Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier: 5vda2cpXh1+L8lhzEWbMkkYsSRIBXIvRtYyDitNR1H4=
Subject key identifier: 23:2C:08:A2:A8:EC:73:FF:9B:E4:28:39:EB:BC:D5:81:34:33:21:E8
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial: 019CAB347A59AE82FF080EC5ADFE976C8D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number: 0CF9
Signing time: Sun 01 Mar 2026 21:01:08 +0000
Manifest this update: Sun 01 Mar 2026 21:01:08 +0000
Manifest next update: Mon 02 Mar 2026 21:01:08 +0000
Files and hashes: 1: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: Qs82QUR5KGWyhwjRX1bibxKdSDp3leTrGcW/hcNB3q4=)
2: s7ALXCsQ6iydnmcMndLJwyBEVrA.roa (hash: 2KKTFrZRTTsfpxmpCTn5aGO1P1QcLn41Vrt2Tl7hzrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:7a:59:ae:82:ff:08:0e:c5:ad:fe:97:6c:8d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Validity
Not Before: Mar 1 21:01:08 2026 GMT
Not After : Mar 2 21:01:08 2026 GMT
Subject: CN=232c08a2a8ec73ff9be42839ebbcd581343321e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:f8:a5:f2:48:62:c3:64:23:72:e7:51:a3:
94:99:1a:c4:6c:e9:64:3c:79:2e:ab:ab:c0:81:91:
54:ec:fd:77:67:72:9e:19:8c:73:78:a2:2d:ab:40:
7a:a4:ba:85:97:b6:96:25:a0:58:7f:d7:1e:74:fe:
0f:67:94:8f:e7:1e:a6:68:2e:2b:fe:e6:0b:8c:d0:
15:6e:ec:68:e2:94:f2:21:ee:ff:3a:aa:c8:14:a5:
20:54:b1:6c:5e:76:2f:e9:87:64:d7:87:13:20:bc:
cc:bd:7b:dd:19:d2:25:78:27:4f:bb:5e:a5:66:08:
ff:f2:4a:50:8d:84:82:79:4d:66:f2:c8:c0:9c:c2:
15:1c:52:ed:5c:59:49:98:28:36:dd:a1:59:7b:a5:
40:f9:be:16:e9:b1:70:53:5b:5e:ff:54:7f:87:9d:
62:ca:8e:41:a0:73:a2:fe:19:af:ad:ea:1f:b6:5e:
3f:bd:99:2d:8c:dc:b3:5b:0d:f5:13:12:84:25:e1:
e2:8d:b5:63:9e:6a:a5:f6:a3:45:c9:3a:b4:5d:6c:
b3:32:55:bf:5e:14:7c:f4:e0:9f:e3:2d:f9:df:0e:
1c:2a:d1:f5:87:11:d6:54:be:cd:6c:d5:37:85:2f:
61:2d:ad:d7:75:61:c0:77:b3:e4:ac:bc:76:79:b4:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2C:08:A2:A8:EC:73:FF:9B:E4:28:39:EB:BC:D5:81:34:33:21:E8
X509v3 Authority Key Identifier:
keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:67:37:d4:e1:dc:49:b4:31:04:be:b4:e1:9c:d9:96:e4:18:
96:6d:f8:d1:23:94:10:56:07:66:ff:c4:fd:c3:c2:fc:80:8b:
90:06:a7:8f:22:e1:02:ea:a8:35:00:0c:d6:01:59:a3:50:c3:
ba:11:6a:92:ea:72:1b:2f:4f:ed:7a:27:78:e8:8c:29:df:a7:
cc:7d:5b:66:12:17:6c:9f:d9:eb:f8:d6:5e:1c:69:3a:12:8c:
2f:98:5f:38:5e:3d:21:50:4f:c3:5a:11:e9:6e:f0:5f:c1:10:
c8:fe:d1:a7:8d:2c:48:af:0a:9a:dc:18:57:fb:ca:99:41:46:
c5:90:d6:97:74:7b:b9:b9:75:13:06:0a:a3:e3:55:08:0b:24:
14:33:09:00:f9:69:7b:a4:c4:1f:ab:bf:6d:73:fe:ac:11:bb:
65:65:37:95:d7:d0:45:5a:4d:52:47:ab:90:a9:8d:13:67:d3:
cd:53:92:28:f5:f0:44:f6:c3:21:ac:f5:a3:87:79:d8:c3:19:
52:9b:1e:ba:09:3b:0e:5a:53:99:47:b2:bd:a1:06:8d:8e:6f:
04:4d:c8:bd:da:ec:a2:58:96:57:4b:ff:46:14:9f:25:56:04:
eb:4e:2d:6b:51:1c:5d:25:42:88:31:d5:64:e0:f4:92:d1:a2:
08:59:63:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:34 2026 by rpki-client