLSh_Y.roa (hash: pJtmufqjt3E+bTnB46Z/8QQdZ6WxLHIqysmmyqJfzzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a3:6e:4a:ef:fe:d6:16:05:eb:b7:0c:70:5b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Apr 17 02:01:07 2026 GMT
Not After : Apr 18 02:01:07 2026 GMT
Subject: CN=8412f021423542095c79ebb2c7469536a1e08a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:b9:dc:7a:7f:9c:f4:42:da:81:c1:39:10:
d5:0a:4a:8a:50:6d:b7:81:95:09:f8:3a:7b:35:28:
4b:ae:c5:e3:e6:c1:22:65:80:ce:60:ca:17:fc:ce:
a5:23:e4:80:ef:7d:7d:85:66:6e:04:2e:b8:52:06:
5c:e5:60:31:23:03:b1:01:20:2a:ad:57:7e:4f:3d:
38:90:81:d1:a9:60:cf:47:d8:7c:a8:2f:60:1b:4c:
2c:f2:f6:37:dc:99:3a:5e:bc:c7:a1:f5:2a:28:fa:
ad:c2:c9:a5:39:74:87:53:2f:45:01:4d:31:76:3a:
92:fc:d4:76:ef:88:69:d3:f4:65:14:4f:d2:2c:1c:
6a:67:6b:a0:83:9f:17:37:f6:07:cd:63:e2:92:d2:
1d:63:d6:42:34:30:cb:18:05:72:d0:c4:f8:b9:31:
77:21:12:34:0d:b9:fc:a5:a9:b4:55:28:69:a4:61:
43:89:4d:28:f1:c0:5b:9e:9c:76:51:30:8b:83:5b:
6f:c7:e1:93:ef:c3:32:10:67:be:8e:41:83:65:9b:
ce:54:29:2e:4c:5a:b0:9e:94:cb:78:46:ef:94:90:
a9:66:a8:f9:43:e3:dd:de:9e:2c:3d:5e:72:b9:52:
a8:37:ac:d7:0b:fc:ca:7e:66:15:75:a3:8f:b2:66:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:12:F0:21:42:35:42:09:5C:79:EB:B2:C7:46:95:36:A1:E0:8A:7B
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c9:84:44:3d:7b:e0:95:f3:85:94:62:0c:c7:e1:b6:8d:40:
e6:fc:48:11:d1:fe:26:35:1b:91:1c:0a:8c:f3:4d:1d:e3:dd:
e3:a2:b7:dc:32:8d:50:1e:b6:20:b2:27:14:9b:ea:4a:7e:de:
a9:cc:23:23:d4:55:b4:c8:6e:d6:66:88:b4:e2:51:00:13:20:
56:20:b8:41:8a:c1:2c:6c:55:c4:d3:56:8a:39:28:8f:8d:94:
61:97:6f:25:a0:c2:57:72:22:db:f4:31:a6:f4:d4:c2:b6:bd:
d3:91:00:84:a3:db:f4:45:18:6b:93:25:f2:b8:fb:d8:8d:47:
24:a9:ef:24:76:cb:3f:aa:de:79:c8:b6:89:cd:ef:fd:09:fc:
df:4c:f5:3a:23:fc:17:17:88:de:c7:84:ba:a7:32:86:15:ab:
f1:a8:5a:c3:ee:99:a6:5a:9f:90:e9:84:db:65:c1:6b:b2:32:
e5:1d:94:a8:17:16:82:e3:40:d9:1e:b4:d3:cf:f0:ff:65:c8:
75:f1:58:14:88:69:59:37:c5:84:59:a2:68:20:18:7e:dc:db:
3d:5b:43:05:23:38:02:11:34:1a:81:1c:35:bc:f6:71:93:3f:
89:bf:a9:b1:35:f3:b1:23:9f:eb:24:5b:ec:9e:c6:c3:fc:82:
dc:6b:d2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:58 2026 by rpki-client