Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier: RrEpoeg5B4wu6yx5AOBwYm8w6AZ4OMmLZZLDvoQyGao=
Subject key identifier: C0:63:D0:F8:BF:1C:93:59:E5:27:E0:63:A9:BD:C8:FF:5E:3A:36:4E
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 019E300564BF3237331E675B567291119DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 09:02:00 +0000
Manifest this update: Sat 16 May 2026 09:02:00 +0000
Manifest next update: Sun 17 May 2026 09:02:00 +0000
Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: HTilEC82JP3YdP6c5pncAXnRCqtv9G3YLy7HhVjk1jw=)
2: Uzq6jnjiBmJhQ77sdYIGU3rtoW8.roa (hash: TaYrbh565HuhRP+MsEApRFlphctYPIuvYOeurCpD+fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:64:bf:32:37:33:1e:67:5b:56:72:91:11:9d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: May 16 09:02:00 2026 GMT
Not After : May 17 09:02:00 2026 GMT
Subject: CN=c063d0f8bf1c9359e527e063a9bdc8ff5e3a364e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:fd:9e:2a:1c:c5:b3:91:87:e9:56:6b:b5:
74:f8:39:f5:14:41:cd:79:f3:e0:84:1f:35:2a:ff:
1c:d5:d3:49:04:db:d3:1a:ba:19:c7:42:15:6e:d1:
7e:b5:77:4f:b9:c5:16:3e:16:d2:a9:d0:52:c9:93:
03:5e:3a:c8:fe:c0:76:b1:19:41:bf:79:22:27:4c:
a0:df:24:24:8d:bb:ba:5d:b8:dd:2c:9a:c4:64:5e:
5e:8e:6b:5a:49:64:ec:d7:02:0f:0c:bf:ac:53:a5:
cb:c5:c4:88:f8:2e:a3:97:98:bf:dd:b0:f5:d8:38:
57:93:6b:89:7b:19:d5:8f:ce:33:3f:ff:b6:b8:dc:
0a:18:fc:90:85:e8:8b:d3:7a:76:43:f8:49:0d:a7:
8d:05:82:25:99:13:44:d0:c3:54:c4:06:f0:80:61:
30:e4:08:74:0d:0c:20:e5:63:fa:0e:24:70:b1:eb:
ba:2f:9d:70:f9:db:58:84:e1:55:54:11:c3:03:24:
e2:48:33:63:ea:b4:40:00:e7:f8:4c:05:14:c8:da:
3f:c7:90:d6:d9:07:14:79:2b:60:87:75:a8:66:14:
03:5e:d1:88:9e:02:32:b1:e4:cc:62:3b:d0:ae:e6:
09:06:2a:8e:5a:c5:d7:50:81:1c:fa:8d:2b:d2:45:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:63:D0:F8:BF:1C:93:59:E5:27:E0:63:A9:BD:C8:FF:5E:3A:36:4E
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:68:cd:ef:5b:e6:f0:66:ba:8c:d1:3c:84:14:14:7d:94:cf:
9e:10:3a:72:ca:15:0b:4f:f5:ff:4c:26:94:e6:c1:1b:09:2d:
bd:ec:f8:c7:bf:3b:d7:b0:c7:a3:37:a4:65:fd:6e:e4:a7:51:
f4:b1:1e:e4:74:dc:8c:fb:87:c9:a9:74:cf:1d:d1:dc:89:f3:
81:92:5e:9e:0c:bc:e1:05:f3:d6:ce:86:af:cb:ab:0e:20:8d:
ea:a1:01:d5:33:79:46:64:52:4c:33:ec:8f:56:3a:3a:47:2a:
b5:d7:5d:11:96:e4:81:df:1e:54:51:3d:a3:0c:93:53:86:2e:
0a:fe:80:62:b9:0a:ab:8e:0f:1b:e1:c4:f5:a5:2d:02:1f:37:
45:16:66:fb:31:c1:56:87:ed:1d:9c:70:17:4d:23:f2:9b:89:
79:fe:8f:79:fb:82:0e:13:8f:d1:2a:35:c3:e9:95:b1:1f:3a:
62:00:ce:45:04:e1:0e:82:0d:09:f7:14:8a:a3:c6:b8:ca:51:
7c:f8:cc:f8:80:c2:d3:d5:13:57:a9:55:ca:f8:4c:89:0f:56:
bd:ea:ac:8a:9c:bc:52:f8:78:53:04:56:3a:ed:d4:77:e2:58:
ca:3b:6b:2d:be:bf:61:27:6e:a7:e1:57:4c:79:01:b4:36:eb:
2e:40:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:56 2026 by rpki-client