Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
File: R7cYcu1kXJZm1VEavHjwfE06uKw.mft (raw, json)
Hash identifier: 1bJOn0Y/7bxlx5hjGjuO2OKg80KPvuTd8suY45kedJM=
Subject key identifier: 64:54:28:56:0D:B1:3A:10:CD:4A:3D:01:1F:64:B2:73:42:39:6E:29
Authority key identifier: 47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
Certificate issuer: /CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Certificate serial: 019CAAFD05AEF10F317862B6D7BAFAE20CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
Manifest number: 04EA
Signing time: Sun 01 Mar 2026 20:00:34 +0000
Manifest this update: Sun 01 Mar 2026 20:00:34 +0000
Manifest next update: Mon 02 Mar 2026 20:00:34 +0000
Files and hashes: 1: R7cYcu1kXJZm1VEavHjwfE06uKw.crl (hash: BW1nQlTfvWbUBFbaVGGPLmTbIjD2dY1GCqUJOWlM4aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:05:ae:f1:0f:31:78:62:b6:d7:ba:fa:e2:0c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Validity
Not Before: Mar 1 20:00:34 2026 GMT
Not After : Mar 2 20:00:34 2026 GMT
Subject: CN=645428560db13a10cd4a3d011f64b27342396e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:97:c8:2b:b3:12:11:dc:70:07:96:c1:2a:
78:6e:4d:04:a9:f6:20:e5:a2:0c:32:88:1d:e0:49:
b6:26:b8:8a:21:6f:33:e9:38:74:f5:f1:1b:18:e9:
a8:2e:52:ec:ec:11:1f:cf:75:de:3a:6d:b6:ae:e9:
e5:5e:08:d7:6c:e9:da:de:97:65:88:41:22:81:ac:
08:08:d9:00:97:bf:53:3c:1a:5d:ce:8f:63:42:68:
ab:c7:9e:ab:ec:ad:52:40:cf:2c:99:09:16:bb:f9:
7e:7e:76:4d:7b:cf:f4:7f:e6:8e:a4:f8:9b:f6:e6:
da:18:7e:8c:9e:9f:d1:a2:67:d4:0b:f7:0c:c5:15:
58:fa:6b:d6:7c:1c:71:db:cc:84:6e:91:33:d8:73:
b9:87:1e:d3:dd:ed:da:ff:f5:2a:f8:ff:74:78:85:
b0:5d:fe:e4:88:47:36:d9:4f:a2:96:e6:66:78:67:
81:98:d2:1f:76:e9:5e:c2:57:44:3e:90:ee:45:35:
50:21:c5:63:30:34:8a:e8:5e:c6:9c:2e:7b:31:7c:
76:5b:b4:f6:a6:a3:ca:09:a8:60:5b:9e:a1:9e:0a:
df:7d:16:0c:e1:d3:f6:42:1c:f5:73:e5:7b:84:9e:
cc:f0:6d:81:90:41:cf:ac:a5:76:45:4d:22:56:cb:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:54:28:56:0D:B1:3A:10:CD:4A:3D:01:1F:64:B2:73:42:39:6E:29
X509v3 Authority Key Identifier:
keyid:47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7d:6e:bb:fb:da:8c:b2:a7:a6:f7:00:af:20:c4:e3:6a:1f:
73:c4:b3:c7:f4:3e:b4:58:c2:22:d0:a7:6b:53:2f:7b:20:4b:
22:58:be:5f:59:05:b7:ac:a3:af:4f:ae:d7:a6:5e:16:ab:5f:
de:8e:c3:ac:61:f3:a4:b8:01:df:4b:7e:cd:ef:86:4f:b3:2b:
f9:09:48:db:9d:43:69:58:4d:e4:d6:2b:21:f2:4f:16:3e:02:
d9:f2:03:1b:12:40:59:2c:da:96:01:0f:16:be:4e:e5:3d:8b:
49:2a:40:4a:fb:b2:fc:5c:0d:08:73:65:49:7b:a5:35:d8:11:
8f:6e:c9:63:18:8a:38:fe:f4:b4:9e:62:d5:35:a2:d1:85:3a:
7c:ff:97:21:95:4a:15:bb:40:ad:25:7d:57:24:e9:da:e2:3c:
9d:c4:ee:5f:13:68:00:f3:86:e4:2b:70:84:4a:a5:d4:6e:5a:
02:d7:4c:0d:b2:f7:fa:f1:e2:64:c6:90:a1:62:eb:64:be:e2:
d5:5d:fb:59:8b:d4:d1:5a:fe:10:bf:35:a0:eb:53:5f:99:28:
17:35:66:67:99:b7:4c:c4:a5:43:0a:02:b6:7e:dd:5b:f1:c1:
bf:a7:55:78:cf:8f:60:ea:3e:76:17:af:2b:d6:2f:de:c8:a5:
d3:53:1f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:15 2026 by rpki-client