Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
File: 7t4TuXp8d4rYAT-v-isbtkh2LPw.mft (raw, json)
Hash identifier: +QC74mU5DE8DDu8WE3U91L1j/OQUC0kE13OSRkTYvWA=
Subject key identifier: B8:C7:6F:9E:14:FC:7B:52:22:5D:66:B7:97:25:6D:0E:F8:A8:54:9B
Authority key identifier: EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
Certificate issuer: /CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Certificate serial: 019FA82BCA16C1BF51D13ADD0F84CF7606BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
Manifest number: 0228
Signing time: Tue 28 Jul 2026 10:01:09 +0000
Manifest this update: Tue 28 Jul 2026 10:01:09 +0000
Manifest next update: Wed 29 Jul 2026 10:01:09 +0000
Files and hashes: 1: 7t4TuXp8d4rYAT-v-isbtkh2LPw.crl (hash: pSddg+3wTSx+1io4qARg/OTA1iHd/3GW/ZPkYfE2La0=)
2: WHAMvVOClu2e4_1oVJNIUdJFRfI.asa (hash: /GKBi3C1f7lecWi+UvNJYtTMLV5cIJZHh3Pf0e4Lw/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:ca:16:c1:bf:51:d1:3a:dd:0f:84:cf:76:06:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Validity
Not Before: Jul 28 10:01:09 2026 GMT
Not After : Jul 29 10:01:09 2026 GMT
Subject: CN=b8c76f9e14fc7b52225d66b797256d0ef8a8549b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6f:4c:42:ab:67:51:4a:03:85:dd:3e:12:14:
54:a7:25:a7:bb:48:70:a5:dd:84:eb:2f:15:a6:fa:
4f:9d:72:ef:83:f2:2b:db:05:cf:72:88:ca:43:78:
ee:98:cd:db:20:6e:92:a9:a0:c7:9f:10:8c:e2:93:
2f:6f:bd:b0:ab:26:2c:f0:fe:dd:9c:cd:70:2e:26:
6b:b4:57:f9:c9:37:17:79:97:d0:68:e9:a6:53:43:
9c:bb:da:6d:66:57:e7:d3:b1:f4:20:1d:69:31:22:
bf:ad:20:70:23:c4:05:81:87:9f:dd:b1:8d:87:85:
8b:98:33:68:58:54:ac:a7:38:b6:a8:ec:f0:85:fe:
af:0f:b5:07:d4:80:ef:65:71:e2:b9:dc:95:cd:62:
bc:ea:dd:f7:ca:f3:77:bf:57:d0:24:e5:9e:40:3e:
f8:27:5b:fe:b5:61:c3:a9:77:17:03:98:9c:c7:88:
d9:1c:4f:7a:78:7f:fb:b7:fd:bc:64:2d:d0:78:f5:
ac:7a:cd:0d:3f:77:f0:5f:20:c3:f6:de:83:5b:93:
f0:6b:49:3e:fd:0f:3a:f2:01:2e:ce:9d:0b:d8:1a:
d9:7e:61:83:87:8b:e3:09:9b:b6:d2:62:67:28:2f:
cf:0b:b3:20:b4:3d:e8:56:d1:7d:68:75:8a:3a:24:
d0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C7:6F:9E:14:FC:7B:52:22:5D:66:B7:97:25:6D:0E:F8:A8:54:9B
X509v3 Authority Key Identifier:
keyid:EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:78:11:f3:9e:8a:9f:dc:9b:e5:94:48:9a:c2:3f:13:ee:91:
0b:00:cb:fd:51:07:5c:ec:36:6d:bc:a4:82:26:2c:f1:cb:70:
eb:ad:c5:29:58:d4:cb:f6:dc:91:3c:77:60:56:ec:03:17:fe:
6a:48:da:c1:f9:3d:b7:a6:3e:d4:c4:de:02:a6:52:6e:bc:8c:
0a:83:e0:dd:49:37:44:a4:3d:18:0c:db:7e:65:e1:56:97:3a:
d0:19:45:5c:b1:e3:e6:ff:70:36:0e:97:ca:75:4d:f5:9f:39:
b0:24:3f:18:03:50:e5:66:72:e3:be:2b:41:05:8b:86:d6:14:
09:7f:b3:40:ad:30:af:1b:64:89:80:3e:2c:47:7e:db:ad:a9:
e5:dc:02:38:07:bb:aa:a2:cd:d8:1f:3e:3a:91:6b:06:47:42:
b6:1a:2a:f0:ab:43:29:4e:7c:86:5d:19:7e:93:34:64:b9:1f:
60:b3:df:b0:df:3e:ef:ac:7c:8c:e1:9f:65:d6:0b:b3:ff:5f:
1b:76:3c:d5:51:c8:7d:54:3a:51:f7:58:e5:cd:ae:0b:27:b5:
89:62:27:73:e7:aa:67:35:bc:57:c4:0c:85:21:a1:c1:b2:6d:
82:4d:36:10:c6:97:2f:cc:ac:2a:f1:a1:fb:da:79:2e:f2:a6:
3f:cc:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:49 2026 by rpki-client