Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
File: fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json)
Hash identifier: xoGO+KvgcbL9Wnc4VAa32424jadHxm7VNAZaObIXzW8=
Subject key identifier: F8:72:EF:67:63:4D:38:89:21:B8:C5:79:E5:27:97:7B:92:63:14:FF
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Certificate issuer: /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial: 019CAA21AE8C00E41D17C6DA8E3C315E4001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
Manifest number: 133B
Signing time: Sun 01 Mar 2026 16:00:59 +0000
Manifest this update: Sun 01 Mar 2026 16:00:59 +0000
Manifest next update: Mon 02 Mar 2026 16:00:59 +0000
Files and hashes: 1: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: Zkw4IczsZV8SxNY92ygZOQyt9fFpyD2xi+Aar6IuoxQ=)
2: yUKFZeoKxy_IydCROx3RAxlkij4.roa (hash: tQWywAFGnlvDGY+xP5LWd6/G2Ef4/YYyX7hiYF4DqWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ae:8c:00:e4:1d:17:c6:da:8e:3c:31:5e:40:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Validity
Not Before: Mar 1 16:00:59 2026 GMT
Not After : Mar 2 16:00:59 2026 GMT
Subject: CN=f872ef67634d388921b8c579e527977b926314ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:1f:f3:17:c5:c3:54:95:13:2a:72:85:1a:
f9:c9:03:ff:e6:f9:2a:a8:5f:ef:e8:10:67:4f:ce:
82:4d:b1:d8:57:7a:4a:27:da:70:f8:46:6c:ce:a6:
f7:a1:d1:ae:ef:6d:f7:80:98:30:ff:8b:3d:27:63:
ed:dd:9a:22:de:8f:73:3f:1a:1b:3b:33:3d:4e:5a:
86:2e:db:c4:49:59:9f:30:2a:b3:f0:68:d8:f4:66:
5e:c9:09:43:79:ed:1a:e3:ea:67:0e:71:97:0c:2f:
0b:9b:0d:ea:57:91:c5:6f:b0:13:8b:48:4f:1b:0f:
d1:51:10:4b:f5:2d:d2:99:62:38:f6:0b:05:26:bd:
69:e3:66:c7:ca:4f:bd:d9:41:ed:67:6a:7b:f8:b8:
f6:20:c1:28:54:7f:cb:49:aa:36:f3:53:6b:66:a6:
8d:85:20:ef:24:04:33:35:ca:79:c2:6f:ce:d2:2c:
a0:9d:8c:a0:9f:88:4c:8e:0c:75:37:f2:0e:22:0c:
a8:a6:0c:65:d8:8e:55:09:20:43:8f:20:43:fe:99:
6f:62:8f:87:5f:f5:82:69:85:e4:9f:96:06:27:15:
a0:b7:43:07:02:67:17:66:ea:72:62:d6:16:78:13:
df:98:96:00:45:6b:a9:56:50:fd:2d:f3:d4:65:d6:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:72:EF:67:63:4D:38:89:21:B8:C5:79:E5:27:97:7B:92:63:14:FF
X509v3 Authority Key Identifier:
keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3a:a3:7c:26:92:7a:96:80:17:be:83:a0:d6:f2:75:3d:2c:
63:0e:41:a0:1e:2a:ba:85:9e:14:f1:8a:cf:ce:ea:91:87:45:
68:c7:08:89:00:84:3f:87:19:b7:2c:2b:50:5b:27:d5:2f:53:
8b:d0:f2:68:1e:b6:46:22:9b:88:33:d8:af:e2:d4:86:79:bd:
32:3a:5c:f6:00:ed:4c:75:63:e2:ca:0f:14:57:85:f0:b0:65:
56:12:d4:da:b2:aa:2f:0b:85:14:9a:fb:61:2c:9d:31:41:5a:
db:c0:da:39:d4:85:a9:b8:e4:7a:1e:20:84:5b:de:a3:43:a3:
5a:e1:86:46:8c:cf:c5:2e:71:f1:71:b5:3b:0e:c4:b4:39:60:
a0:bb:76:4e:48:2c:21:11:da:30:21:8d:7f:cd:e8:af:85:48:
e3:20:c1:44:0a:64:ec:08:41:9a:03:f3:16:b3:8c:22:cc:13:
f6:09:9f:2e:46:85:8a:df:d4:3c:c6:cf:e7:a1:fc:c7:36:0d:
36:b1:06:c1:4a:ef:95:9e:47:9f:77:36:10:b4:7a:59:71:2e:
e0:31:fc:87:d7:78:28:3b:7b:8f:69:94:4f:bc:2e:1a:07:65:
00:35:86:85:c6:10:31:77:13:60:ee:22:0d:ab:79:fa:38:50:
72:46:17:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:24 2026 by rpki-client