Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: LWKyIecTMJYRnI6BYnnkrf/ZkHMFyWuVQbxiHNVNN8U=
Subject key identifier: 09:93:E6:E9:3E:56:39:E1:7A:A8:09:09:95:D0:78:E2:DD:37:D7:B3
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019DCE99A6A71649F51DA7D14B27EEAB93D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 18FD
Signing time: Mon 27 Apr 2026 11:01:09 +0000
Manifest this update: Mon 27 Apr 2026 11:01:09 +0000
Manifest next update: Tue 28 Apr 2026 11:01:09 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: GL0co/+BlvFOq91LWB67SVl2+ELXbwVszarHYJ4WZlE=)
2: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (hash: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c=)
3: JnNygfiur-rHLJuAn1hkxLz25cQ.roa (hash: CEYmgo0zOa133sbdNYSecv5niw3ZeeRwnisUaeasxBY=)
4: UV-Za1MLDNSaG4DuH_q131i6c6o.roa (hash: /nY7i2nihg09pwfCz4ZETusOQgWbnKeEZAo2lp/8PQQ=)
5: XwwEduTGUdEUmzQ6Vn1Qh0lULKE.roa (hash: yP/C4oSHOkCL3b3u7lTD0ceM0Z9V/7tsggm9f4RRupE=)
6: bc8LaOm-Ug6E5hSvds9yGbuwrFA.roa (hash: RaZzZcOTQlGar1i6XUpTh++hxvp7YrNT3WX2Bc1Xmtk=)
7: gDu74A_Z1ksatoKHQD455fxsAx0.roa (hash: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig=)
8: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (hash: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:a6:a7:16:49:f5:1d:a7:d1:4b:27:ee:ab:93:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Apr 27 11:01:09 2026 GMT
Not After : Apr 28 11:01:09 2026 GMT
Subject: CN=0993e6e93e5639e17aa8090995d078e2dd37d7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:3a:74:b5:09:81:b2:59:84:9a:60:74:d5:
07:8c:30:b5:e2:b4:9d:a6:01:cf:12:f6:22:aa:8a:
19:ef:46:5d:30:e8:f5:56:b7:69:bd:a7:8d:64:d2:
23:36:06:53:cd:68:5c:1d:60:ef:64:68:b2:d6:41:
f2:b5:81:c2:e9:fe:61:97:8b:36:0e:cc:ef:98:76:
2b:fb:88:03:46:0d:fa:a5:3e:43:d2:83:77:13:65:
07:2d:b7:d9:b8:12:54:4b:e3:0e:27:47:e1:0d:73:
3d:4e:b7:71:59:37:57:36:99:a0:c3:a6:bd:d5:9c:
a7:9b:7c:dd:51:a3:92:a4:00:b9:4c:6a:30:9d:ed:
72:60:fe:8e:3a:7e:97:fe:fc:2b:32:b4:da:56:27:
34:f9:66:90:cf:09:2b:dc:20:1a:88:5c:c1:1d:66:
5c:5a:64:d6:20:6b:2a:f9:8a:dd:5a:43:b6:7b:45:
3c:5d:80:87:56:78:60:7e:63:a1:d8:72:8a:20:2b:
d8:8a:cc:3e:66:99:fd:d4:86:70:da:f1:24:5f:f0:
d3:c0:bc:15:73:ba:53:af:a1:dd:25:16:71:ba:e7:
9b:09:f5:ec:f3:55:7d:23:a3:9e:f1:bd:61:cb:3d:
57:5a:7b:14:2f:e0:25:3c:91:11:be:00:26:d4:54:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:93:E6:E9:3E:56:39:E1:7A:A8:09:09:95:D0:78:E2:DD:37:D7:B3
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3e:2f:59:24:ec:f5:7c:ec:d2:67:9e:8f:6e:83:51:fc:c2:
44:e8:7d:6d:7c:b9:7b:b5:c6:20:6f:5f:bc:e6:f3:27:fb:76:
a5:db:8e:ab:6c:46:27:09:4f:69:8b:ef:69:79:81:6b:79:76:
97:23:2d:37:7c:bb:0b:62:a4:e3:8c:9b:23:67:63:5e:eb:76:
f4:55:09:e0:80:73:48:51:fd:10:00:0c:0a:0d:fe:f6:b3:9d:
99:4f:49:ad:d4:a3:1e:c3:41:72:7f:d7:1c:fc:b6:de:2d:26:
af:32:10:52:c3:25:65:b5:da:42:9c:87:fe:83:39:a9:e7:12:
b1:52:a1:b9:38:17:f1:33:35:ae:84:ef:e8:d2:b6:8d:d0:b7:
56:fe:f1:e6:bc:a7:33:25:14:eb:a1:5d:9d:6a:cd:85:77:f3:
e6:f0:8c:b4:24:33:4d:45:df:bb:f1:c1:7c:84:79:7b:06:9f:
5d:7a:1e:14:55:18:79:a6:d3:86:d4:0c:65:8e:ed:62:af:f5:
7d:02:6d:40:a8:4b:44:fd:f8:42:1d:ef:06:4b:ec:73:1a:9a:
06:48:8a:32:dc:9b:6e:b0:ee:90:44:09:08:2e:2f:37:eb:1b:
40:66:d5:d8:e5:cc:ad:3d:2c:ad:ed:99:29:0f:04:4b:b9:21:
df:e3:01:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:03 2026 by rpki-client