Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
File: R7lNsbPetIBa0mFVS65rpfp0CMs.mft (raw, json)
Hash identifier: tZ7b8GynsEjjZPK3XtDmkk6dqNghgrwVNQTdKmvrFnA=
Subject key identifier: 7C:30:72:74:E6:C1:BB:D5:BD:48:7D:30:E6:ED:67:1C:13:B5:38:A9
Authority key identifier: 47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
Certificate issuer: /CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Certificate serial: 019CAB6B89E19D104E06071D659012A9B81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
Manifest number: 1841
Signing time: Sun 01 Mar 2026 22:01:17 +0000
Manifest this update: Sun 01 Mar 2026 22:01:17 +0000
Manifest next update: Mon 02 Mar 2026 22:01:17 +0000
Files and hashes: 1: R7lNsbPetIBa0mFVS65rpfp0CMs.crl (hash: Y3rkl6/IZNyNUyZkPAwE+VbslLhy3SbI7pHhuN2MxTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:89:e1:9d:10:4e:06:07:1d:65:90:12:a9:b8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Validity
Not Before: Mar 1 22:01:17 2026 GMT
Not After : Mar 2 22:01:17 2026 GMT
Subject: CN=7c307274e6c1bbd5bd487d30e6ed671c13b538a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:06:ca:c9:da:08:4a:53:97:24:21:48:2f:
12:d6:cb:bc:0d:6b:16:d1:c2:43:c1:98:d6:ed:c4:
1c:e1:44:0c:75:2c:f8:bc:19:90:4b:46:61:1a:03:
35:d7:55:b5:f4:5e:34:b1:82:4a:12:f5:1f:e4:fe:
b5:67:b1:3b:e3:1c:cf:84:80:14:e7:b6:79:21:ae:
8d:48:ed:98:6b:60:7e:7b:d6:f5:f5:4a:c7:33:3c:
f1:0c:8c:a9:9e:e2:df:5e:18:28:0d:7e:d0:6f:64:
cc:55:d4:b1:83:bb:4c:85:20:b1:1c:4a:3e:7b:ce:
a0:30:e0:16:4a:4c:b6:15:30:14:04:03:21:8c:5f:
f8:04:88:7b:c1:e2:72:71:91:13:da:17:92:70:8d:
96:66:fd:41:b0:ce:ac:f9:1e:cb:38:2e:a1:73:e8:
e6:e2:5e:c4:1e:c5:d5:87:d4:6d:dc:42:da:8a:11:
46:bc:78:55:83:4d:a3:13:68:9f:db:0d:eb:1b:5d:
b7:84:3d:41:59:2c:f5:3e:a6:e3:21:8a:95:77:81:
62:86:90:d7:03:3f:93:20:5f:92:fb:4c:76:ff:c8:
00:6e:45:68:b4:37:9c:ad:d9:0b:ff:58:fc:a3:fa:
aa:ef:d6:90:bd:63:8c:07:bf:a7:a9:47:fc:6a:f4:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:30:72:74:E6:C1:BB:D5:BD:48:7D:30:E6:ED:67:1C:13:B5:38:A9
X509v3 Authority Key Identifier:
keyid:47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:be:4d:f1:13:bc:a9:6b:8a:cb:d5:ba:9f:80:7a:19:59:91:
2a:7e:5a:7e:e3:96:4c:1d:2b:31:ef:e5:28:6b:10:99:09:0c:
d7:4a:3d:cc:5e:2e:62:c4:0f:e0:90:76:4b:d5:a5:6b:3d:69:
60:5b:46:36:2b:90:86:37:5e:fe:42:9c:68:ed:66:c8:1b:70:
3a:99:a6:f1:9f:f4:ae:18:18:88:00:98:76:56:76:50:5b:28:
96:18:8a:aa:26:87:7d:ac:5c:c3:cb:26:ae:7d:40:16:d3:b2:
d8:61:76:0f:69:1b:5b:47:e5:c9:28:e5:13:5a:2e:fc:2e:92:
96:ec:38:21:63:35:54:87:b4:3b:68:6b:5e:75:e5:3f:72:f3:
22:75:e0:8f:d8:e7:8c:97:04:4c:69:9f:0a:35:da:ed:6f:90:
22:8e:6f:1a:2a:a9:2c:56:bf:93:95:7e:ba:53:30:10:99:b1:
ae:0a:ff:1d:83:d8:d0:96:00:36:8d:65:24:fd:30:7d:8b:a0:
7b:d8:dc:15:3f:30:f2:c2:56:b7:77:b9:cb:4d:1c:26:f1:ec:
7a:cc:a5:d8:7f:f3:6b:b6:f4:25:0b:19:33:70:c4:af:46:26:
d8:ad:1f:82:c0:04:d3:e0:46:45:3f:39:e9:6e:1d:24:56:06:
3c:62:60:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:30:03 2026 by rpki-client