Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier: qzbnSp3QLIMsR3J+bZ+zyF7cE7e0O7lZ+bo2pmQDTUo=
Subject key identifier: 73:82:48:9D:72:00:74:DB:9C:93:EC:98:B6:BB:BB:EF:9E:62:9C:19
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial: 019E303BF7B2BACD3A19281038165F76FD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number: 0A4E
Signing time: Sat 16 May 2026 10:01:36 +0000
Manifest this update: Sat 16 May 2026 10:01:36 +0000
Manifest next update: Sun 17 May 2026 10:01:36 +0000
Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: vSlcdFKBoXHEXIzidBIlMlwO/SwcZtSgLvY6U7kfY1I=)
2: UlZluMg72w3OGQ7yVXSws-uTL0A.roa (hash: ZbBL16EPSfeFJDsY/7W353hLaYPwOpiK4otGlBdRF9Q=)
3: r6bLmGYRXJA6GUfCZnH4ebCbXYU.roa (hash: Q+Z0jJyseu+MqQA03xeTfakfDGrq+7+0HE8bf99rEXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:f7:b2:ba:cd:3a:19:28:10:38:16:5f:76:fd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Validity
Not Before: May 16 10:01:36 2026 GMT
Not After : May 17 10:01:36 2026 GMT
Subject: CN=7382489d720074db9c93ec98b6bbbbef9e629c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:0d:e1:25:e6:f4:b9:69:4b:96:b3:59:4d:
57:4c:e7:23:90:8c:73:4f:cd:8d:49:cf:0a:f0:bd:
23:94:55:b9:44:0c:64:10:5a:d9:37:19:50:59:71:
9c:1e:3e:91:d9:de:93:21:14:ad:5b:f7:ea:32:99:
83:9e:5c:c9:ca:25:e1:5b:77:88:13:90:21:59:1c:
d4:55:da:65:8f:04:72:f7:40:34:03:05:03:75:c0:
60:44:e4:54:ff:08:dc:16:3c:b4:55:70:6e:62:80:
2e:05:67:52:19:d5:51:bc:b3:dd:26:d6:ea:32:c3:
c9:72:50:f4:d9:4e:ab:2e:c4:7a:16:3f:be:79:cd:
9c:81:e4:15:b3:85:03:8c:23:12:48:78:33:c3:0f:
30:7c:b9:9c:2c:f0:b9:1c:6e:af:0a:4a:38:96:94:
a1:70:87:d7:18:02:71:90:3a:99:dc:07:2d:97:06:
ed:0e:36:fe:c1:20:9d:1d:65:b6:49:eb:67:b8:7d:
ef:22:0a:23:b3:19:32:44:d0:98:04:03:22:20:a7:
b9:9d:4e:f5:7f:31:f3:40:97:c1:4a:d5:72:1f:f6:
be:2a:fc:c6:b6:67:fe:a6:7b:19:d4:25:b9:e5:16:
f7:a4:dd:a7:9b:07:ff:de:2b:22:61:e6:2e:2f:3f:
24:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:82:48:9D:72:00:74:DB:9C:93:EC:98:B6:BB:BB:EF:9E:62:9C:19
X509v3 Authority Key Identifier:
keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9c:55:b8:59:84:a6:6b:b3:c2:a8:5d:4b:7d:a7:3a:27:f3:
87:82:c9:40:be:4f:89:49:83:43:8c:b2:89:55:91:69:e2:d9:
7b:ed:02:9c:2e:0b:4f:c9:d6:95:63:4a:b0:ec:ab:79:76:91:
a0:b0:4c:f2:05:42:c2:f9:8d:ba:44:ae:d6:19:1d:c0:82:52:
d7:9a:59:b8:09:d2:d4:a9:90:87:e3:af:2c:3b:71:bc:3a:d7:
25:4d:2e:c0:7f:e0:fd:aa:f5:52:32:b0:12:0a:7b:95:c2:e8:
d5:57:ca:3b:f2:a1:eb:a8:ab:96:f9:3f:2e:54:2d:00:72:70:
ca:9e:0a:a1:92:a7:5a:21:34:bc:a8:1a:78:ba:c8:82:66:04:
88:f5:a1:1e:7f:87:ba:91:7c:a5:9e:db:62:84:e7:52:d0:a6:
f7:4c:90:58:45:36:6c:ab:ac:db:f8:92:8c:ee:bf:0d:64:64:
bf:fa:77:3b:9f:67:92:01:cc:dd:a2:64:ba:92:d5:ba:49:c3:
4b:61:4f:f2:21:b7:cd:1f:0b:3e:24:a7:fe:43:61:23:a6:ee:
46:3d:8f:e9:6e:5f:5a:84:9b:0d:c4:74:2e:bf:51:de:f4:37:
29:1b:04:64:ab:96:55:fe:1f:94:5f:dc:fe:e4:24:bf:01:2b:
5f:6b:ff:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:21 2026 by rpki-client