Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
File: i7i2EnIdTUwtB8v-LklemGoPAm0.mft (raw, json)
Hash identifier: +eGCJrkBoWdwcuaf1zBb5IqCWZgiWRH9JTD5queQ8Yw=
Subject key identifier: C0:9E:5F:96:9C:8A:21:C6:29:D1:F7:05:4D:2F:21:37:5B:FD:C1:9D
Authority key identifier: 8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
Certificate issuer: /CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Certificate serial: 019CAA586101869D602D47E7838F7DCB3FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
Manifest number: 0827
Signing time: Sun 01 Mar 2026 17:00:44 +0000
Manifest this update: Sun 01 Mar 2026 17:00:44 +0000
Manifest next update: Mon 02 Mar 2026 17:00:44 +0000
Files and hashes: 1: BN6g_D94xKyP47gk6IfNIcBTfDQ.roa (hash: 3HzJpZ8HtfAFz7+UBD2zP1SoqdzFz5KbeKPs56DQawc=)
2: i7i2EnIdTUwtB8v-LklemGoPAm0.crl (hash: BLBCKLcz8ZVoyOKz7N6+3TlTpUcx/nk1s8cOtzSDZmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:61:01:86:9d:60:2d:47:e7:83:8f:7d:cb:3f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Validity
Not Before: Mar 1 17:00:44 2026 GMT
Not After : Mar 2 17:00:44 2026 GMT
Subject: CN=c09e5f969c8a21c629d1f7054d2f21375bfdc19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:f6:93:9e:1e:5a:07:80:51:ff:98:27:c0:
fd:6c:fd:d7:95:91:c0:0f:6b:f0:6b:19:e6:68:5e:
e4:97:71:78:3c:2c:41:4e:c2:2e:b6:e1:89:71:32:
6c:df:53:a2:20:b1:ff:08:92:79:ce:66:db:08:91:
31:ef:7f:06:7e:7b:b0:9d:f4:36:cd:6e:04:b4:bf:
1f:d2:9f:eb:56:be:17:4d:c3:19:79:e7:c9:27:2d:
de:49:0c:e6:75:98:4a:c6:c7:82:72:9a:12:32:9d:
1a:d8:16:93:bc:71:aa:c5:46:20:80:b1:27:80:72:
f0:0e:24:b0:f5:01:ff:da:5f:5e:70:2a:48:28:e8:
2b:46:a6:be:1e:1a:3c:7f:98:87:fe:4f:2e:d3:52:
43:1c:a1:d1:8a:c0:ac:1d:88:6c:22:5d:a4:30:48:
f1:41:cd:93:8b:07:34:c2:7e:57:cd:79:33:1a:7f:
6f:5a:eb:f0:88:a0:a3:36:ed:4a:6c:60:18:d5:75:
c7:ba:6e:7c:d0:0d:0f:2b:76:59:d6:66:2d:d8:93:
ac:98:17:48:3e:cb:51:5f:67:31:7a:bd:5e:f6:b3:
d7:fa:0b:1a:2e:96:8a:0e:69:65:33:23:96:ab:16:
50:7e:01:e4:fb:fb:a3:71:e1:87:cf:62:77:3f:24:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9E:5F:96:9C:8A:21:C6:29:D1:F7:05:4D:2F:21:37:5B:FD:C1:9D
X509v3 Authority Key Identifier:
keyid:8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0d:36:43:be:dc:e9:fa:e0:c2:0f:d7:97:30:9e:c3:6b:09:
1d:1f:74:58:a0:a1:7f:30:9d:ff:42:82:b6:24:f1:2f:b2:34:
8c:85:7b:16:e8:27:d4:d5:9f:52:51:d1:07:61:42:23:0d:d1:
ee:21:0d:bf:90:66:0c:14:2c:9b:5f:1f:9b:b9:94:da:1e:39:
7d:8c:14:d9:5b:3e:f3:1c:5c:7d:2d:c6:30:eb:0e:cf:8f:e8:
66:46:07:27:46:ac:6d:95:7a:98:8b:df:36:1b:e7:e1:67:ea:
59:e7:3a:c8:01:ef:4a:49:82:60:7a:de:71:1d:c9:d8:4a:38:
24:23:26:b5:3e:97:cc:ab:7c:2e:45:96:83:e4:9e:76:ec:d0:
0c:1c:54:aa:2b:f3:aa:87:77:c8:e1:6f:76:fc:bc:12:56:54:
2b:3f:0f:ef:54:ca:49:e3:d6:a1:ac:25:e2:61:4d:29:77:af:
9e:37:47:79:3f:ff:3a:eb:d7:f8:85:f2:16:51:a4:f9:07:5a:
a7:b1:5f:2d:0d:95:fd:8f:59:0c:26:77:02:91:a7:0d:b9:75:
16:d7:65:d6:9d:3b:ef:ce:cc:08:76:27:eb:d7:7e:40:12:2d:
e7:cb:9b:8a:a2:b6:54:2a:f9:02:f5:7c:6e:24:4e:5f:81:d8:
42:23:ae:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:02 2026 by rpki-client