Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
File: 7t4TuXp8d4rYAT-v-isbtkh2LPw.mft (raw, json)
Hash identifier: mqc3/UQwcKuU0FaENfl4al6aM6BK1lMguyrroJSWxXY=
Subject key identifier: 88:8F:F8:E2:1A:E7:97:4A:EF:DB:5D:BD:6D:CC:2C:CF:54:8A:31:90
Authority key identifier: EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
Certificate issuer: /CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Certificate serial: 019CA86A431C74C2D25934F3B76E8A549F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
Manifest number: 94
Signing time: Sun 01 Mar 2026 08:01:02 +0000
Manifest this update: Sun 01 Mar 2026 08:01:02 +0000
Manifest next update: Mon 02 Mar 2026 08:01:02 +0000
Files and hashes: 1: 7t4TuXp8d4rYAT-v-isbtkh2LPw.crl (hash: HqB9fI6+9IDuRROWK8Oc0aVu/aryBSe8S+c8brSjUsE=)
2: rJsk5UMhrb6yg-v-N5l8AaeXSUI.asa (hash: r6SGrYKI+ASOCBn2fHuASlLRkC7+wUAXBFPIKFArmfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:43:1c:74:c2:d2:59:34:f3:b7:6e:8a:54:9f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Validity
Not Before: Mar 1 08:01:02 2026 GMT
Not After : Mar 2 08:01:02 2026 GMT
Subject: CN=888ff8e21ae7974aefdb5dbd6dcc2ccf548a3190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:2a:e9:69:38:a4:57:91:04:1c:fb:22:65:
e3:f5:ab:84:bf:58:4e:29:df:e8:21:7b:ed:09:10:
9c:9a:3a:38:4c:e3:0f:cd:a0:6d:63:0e:8b:39:95:
6b:04:65:69:eb:50:c8:ee:1e:5f:02:f6:05:87:f0:
55:3c:2a:08:ce:20:e5:06:93:79:5b:8e:48:ed:e2:
0e:6c:94:cb:0f:77:df:c3:24:d1:32:5e:a4:14:ea:
46:6b:ac:21:93:7f:ba:8a:5d:3d:15:11:e0:42:d3:
6f:97:bd:f6:4e:a5:fa:1b:cd:35:a9:33:e3:b4:d8:
68:87:d4:68:48:ed:04:c6:a6:34:9d:59:a6:13:bd:
2c:9a:16:60:ab:b9:f0:00:0c:bd:2e:48:99:17:8e:
eb:31:f4:ac:46:64:f4:56:a8:24:7a:3d:b3:52:2d:
10:0e:b4:02:d1:18:08:c1:2b:ef:03:c4:e6:b9:a4:
88:25:41:9e:85:0e:16:4e:ed:43:27:c2:c9:ff:63:
56:45:3f:4b:7f:ef:ec:66:26:44:e1:61:36:3a:6f:
ca:28:8c:8e:8a:d7:73:dc:84:cf:53:b3:9a:a7:d9:
63:ea:ff:b0:04:0b:67:12:87:16:96:09:dd:df:e6:
95:2a:85:97:5f:e7:ae:98:8f:d9:eb:30:49:96:92:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8F:F8:E2:1A:E7:97:4A:EF:DB:5D:BD:6D:CC:2C:CF:54:8A:31:90
X509v3 Authority Key Identifier:
keyid:EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:26:e7:77:0b:cf:2e:ba:85:f9:00:4e:7b:46:19:51:43:48:
9c:1d:2b:aa:9c:3a:28:5a:ea:56:cd:22:84:5d:3a:79:40:4a:
d0:35:ee:62:e1:40:5c:d3:05:63:6f:39:7f:29:46:a2:82:38:
3e:f5:e3:5e:59:fd:1c:fa:d8:cd:bc:4a:61:43:64:4b:4a:47:
9f:f0:87:17:f3:2a:5f:ec:f9:b8:0e:95:f7:86:c8:1e:97:91:
41:53:5e:12:6c:23:71:b0:09:f5:08:4c:c2:f5:d2:d4:0d:f8:
26:0c:43:52:71:c0:56:f8:f5:bb:85:36:6d:4a:e2:d5:1c:7a:
25:c5:d4:7b:ae:d2:d8:5a:1f:91:ea:32:3e:f1:0f:80:fb:a3:
40:c3:e5:c9:ca:ce:f6:a2:60:6b:88:76:38:f9:5f:3f:f1:a4:
53:0e:b8:d1:0a:e9:b7:4d:b9:88:13:54:31:dc:8a:59:5b:56:
3b:92:5d:bb:85:bc:a5:50:e3:fc:f4:bc:39:07:47:9a:bb:67:
6b:da:91:e8:e0:6c:47:a2:cc:0f:db:18:eb:ff:6f:a8:75:17:
54:e6:07:4a:60:5e:c6:ab:01:01:4c:ed:75:a4:17:f6:44:50:
a2:ad:6b:9f:0b:7d:7b:bc:db:27:23:95:5a:87:91:e8:79:18:
d5:ad:72:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:09:47 2026 by rpki-client