Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
File: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json)
Hash identifier: y8TPmzjgL2yJe6zkjlBIqdNoGyG600d9CK4L2QsIOls=
Subject key identifier: 11:EA:37:ED:6C:7B:C2:00:88:2D:57:99:1A:AD:5E:92:56:07:B0:6A
Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Certificate serial: 019E30E0CA9519336966AC5FFBB78C5B0F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
Manifest number: 0685
Signing time: Sat 16 May 2026 13:01:38 +0000
Manifest this update: Sat 16 May 2026 13:01:38 +0000
Manifest next update: Sun 17 May 2026 13:01:38 +0000
Files and hashes: 1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: f9qXXiY8hM0Ade+qYQluVMupGtfQHLM1QbBhF5TLK8c=)
2: l1mFVAOuxHZKBwMbg64rZnUC-1A.roa (hash: b+iEU9Au8tIP5RGBvo59a7Rag467Ip6uQFWhSxkco+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:ca:95:19:33:69:66:ac:5f:fb:b7:8c:5b:0f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Validity
Not Before: May 16 13:01:38 2026 GMT
Not After : May 17 13:01:38 2026 GMT
Subject: CN=11ea37ed6c7bc200882d57991aad5e925607b06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2e:68:c1:6a:66:cb:b9:1c:46:b4:63:3d:97:
14:c5:46:ce:ac:54:fa:2d:f6:f9:4d:09:a2:31:84:
d6:b5:39:d3:5d:01:fc:77:12:f4:3c:9f:02:2e:f4:
61:bb:77:76:4f:4b:05:ca:51:11:32:25:db:03:3e:
df:79:35:91:d5:3d:89:e6:0d:39:8a:e9:5e:66:6d:
7d:a3:5c:b3:22:8b:d2:87:79:7d:61:b6:4a:a0:1c:
89:c7:1a:e8:a3:8e:bd:4f:74:17:8a:e9:ed:72:6a:
37:7f:4d:41:e0:4e:52:b7:66:e4:c7:52:5d:65:2d:
77:aa:8b:e5:14:ce:1c:42:1a:6c:7f:11:46:b5:57:
17:2c:0f:94:45:0e:dc:6b:1f:70:02:26:d9:c1:05:
88:74:dc:4e:7f:f2:c6:c3:87:a6:50:d9:27:b5:20:
15:62:de:e2:85:34:ce:95:c4:e1:1d:1b:4a:9d:19:
73:e2:ec:82:2b:52:6e:a9:23:4a:47:bd:82:e7:3a:
83:52:56:23:53:98:5c:a4:03:99:4a:c1:3c:19:1d:
59:0e:c0:39:e6:c3:7f:65:a3:20:3e:71:db:d8:cc:
9d:ed:38:7c:0b:e4:bc:9d:cd:3d:e6:3d:a0:f2:d1:
24:c0:a4:0d:36:89:82:4b:03:54:b9:7b:24:1e:6d:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EA:37:ED:6C:7B:C2:00:88:2D:57:99:1A:AD:5E:92:56:07:B0:6A
X509v3 Authority Key Identifier:
keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d0:dc:ad:03:e0:ca:8f:09:90:fd:06:b5:f5:cf:e9:45:75:
9b:1d:d1:be:f7:23:d1:6f:3e:7b:64:c1:e4:e8:9b:43:08:59:
61:12:1b:33:3f:9a:a5:0d:74:9b:32:9e:60:d7:b8:6e:38:4f:
be:6e:fc:00:91:0c:67:c1:dd:17:ad:03:9b:6d:f3:90:ad:bb:
de:e9:7a:01:cf:ac:e8:cf:ea:c3:29:2b:aa:0e:77:7c:7f:26:
5b:c1:47:0f:cd:2a:7e:02:93:c8:aa:a7:17:44:26:ee:c4:59:
f7:29:2f:c9:1f:a5:be:47:3c:c7:fe:64:aa:03:cf:9c:25:07:
f1:b2:88:7f:b8:ea:26:4e:3b:02:d9:27:dd:b8:1d:f7:f8:b8:
b3:e1:7f:7c:51:13:18:e9:91:78:6a:2e:3d:70:cb:83:9e:4e:
a9:1f:cd:28:e5:c1:ec:88:18:92:78:65:c8:29:09:41:1e:0e:
68:99:ba:a5:71:05:bc:6d:e6:cf:57:89:32:a0:16:1f:8d:9b:
85:59:2a:48:86:b7:6e:dd:e7:c1:8f:bb:87:a2:01:3c:43:7f:
43:0c:fe:2b:80:16:e5:11:d0:21:d0:52:21:b6:73:ae:dd:49:
4b:f5:2c:e6:73:5b:1d:e1:19:b0:09:c1:58:ee:a4:24:2a:3f:
cd:4e:56:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:33 2026 by rpki-client