Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: IYfnxTitx9YjvHIOmkSKGBksE9kkZ3N2tDvSPTV/xqo=
Subject key identifier: 14:44:6E:99:F6:4B:9E:46:BB:88:64:16:70:28:74:4A:AC:06:E6:0B
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 019E2F5FC6709A55C29DC977E2AE4DD74F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 16F8
Signing time: Sat 16 May 2026 06:01:06 +0000
Manifest this update: Sat 16 May 2026 06:01:06 +0000
Manifest next update: Sun 17 May 2026 06:01:06 +0000
Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: f0aKY1S9mk39HsfysFZJQwyxLTjsbTmJo5ZvULRVnLg=)
4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:c6:70:9a:55:c2:9d:c9:77:e2:ae:4d:d7:4f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: May 16 06:01:06 2026 GMT
Not After : May 17 06:01:06 2026 GMT
Subject: CN=14446e99f64b9e46bb8864167028744aac06e60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:c7:0c:c1:c1:0c:51:cb:6e:09:88:da:f3:
ec:ce:19:a1:49:f3:dc:fe:e4:ec:15:a9:7c:a8:dd:
5b:a7:7c:24:6c:bf:10:5c:ee:72:08:0c:5b:79:55:
a6:8a:bf:56:b3:56:64:89:7a:69:a5:7a:fb:56:1c:
6f:1c:5c:82:12:92:76:7e:da:66:53:38:5f:33:94:
8f:e1:30:a5:7a:59:08:f0:08:03:b1:78:6d:2a:93:
fd:15:bc:85:23:d7:b0:c7:47:e6:cc:15:97:61:6b:
0c:d4:6a:6d:01:73:a6:5c:ad:13:f6:06:e7:a6:1d:
5b:0b:81:4c:3c:88:0c:f7:e6:d5:a4:46:32:0d:84:
a7:f9:a9:16:f7:32:45:30:00:19:25:75:89:5a:18:
7c:84:e9:56:01:ee:d1:c7:76:1c:77:c8:81:3c:cf:
02:0b:15:1b:6a:c7:0e:c0:c4:95:8e:92:b2:87:35:
5a:ef:b5:5c:75:b0:2e:b3:96:6b:96:68:8a:c8:73:
a5:02:07:23:44:1e:07:14:91:fa:ad:e2:12:a6:f0:
0e:f9:f9:cf:17:9f:74:ad:18:d2:6f:31:81:e4:c9:
f9:66:7b:19:9f:be:08:13:34:a8:3f:2d:5e:dc:f8:
7f:fb:78:1e:fd:81:49:d8:d9:50:9f:be:de:35:03:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:44:6E:99:F6:4B:9E:46:BB:88:64:16:70:28:74:4A:AC:06:E6:0B
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9d:56:a9:1e:93:40:ad:e5:a6:c6:ce:68:44:ff:c3:3b:76:
dc:55:85:3b:4e:2f:0f:0e:cd:99:a7:33:ad:1a:11:c5:ed:51:
77:fd:c2:40:b3:44:f4:6b:da:03:a8:2c:0c:65:c3:53:00:74:
ac:67:5c:76:81:0d:cd:bc:6c:58:1a:e9:56:90:9d:47:92:81:
92:03:41:ff:b0:b4:06:03:15:21:82:5f:db:ce:1f:f3:26:7d:
aa:79:0f:51:1c:0d:0b:99:97:43:fd:02:cd:7c:e9:78:15:6b:
a9:5e:46:d8:eb:3c:03:17:67:30:98:a5:ed:9d:f2:e0:a8:7c:
5e:e8:66:18:4f:c9:7f:84:da:85:f0:d0:2b:3d:e2:68:90:21:
d0:07:6f:40:14:c7:fc:65:61:75:7c:20:21:c7:33:f2:fd:7f:
98:fb:1d:cc:cf:9b:0f:b5:ac:e1:c7:67:0d:55:71:7c:96:56:
33:21:08:af:9c:36:1c:d5:3b:d8:27:76:3b:51:a8:dc:08:32:
b9:5d:8d:25:fc:5e:1d:29:df:ee:d9:38:88:e1:5f:76:74:9e:
c9:16:f1:dd:1a:34:22:fd:6d:76:64:33:67:6a:f7:67:66:31:
7a:00:56:0e:7c:d0:2a:86:e0:3f:52:26:a8:e2:82:a1:21:45:
43:ca:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:04 2026 by rpki-client