Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: Xhu31Qo6uYWvlEmfYgYqB+etT/HMPjQYbARrU2sjJE8=
Subject key identifier: 51:2F:ED:F6:3B:14:B1:14:26:60:8A:DF:5C:C8:18:44:90:6E:30:C8
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 019E3072E79BF5AC12A2B2EA04FE5D685029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 15A2
Signing time: Sat 16 May 2026 11:01:37 +0000
Manifest this update: Sat 16 May 2026 11:01:37 +0000
Manifest next update: Sun 17 May 2026 11:01:37 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: tiohVW4/Vanc7nzWgSzNTp3Yd10vRJaEGXdYAHdwBuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:e7:9b:f5:ac:12:a2:b2:ea:04:fe:5d:68:50:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: May 16 11:01:37 2026 GMT
Not After : May 17 11:01:37 2026 GMT
Subject: CN=512fedf63b14b11426608adf5cc81844906e30c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:75:6a:5c:1f:61:98:7a:89:ff:86:51:45:dc:
24:1c:d4:15:c8:6a:25:6a:08:f4:63:6c:8f:e8:07:
cf:71:0a:a6:b4:da:aa:48:68:d2:44:95:24:97:0f:
51:19:1e:a3:ce:36:85:00:f0:21:86:c5:63:bc:b2:
ec:e7:3a:4e:0c:f8:31:66:27:51:b3:d6:ce:f6:7a:
68:12:1b:f4:01:bb:38:6d:ab:ae:d3:cf:5f:ec:4d:
63:09:79:f0:8c:96:51:38:53:c0:2a:05:54:57:9b:
0c:93:c3:82:07:1f:c6:70:0c:b2:ea:67:63:5b:12:
56:ef:4d:4c:c1:31:c1:2c:f5:d2:1d:4c:b3:a7:5c:
ff:cc:26:d3:32:49:5f:b1:e6:50:0b:bd:43:af:4c:
c7:74:a2:07:3d:b0:ea:e2:d9:50:df:cc:3e:94:96:
4b:50:7a:36:e2:86:13:e6:58:31:34:6e:d4:99:93:
ff:53:21:19:e3:f8:25:de:3e:c1:f6:c2:60:5a:b9:
fb:97:10:b8:8c:a4:6f:8f:9e:04:94:b2:0c:cd:ea:
3b:c3:ab:d8:87:be:e8:8b:bd:4b:d9:63:bd:b0:3d:
93:31:81:cb:33:7d:a6:57:c7:37:7b:be:21:8c:29:
ff:a8:0a:f6:d1:51:66:59:8d:d7:30:d3:b5:71:bb:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2F:ED:F6:3B:14:B1:14:26:60:8A:DF:5C:C8:18:44:90:6E:30:C8
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fb:59:1c:e3:d6:2e:ea:d2:fc:fd:5d:ec:13:07:9b:8a:88:
f7:e5:02:a6:d8:ad:84:6e:a0:56:f3:fe:ca:41:a8:a2:9e:1c:
62:03:10:94:f0:b4:69:d0:b9:a1:14:7b:58:9c:18:45:bf:d7:
34:59:63:e6:c1:76:22:21:5e:8b:38:ed:fe:64:a0:90:61:49:
d6:56:55:c0:53:bb:9b:09:21:dc:28:7e:a2:a4:6e:a1:2a:c9:
a1:f4:fb:31:a8:48:0b:c2:7b:1f:6f:cf:02:84:1e:08:63:cd:
68:1e:21:5f:1c:a6:61:de:80:dd:cc:64:9d:57:3f:c7:45:c3:
27:9f:9c:b7:05:42:8b:4b:c5:0f:af:b0:75:3a:90:71:85:b5:
3e:bc:0e:f4:9a:30:f4:bc:20:cc:47:27:59:59:fd:95:91:39:
0c:e9:9b:c4:f2:1d:31:dc:f7:d7:00:5d:eb:5c:94:8e:81:91:
d9:b8:66:dc:9e:86:6a:06:a4:c6:0a:a6:2b:c6:9e:2b:f2:51:
f3:c4:e9:7e:6d:63:87:01:08:94:26:1d:36:07:ae:d5:dc:ff:
14:24:06:18:b9:f4:45:ac:6d:e9:f8:91:61:fb:ae:14:d5:7c:
3f:de:10:85:ea:df:27:63:87:85:52:dd:b7:a3:30:9a:62:f0:
cd:62:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:55 2026 by rpki-client