Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
File: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft (raw, json)
Hash identifier: eDAPf+dVCCHwBxAmWDKzmaHZYuBEvFo+4uCV2iOeoJk=
Subject key identifier: 8A:14:E1:A6:A4:6A:F6:55:FF:31:17:B5:52:29:F0:80:0C:7D:BC:65
Authority key identifier: EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
Certificate issuer: /CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Certificate serial: 019DCD874E86957B62F6F6988A989E829B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 06:01:29 +0000
Manifest this update: Mon 27 Apr 2026 06:01:29 +0000
Manifest next update: Tue 28 Apr 2026 06:01:29 +0000
Files and hashes: 1: 2gPdkQWW9jUCbizX1SsNX62y_98.roa (hash: VSRNfwKyTAYD9LB8Wv+fsBtowZBw7KWBvIp7E5dQ+Cg=)
2: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl (hash: 0SBmrHnnK/xzqlLHsTkroPvO63Cpfe1DVUL+hjGs94A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:4e:86:95:7b:62:f6:f6:98:8a:98:9e:82:9b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Validity
Not Before: Apr 27 06:01:29 2026 GMT
Not After : Apr 28 06:01:29 2026 GMT
Subject: CN=8a14e1a6a46af655ff3117b55229f0800c7dbc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:52:c7:03:ae:7d:99:10:ab:06:38:20:4e:
37:db:c8:b8:35:3e:fa:26:81:2e:04:0c:42:fe:74:
df:45:44:81:d5:0e:54:09:3b:64:2f:3e:d4:90:06:
4d:41:60:81:89:90:e0:6b:b0:b6:58:08:1b:9d:ef:
81:33:5b:ed:59:2f:7c:cb:46:c1:ff:09:ca:65:2e:
1a:8d:5b:8f:08:35:58:6b:29:dc:03:e7:90:6f:4f:
dd:ed:4f:ce:ca:1f:12:62:da:e4:d1:93:26:5f:f9:
57:55:e4:e8:de:cf:4f:92:e0:20:c0:5f:7e:6c:25:
54:16:22:08:a4:be:9a:14:4d:ea:53:99:1c:74:5f:
32:7d:34:81:e4:a3:da:8c:49:a8:35:e7:19:ec:00:
7e:ad:93:7a:0e:fa:02:0e:b1:6d:b1:8d:43:b4:1d:
d8:c7:0d:d4:9e:24:6a:7a:ea:31:d0:6c:da:28:6b:
55:15:cf:63:1e:53:90:1b:dd:9c:b3:02:33:cc:2b:
31:3e:92:43:ac:08:5c:8b:3a:f1:d4:cd:24:f4:ee:
ba:9e:ae:72:f0:54:d9:2b:24:97:25:0a:d1:53:0e:
36:c4:bb:c7:07:37:d1:30:ac:b7:dc:b3:56:d9:bf:
24:af:5c:41:3a:ad:09:08:e8:55:9f:72:cc:63:cc:
b6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:14:E1:A6:A4:6A:F6:55:FF:31:17:B5:52:29:F0:80:0C:7D:BC:65
X509v3 Authority Key Identifier:
keyid:EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:b7:a0:33:01:5e:05:2b:28:a6:fb:ff:54:af:89:a5:b4:70:
09:78:e6:cd:1f:ea:ac:03:9a:49:1a:0f:70:ab:72:35:92:51:
9a:08:06:63:9a:3d:76:b6:09:49:22:69:65:86:ad:21:73:89:
bf:90:ee:5a:67:52:f1:56:33:d8:7e:8d:57:3a:20:23:61:cb:
59:89:90:4b:2d:77:1b:4c:8a:66:cc:a8:b3:4a:a8:31:c3:1c:
34:91:64:ba:53:cf:1d:2b:fa:6f:d3:98:cd:07:9d:8e:76:ee:
05:2a:f4:02:03:ff:82:98:7f:7c:c7:26:bb:4a:41:72:a3:ed:
b1:39:4e:26:24:59:a5:55:4c:c1:1a:1b:18:78:4d:e3:b9:27:
c5:34:72:6c:39:50:a9:9e:04:64:54:c9:8f:ab:bb:4d:22:c4:
74:21:10:77:04:5f:3f:87:7a:09:e8:7b:83:cf:54:a8:ff:27:
9d:e1:f8:6c:30:87:fb:2d:44:0a:2f:00:38:1b:cd:4c:02:ac:
1e:dc:97:c2:03:e7:2d:a1:9e:cf:aa:56:92:a9:12:35:bb:63:
f3:b1:f1:f5:96:59:4e:f6:56:1c:0d:e7:f5:77:a1:09:da:d9:
9c:8d:d5:3e:5f:05:b0:27:b3:d7:eb:26:31:b1:1d:bd:37:19:
69:11:cf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:56:02 2026 by rpki-client