Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: Hjf2nQ+qmgyAlB4rgdX5RdigY+RWbNoryVlgg2ScnM8=
Subject key identifier: F9:D3:B4:3E:48:A3:68:FA:3D:FE:5B:1A:92:D3:55:2B:22:D2:29:9D
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 019E30E07727927D56D915780F1AC2B3628D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 13:01:17 +0000
Manifest this update: Sat 16 May 2026 13:01:17 +0000
Manifest next update: Sun 17 May 2026 13:01:17 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: KolCd9rBUZE9UaIGR6TAwjpcizTYqcxDfCtE7rMh3ec=)
2: x6n822Rpr9x_ujzRReAoyI3uWJE.roa (hash: xHlOIj9K0jyV1cDKqnDaDCInd6n4ZibqQVDDfE1qwao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:77:27:92:7d:56:d9:15:78:0f:1a:c2:b3:62:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: May 16 13:01:17 2026 GMT
Not After : May 17 13:01:17 2026 GMT
Subject: CN=f9d3b43e48a368fa3dfe5b1a92d3552b22d2299d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ed:a8:23:68:37:1e:f4:1f:66:1e:50:2e:31:
a4:32:7a:c2:1e:81:10:b6:a5:87:60:cd:7e:c0:4a:
8f:ae:45:cb:c6:a4:26:0c:1b:1a:60:ad:55:ee:aa:
c1:23:61:cc:c9:e4:de:5d:15:f9:2c:87:48:a1:01:
eb:1f:63:1a:f4:74:55:37:6a:b2:b9:d9:ca:bb:a1:
8f:7e:28:ca:e3:27:00:de:a3:21:ea:6f:ea:3a:d9:
fb:99:3c:5e:2f:b7:3b:1f:92:b7:0c:10:2e:fa:82:
96:af:c0:51:c5:86:0e:92:7f:55:42:8a:b9:38:fe:
1e:bd:96:ae:b9:1e:b9:ce:18:19:aa:b0:51:1d:39:
6e:64:5c:fa:3b:49:cd:67:c5:70:61:b8:82:9d:99:
f1:90:a6:d1:92:b1:79:a3:a5:9d:28:cb:d4:80:ab:
a5:e3:6d:2b:a2:92:35:ac:8b:c2:99:8f:dd:a6:b3:
21:b3:41:83:dd:6d:a7:39:54:bf:1b:bd:0c:72:3b:
f5:77:8e:05:61:38:97:b2:21:96:33:ae:76:0e:25:
fd:af:20:32:28:1e:8a:45:f1:db:b8:f1:8e:f1:07:
ab:c0:75:e1:16:d2:81:88:c2:78:9e:57:f1:5d:53:
6c:9c:6d:77:49:64:1b:ca:0d:9e:ba:73:80:15:48:
8c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D3:B4:3E:48:A3:68:FA:3D:FE:5B:1A:92:D3:55:2B:22:D2:29:9D
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:dc:12:af:b1:3f:e7:87:0f:94:2f:15:48:29:a6:90:2f:a5:
2b:4d:86:33:14:bf:f1:96:8c:50:3f:60:7a:e8:83:07:8a:f1:
e5:3d:6e:a6:97:88:ba:de:a3:dd:9f:8c:ac:cd:63:81:0e:97:
53:df:8f:5f:a0:42:5f:d4:15:be:66:8e:5a:96:c2:24:60:3a:
c5:31:d8:2b:9c:9c:29:88:78:b3:37:d6:69:16:14:cf:8e:14:
cb:f1:d8:97:3d:5b:87:20:55:9e:9a:ea:9b:e4:44:d4:05:7e:
d4:23:4a:97:b5:b7:f4:46:f8:a8:fd:93:51:38:0d:a5:1f:e6:
67:49:e7:d3:8c:78:c4:eb:d9:b1:5c:a2:dd:54:85:c8:61:39:
05:a1:a5:37:d6:1f:7b:d6:d3:79:bd:9c:0c:e3:65:75:09:91:
7c:a9:51:f6:95:7d:ce:f4:d7:66:c8:50:46:dc:ac:21:2c:d5:
18:a8:cc:c5:2e:98:1d:04:7b:57:f6:87:81:6b:40:2e:31:6f:
ee:5d:6b:4b:26:5c:a1:65:4d:b3:90:10:67:08:34:6c:18:12:
1d:ef:46:56:b6:41:ac:a7:69:f5:c7:05:85:64:06:36:c0:85:
d8:e1:00:eb:3f:ed:82:0a:71:1f:b6:0e:51:bb:be:99:a9:6b:
17:d1:03:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4Hcnkn1W2RV4DxrCs2KNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx
MTAwYTMwHhcNMjYwNTE2MTMwMTE3WhcNMjYwNTE3MTMwMTE3WjAzMTEwLwYDVQQD
EyhmOWQzYjQzZTQ4YTM2OGZhM2RmZTViMWE5MmQzNTUyYjIyZDIyOTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u2oI2g3HvQfZh5QLjGkMnrCHoEQ
tqWHYM1+wEqPrkXLxqQmDBsaYK1V7qrBI2HMyeTeXRX5LIdIoQHrH2Ma9HRVN2qy
udnKu6GPfijK4ycA3qMh6m/qOtn7mTxeL7c7H5K3DBAu+oKWr8BRxYYOkn9VQoq5
OP4evZauuR65zhgZqrBRHTluZFz6O0nNZ8VwYbiCnZnxkKbRkrF5o6WdKMvUgKul
420ropI1rIvCmY/dprMhs0GD3W2nOVS/G70Mcjv1d44FYTiXsiGWM652DiX9ryAy
KB6KRfHbuPGO8QerwHXhFtKBiMJ4nlfxXVNsnG13SWQbyg2eunOAFUiM0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnTtD5Io2j6Pf5bGpLTVSsi0imdMB8GA1UdIwQY
MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt
MzExMzA0YTlhMjExLzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx
LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetwSr7E/
54cPlC8VSCmmkC+lK02GMxS/8ZaMUD9geuiDB4rx5T1uppeIut6j3Z+MrM1jgQ6X
U9+PX6BCX9QVvmaOWpbCJGA6xTHYK5ycKYh4szfWaRYUz44Uy/HYlz1bhyBVnprq
m+RE1AV+1CNKl7W39Eb4qP2TUTgNpR/mZ0nn04x4xOvZsVyi3VSFyGE5BaGlN9Yf
e9bTeb2cDONldQmRfKlR9pV9zvTXZshQRtysISzVGKjMxS6YHQR7V/aHgWtALjFv
7l1rSyZcoWVNs5AQZwg0bBgSHe9GVrZBrKdp9ccFhWQGNsCF2OEA6z/tggpxH7YO
Ubu+malrF9EDrA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:22 2026 by rpki-client