Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: sMWlltFrPYOFv+ufutiaMDCFdKtuofeWXPTnLwfK7DY=
Subject key identifier: 44:56:16:F5:8C:56:EE:31:82:24:5E:74:47:55:18:CB:DF:A5:E7:75
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019EB8457855BD7C107A781A6CDBD77F4433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 1976
Signing time: Thu 11 Jun 2026 20:00:20 +0000
Manifest this update: Thu 11 Jun 2026 20:00:20 +0000
Manifest next update: Fri 12 Jun 2026 20:00:20 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: e/OXe4Ht4rCvt06L4J2qnkvyYK+d/nWLoXoQQHP2cmU=)
2: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (hash: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c=)
3: JnNygfiur-rHLJuAn1hkxLz25cQ.roa (hash: CEYmgo0zOa133sbdNYSecv5niw3ZeeRwnisUaeasxBY=)
4: UV-Za1MLDNSaG4DuH_q131i6c6o.roa (hash: /nY7i2nihg09pwfCz4ZETusOQgWbnKeEZAo2lp/8PQQ=)
5: XwwEduTGUdEUmzQ6Vn1Qh0lULKE.roa (hash: yP/C4oSHOkCL3b3u7lTD0ceM0Z9V/7tsggm9f4RRupE=)
6: bc8LaOm-Ug6E5hSvds9yGbuwrFA.roa (hash: RaZzZcOTQlGar1i6XUpTh++hxvp7YrNT3WX2Bc1Xmtk=)
7: gDu74A_Z1ksatoKHQD455fxsAx0.roa (hash: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig=)
8: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (hash: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:78:55:bd:7c:10:7a:78:1a:6c:db:d7:7f:44:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jun 11 20:00:20 2026 GMT
Not After : Jun 12 20:00:20 2026 GMT
Subject: CN=445616f58c56ee3182245e74475518cbdfa5e775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:29:88:ea:c4:cb:ed:dd:42:c8:14:4e:c6:
13:91:19:4d:44:29:f9:64:5e:c2:31:1e:e5:6e:db:
6d:3d:ea:9f:e6:a4:9c:b0:7c:25:fd:bb:08:a5:e1:
04:89:87:5e:c5:31:26:10:10:43:28:e4:1a:09:3c:
e2:48:27:42:12:48:29:54:00:39:a5:1e:62:fb:b6:
ba:43:b6:63:00:fe:f7:03:11:ae:0b:90:44:27:7a:
e5:56:b3:3d:c8:1d:22:26:9a:b1:3c:39:5a:e8:8f:
d8:8d:24:6a:cc:31:ab:9b:d8:aa:b0:40:b6:3d:dd:
d6:8b:b7:80:c9:d5:19:c1:1b:f3:c4:df:af:c2:33:
76:d2:ac:4d:88:a0:ee:65:a6:b3:df:10:58:4b:27:
bc:a1:67:df:e3:cd:5c:a8:9f:cb:88:67:27:82:1f:
7c:ee:88:86:33:dc:1b:04:f3:10:5c:5e:3f:22:3d:
a2:44:68:6b:0d:57:b3:52:cf:a8:b1:50:4f:b4:ee:
88:a9:1d:a8:aa:0d:6e:f9:14:28:f3:64:fb:21:8b:
78:fa:89:bc:36:7a:03:69:92:45:41:32:76:af:ad:
1d:5f:cb:ec:0d:c7:b8:ab:d6:e1:6d:75:86:79:66:
37:ec:2d:4c:b3:1e:43:ce:6d:4d:51:21:7d:03:20:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:56:16:F5:8C:56:EE:31:82:24:5E:74:47:55:18:CB:DF:A5:E7:75
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f4:17:76:86:de:47:90:3a:4c:80:bb:aa:55:01:5f:b9:1c:
18:9d:a5:0b:85:a3:5a:51:a6:d8:a2:01:cb:bd:a0:69:02:cc:
ab:6d:19:01:04:02:27:db:3b:e2:0c:7f:67:27:cb:25:1f:7c:
64:04:7a:f3:f6:f5:a0:a5:ad:b7:10:76:e8:f5:68:5f:39:0c:
6e:6d:26:50:9d:51:86:9e:dd:bb:43:e7:d3:10:9d:5a:72:1b:
7b:30:1f:e4:6e:75:6a:18:33:fe:7b:de:a3:da:a7:cf:e7:8a:
43:ae:6b:ec:ec:c3:a6:68:c7:6e:43:0a:de:87:dd:02:51:ec:
e1:85:91:db:5b:3c:3f:9e:f9:fa:ce:ad:00:00:43:31:31:f4:
f0:01:3b:23:47:a5:3a:12:7f:9b:51:45:fb:55:aa:e3:5a:7d:
b2:36:c4:73:23:db:f3:5b:77:10:41:bf:b4:44:37:ee:5f:84:
04:8c:a2:1e:00:8b:43:78:f2:00:ca:73:55:eb:e0:9c:22:06:
fe:6e:4c:8c:6d:d4:56:ce:45:81:22:d2:a7:7c:46:09:00:54:
41:9b:80:29:29:13:f6:ef:00:b3:c5:c5:37:b2:0e:43:70:54:
04:87:7c:52:21:61:04:59:04:b6:03:38:33:94:66:40:58:8e:
b5:ec:45:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:38:35 2026 by rpki-client