Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier: /6vBLe4ReC3ecaPjb4jgRiJhF8W+oRcNNapN8qq3nlo=
Subject key identifier: B9:B1:57:AF:87:88:8C:BE:78:0F:48:E1:E1:12:95:27:FD:7A:9F:0B
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial: 019D99996C00EDB7EFBDBE1D13F1C9B7F901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number: 0645
Signing time: Fri 17 Apr 2026 04:01:01 +0000
Manifest this update: Fri 17 Apr 2026 04:01:01 +0000
Manifest next update: Sat 18 Apr 2026 04:01:01 +0000
Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: h5naRu147Lt5V4Vmxm7R2HLHiDM2+9S96qjCrUG6QIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:6c:00:ed:b7:ef:bd:be:1d:13:f1:c9:b7:f9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Validity
Not Before: Apr 17 04:01:01 2026 GMT
Not After : Apr 18 04:01:01 2026 GMT
Subject: CN=b9b157af87888cbe780f48e1e1129527fd7a9f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:df:51:91:6d:50:42:5f:25:06:74:c3:a5:c9:
5b:7b:52:57:0f:3e:21:11:b0:50:e8:96:63:7a:3b:
33:b8:62:ef:5f:2c:e3:36:f9:ad:fb:86:1e:60:4b:
6a:bc:0a:0e:e8:33:1d:5f:f2:d3:03:11:38:c9:f9:
16:1b:43:31:15:12:98:cf:95:27:0f:ae:af:ff:de:
42:9d:d5:ed:f1:3c:c8:d9:a2:40:2f:bd:7f:a6:d4:
30:29:6c:74:15:79:b9:24:7a:88:b6:da:fb:84:a9:
c6:1f:49:27:29:14:8f:e0:5d:e0:52:33:cd:53:45:
89:ec:e0:fe:99:ae:d1:43:90:35:6f:90:5c:5c:f8:
10:48:52:51:25:05:2c:b0:31:fa:49:10:29:dd:f4:
68:60:a9:7f:03:35:fe:f4:c7:2c:b5:e5:0b:12:f0:
53:a1:d6:97:49:57:7d:9b:fe:1d:05:41:5a:2f:5a:
9c:33:b1:f6:23:55:c0:e0:3b:bf:ee:7e:3c:69:6b:
fd:40:d9:f4:67:70:0a:11:e5:8b:35:4b:d3:04:22:
7b:dd:bb:35:21:81:3e:c7:f0:81:bc:39:9e:3e:f2:
c5:26:19:92:97:e6:15:3c:f8:85:cb:35:b7:e1:de:
18:f9:0c:07:62:63:d6:4b:cd:3b:06:ac:c1:42:19:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B1:57:AF:87:88:8C:BE:78:0F:48:E1:E1:12:95:27:FD:7A:9F:0B
X509v3 Authority Key Identifier:
keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6a:fe:61:d5:52:31:02:b1:74:2d:78:94:45:c4:4b:66:b9:
3f:5d:12:ed:50:e5:38:c1:e9:93:1e:5d:63:f5:c5:a0:5d:8d:
80:2d:0d:61:f1:45:5b:a4:61:dc:ae:cf:30:15:13:07:84:8f:
86:cd:fd:92:48:64:4e:e1:e5:ff:6d:c7:ec:01:8d:3c:ca:5d:
82:17:2e:53:b2:04:6a:29:60:b6:c6:bf:25:e6:06:b4:fe:1b:
2b:45:af:4e:fb:06:aa:95:85:4b:63:d8:8d:81:38:d5:07:69:
98:18:be:62:a6:7f:e8:9c:c2:eb:2d:c2:6c:22:13:45:45:ab:
11:55:51:80:c7:36:89:80:35:0b:dd:3c:c8:9f:98:3f:37:e9:
1b:c4:fa:a8:2c:27:2b:6d:b8:18:28:8a:47:40:67:9d:e6:dc:
b1:6d:ca:81:e9:d4:aa:c2:81:c3:6b:36:e1:ff:0a:da:87:ac:
1f:70:b9:67:e9:7a:9c:57:de:bb:f6:45:5a:6d:15:d7:a4:d3:
ff:76:20:28:2d:e9:d5:f5:d1:6c:ee:a3:b9:77:7a:be:d4:10:
43:af:a6:23:52:08:0e:0f:bf:1b:6f:d3:52:26:36:ff:4e:b0:
fe:25:22:7c:eb:e2:46:3b:3b:4e:54:bd:1a:13:89:e4:b7:c6:
84:46:21:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:45 2026 by rpki-client