Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
File: i7i2EnIdTUwtB8v-LklemGoPAm0.mft (raw, json)
Hash identifier: GZty9/gOpeMVy0FR2aRxaQ+eR7j3avYOwHKAqYlLSmE=
Subject key identifier: BF:36:3D:66:61:B4:F8:AF:86:F5:14:07:65:C7:CD:1A:CE:F6:57:14
Authority key identifier: 8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
Certificate issuer: /CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Certificate serial: 019D97E1C73029CE2DFADFEC0620F36DF8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
Manifest number: 08A2
Signing time: Thu 16 Apr 2026 20:00:49 +0000
Manifest this update: Thu 16 Apr 2026 20:00:49 +0000
Manifest next update: Fri 17 Apr 2026 20:00:49 +0000
Files and hashes: 1: BN6g_D94xKyP47gk6IfNIcBTfDQ.roa (hash: 3HzJpZ8HtfAFz7+UBD2zP1SoqdzFz5KbeKPs56DQawc=)
2: i7i2EnIdTUwtB8v-LklemGoPAm0.crl (hash: Q2yR64c+jSqptZau0VBsyvj4Oa/CuDqls8qVEmHMfsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:c7:30:29:ce:2d:fa:df:ec:06:20:f3:6d:f8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Validity
Not Before: Apr 16 20:00:49 2026 GMT
Not After : Apr 17 20:00:49 2026 GMT
Subject: CN=bf363d6661b4f8af86f5140765c7cd1acef65714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6e:28:87:85:0a:08:93:cc:13:7c:38:6d:87:
7d:6d:e3:26:9a:81:24:22:94:e3:98:14:d6:79:f0:
61:68:6d:75:41:c4:7e:22:3d:9f:8d:f4:1a:7b:21:
46:9b:a2:e3:2d:0f:57:e6:a6:7a:55:0c:fe:f0:3c:
22:ae:dd:08:d6:71:3b:79:ca:f0:9e:7b:25:98:1a:
95:92:3a:03:d7:41:bc:f2:a5:09:ba:6f:76:7e:cf:
42:04:41:50:76:ff:43:97:72:95:d1:ff:5d:8f:0e:
76:c5:b5:43:f5:75:87:48:2a:8c:99:42:fa:c0:5f:
b3:7c:97:d5:7b:2d:28:89:f4:da:28:41:e1:d3:07:
2b:b9:1a:2b:0c:4e:6f:70:d3:b4:83:12:5d:ab:3d:
48:d3:95:87:6a:58:43:5a:f9:87:3d:1b:6a:83:80:
ab:dc:29:e8:0e:e4:dd:ca:44:e0:76:7d:a2:95:2b:
2f:83:73:a2:41:92:99:7a:6d:50:24:eb:d0:b9:63:
d3:c6:a2:ea:07:98:ca:a8:37:54:25:c6:e8:0e:1f:
9a:d7:dd:f2:21:b2:de:46:c4:03:66:ba:ec:da:e1:
a8:be:ce:1d:67:c9:08:77:68:a0:06:5e:cb:5b:84:
59:26:d1:91:0b:bd:1a:fd:ce:49:af:95:67:35:11:
15:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:36:3D:66:61:B4:F8:AF:86:F5:14:07:65:C7:CD:1A:CE:F6:57:14
X509v3 Authority Key Identifier:
keyid:8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6e:fd:7e:4f:0c:2b:9f:42:59:d5:d3:d4:4c:2c:38:c7:13:
22:4a:d2:40:65:04:3a:24:cf:18:05:f1:fc:04:73:ed:c7:a3:
b1:4b:eb:65:8e:11:af:09:9e:ba:94:4d:c3:31:12:44:d4:80:
b9:e4:98:a1:82:bb:5d:59:1c:95:45:cb:c1:ec:cc:47:99:de:
ab:fb:e2:f7:3c:f7:3b:d5:dd:fe:3d:e4:a9:3f:e3:54:e9:46:
57:b3:62:bf:42:d9:2d:7a:f6:ac:85:32:f6:d1:91:31:a4:7c:
18:aa:4b:11:07:58:79:ae:c9:30:c5:d2:d0:90:5b:00:80:a9:
44:a2:18:3f:50:7c:3b:35:92:4f:f1:2d:d0:31:48:14:66:e1:
8b:7c:09:4d:52:28:2f:c9:e3:42:29:da:95:b1:ac:86:16:c0:
23:75:96:76:20:5a:bb:7d:39:4b:35:54:80:b0:ae:25:26:28:
c8:ad:b2:f7:a8:98:0c:c8:d0:79:85:74:be:4d:bc:ed:87:41:
dd:95:ef:4f:fa:a2:55:19:2e:19:18:e6:13:8c:19:82:2a:60:
88:50:44:7d:29:12:6e:3a:ab:ee:fd:91:66:42:90:9b:a8:43:
47:58:da:2f:cf:f2:42:c0:b2:d5:47:89:b0:ad:d2:50:2e:8e:
c8:b7:59:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:01 2026 by rpki-client