Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier: 0ijBqH+oKKJ0v8ErYlRyIiIq4kFsPcGjqj087a9A6lk=
Subject key identifier: 9F:56:B2:FB:40:D4:BB:D6:CD:44:83:88:D0:C6:32:58:D2:C3:4D:C1
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 019E28B97878B0FE7063001082A7221C2644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number: 1921
Signing time: Thu 14 May 2026 23:01:44 +0000
Manifest this update: Thu 14 May 2026 23:01:44 +0000
Manifest next update: Fri 15 May 2026 23:01:44 +0000
Files and hashes: 1: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: Eizo+IqGmNsazRWoL4Zg8XWfqtUvyN909L96QfMRiPM=)
2: JsIYFyLR74GQysEIqnGykpSJQUI.roa (hash: iaHnb3OAMXTWsBgbEKrwhuTvCOgUBCodv1kDk+4mavA=)
3: NKy6Tyf5RyRglBk0yV_ExDPmxuo.roa (hash: ebb1VqS7aGDzvUXqYNWhDAqOkeGUT55XR6ggJqYbSMU=)
4: OUVdt4o2LS_i-Gunl0nnzrdW_jI.roa (hash: LG7q3NWzE4G2vBN3PTFInwdMW/gtEeHrNbl3IVaBPnE=)
5: YH5NKMifzBmhf3nIG20jcgRcBU0.roa (hash: V5cTAFBzO7CMX8CCIxzqRfhGsna670gP9hgi/NVqRBc=)
6: mCt7UGq2s1qnA69MYZljhYxWiD4.roa (hash: qi5pYWU2cgvvhT1J3aGpMqhq1J2xvA8Deh0/Hh6j/Rg=)
7: sRMtAiiTomuNQjvyhVAd07KYQM0.roa (hash: 1ZDSFc07GgvbF2RmQMqVaUItzv9tv/zTWoNdPvDIoXs=)
8: sjgUHUj_TSMku2aB-f61amSIyCM.roa (hash: /+JjugGAK765zafXtIVOVPtipqmOZ3WaKKGK25tgoO4=)
9: zhcr9I3s3OVNgzaih7vQHJr6C0Y.roa (hash: nLQ289DooRLgqJOtJaVgt01KECd6y0NdXrqka7CO4Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b9:78:78:b0:fe:70:63:00:10:82:a7:22:1c:26:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: May 14 23:01:44 2026 GMT
Not After : May 15 23:01:44 2026 GMT
Subject: CN=9f56b2fb40d4bbd6cd448388d0c63258d2c34dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:5f:cd:ff:56:16:30:5e:e6:5f:8e:6d:26:
cd:34:82:c2:c7:46:95:4e:69:24:0e:20:57:a6:b6:
77:7a:55:2a:fc:d2:3a:c3:5f:9b:13:9c:f9:9b:3c:
21:38:b3:7e:ee:a0:f6:21:1b:a7:7b:99:cf:f8:16:
d3:f1:9f:0b:19:68:a6:30:cc:24:6e:ce:9a:1b:de:
90:7b:e1:93:63:73:39:aa:db:d3:19:c9:3c:a6:4c:
c7:66:12:72:36:d9:0e:34:79:fd:3d:d6:f1:9f:f0:
9d:13:e3:a4:7e:f6:10:4b:df:ec:2d:22:df:2e:f8:
f5:cb:21:30:4b:d1:d8:0f:8a:54:18:7b:51:37:09:
e4:db:2a:63:f9:79:fb:e2:37:2b:50:d1:51:5d:65:
5b:6d:79:22:c4:97:1e:0e:5d:91:c5:d9:ee:51:cb:
a3:2e:80:69:55:32:53:10:17:96:d7:61:95:4b:0f:
1c:b1:4a:b1:fc:c1:18:74:c8:b7:10:6f:8a:b4:6f:
26:c7:b8:ad:36:65:49:e9:98:e7:1c:d1:9b:39:26:
d6:d5:4f:ec:57:3f:30:c5:56:5c:9f:a1:b5:e6:ac:
bd:01:4e:a1:ef:94:ad:79:fe:8d:d6:13:62:5f:b0:
83:06:b1:ca:46:8d:10:96:cb:5a:3a:f3:96:0f:a1:
b0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:56:B2:FB:40:D4:BB:D6:CD:44:83:88:D0:C6:32:58:D2:C3:4D:C1
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0f:f5:cf:25:20:4c:69:50:6a:89:18:fe:5c:1e:5d:cd:08:
2b:a6:d0:59:ca:96:54:d2:6b:21:d7:b8:eb:16:76:42:32:4d:
f6:61:7b:4c:58:44:20:5d:ff:42:7b:c5:a3:ea:d6:a6:df:31:
56:a7:57:c4:fb:a0:c2:72:95:e7:e4:aa:2c:d7:b0:f7:7c:d9:
48:ba:4a:d7:85:3a:4c:ee:46:85:18:8f:1d:57:ea:f8:1d:e4:
25:6b:3f:8a:ab:49:16:f8:5e:d5:7d:52:29:b6:48:4a:6a:9e:
3f:c3:7c:ee:3d:0f:a1:e4:7d:cc:08:d3:21:9b:a9:8a:c0:b0:
2f:5a:a3:9e:9b:73:24:93:6b:f5:21:de:c0:81:74:dd:68:fd:
fa:fc:e4:2d:5b:9d:8a:c5:38:e9:55:b2:8b:1c:79:99:3f:87:
09:8c:63:57:93:d4:b6:11:a2:eb:6d:d5:19:27:bc:e5:01:a5:
d2:ec:5d:de:63:9f:b2:5e:cd:d7:6c:da:ed:69:fa:31:09:fa:
6a:e4:b0:45:8d:c1:c2:ef:98:3e:bb:de:c0:64:82:80:b8:3b:
d3:27:12:11:d7:5c:c9:74:3d:f0:0a:97:0e:81:38:e1:93:09:
e8:b7:38:13:19:03:e7:95:8e:76:b1:48:62:04:dc:5d:8e:ad:
4e:e7:b8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 05:41:24 2026 by rpki-client