Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File: 7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier: aMIrLYDtzCpTw7Jd1FE8MZi+Sj/R0xlIJKV37aNgZ5A=
Subject key identifier: 35:DA:24:8F:34:E7:75:36:DE:A8:A3:EC:A6:A4:49:28:12:1D:6C:3A
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer: /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial: 019CAA214848674AA81E28A71C2023B90B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number: 0824
Signing time: Sun 01 Mar 2026 16:00:33 +0000
Manifest this update: Sun 01 Mar 2026 16:00:33 +0000
Manifest next update: Mon 02 Mar 2026 16:00:33 +0000
Files and hashes: 1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: ju0ANmsAofwQuQjzL406CoNhRa5WE+BoMe893FpiWIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:48:48:67:4a:a8:1e:28:a7:1c:20:23:b9:0b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Validity
Not Before: Mar 1 16:00:33 2026 GMT
Not After : Mar 2 16:00:33 2026 GMT
Subject: CN=35da248f34e77536dea8a3eca6a44928121d6c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:46:a6:fc:cc:07:c8:2e:84:6a:9f:37:ba:
a9:58:2c:2a:c7:06:cb:02:1a:4f:97:60:2e:e1:2b:
92:f8:4a:ac:98:e5:04:bf:2f:5a:02:ba:25:16:50:
b5:cd:f4:a4:fe:5d:e2:9a:1d:21:85:ce:98:c3:c1:
6d:40:58:be:8f:a5:d1:35:50:ea:fc:49:58:ea:29:
52:0e:a3:4b:05:0b:08:3c:9b:15:14:c3:60:9e:e8:
63:49:99:a3:9c:c8:02:73:b7:63:2b:8c:fb:e5:75:
f3:fc:67:d3:53:0f:ff:7e:c8:61:7f:b7:83:87:d8:
94:5f:7d:4d:5f:82:81:24:c7:43:c4:ec:35:b4:ef:
30:9e:25:3b:db:5e:67:09:61:c0:e2:30:f4:e0:88:
4c:c9:31:54:1b:d7:87:64:73:02:af:d1:3f:a5:43:
60:db:37:59:7c:42:9f:41:c7:10:06:c6:aa:7e:64:
6b:cc:3e:d7:88:19:d9:ec:98:11:6c:61:da:58:54:
e2:70:56:52:55:f8:50:28:83:72:21:47:8b:9b:d0:
03:7d:0c:9a:76:f2:2b:21:7c:48:93:4c:c4:0f:e3:
52:a8:64:41:37:fc:96:1d:7d:f1:8b:42:b7:2f:33:
0d:b1:dd:11:63:40:cc:dc:02:98:19:10:42:e4:d5:
f0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DA:24:8F:34:E7:75:36:DE:A8:A3:EC:A6:A4:49:28:12:1D:6C:3A
X509v3 Authority Key Identifier:
keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:24:22:95:de:09:5d:7a:60:af:d0:87:99:4f:1f:5a:c7:28:
c2:15:d5:6a:7d:16:dc:4e:68:c7:80:53:19:af:02:82:00:96:
11:ee:de:3f:13:10:68:71:e5:34:a2:fd:8a:9b:72:48:1a:4c:
44:ef:42:19:ce:63:6c:70:7b:d4:1a:5f:ed:f1:74:4c:ea:73:
4f:52:90:f8:e2:20:5d:c3:3b:f2:49:b0:44:42:8f:59:bb:09:
bb:96:8a:ac:0d:b9:24:13:71:33:47:38:54:13:df:d4:f7:af:
04:c6:35:20:37:60:b2:d9:e8:1a:10:c3:8c:52:c6:a5:1f:0b:
4f:4c:22:63:60:5a:68:4b:8b:3b:93:ff:f9:56:2e:e5:31:ce:
de:d3:6d:dc:95:ea:b7:5e:0e:9e:df:b5:0e:1c:f3:d6:cb:a0:
17:48:ce:67:db:ae:c1:8d:92:a6:ab:c3:cb:20:d6:39:c8:d6:
86:ae:1e:8f:2c:0a:8b:e1:0d:12:f2:e3:d6:1e:08:d7:33:81:
1c:f3:41:f2:84:a9:8e:85:7b:01:a8:9a:16:5b:5e:2c:3e:e7:
93:94:36:59:71:33:34:0f:ad:bb:ae:96:fc:04:3b:e3:86:b8:
5d:81:a0:3e:2e:2b:b8:47:98:fc:68:42:b6:50:6a:27:f0:fb:
98:76:c9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:02 2026 by rpki-client