Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: Tgwv5+OiuVE7u66Jg/ye0xv8RHNB6xO0wuC6SicRezo=
Subject key identifier: 61:56:D2:20:9C:E2:DE:8E:60:C6:7C:73:B8:BC:D6:72:9B:80:2D:DF
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 019E303B684F0804AC262464DA289C64B72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 1914
Signing time: Sat 16 May 2026 10:01:00 +0000
Manifest this update: Sat 16 May 2026 10:01:00 +0000
Manifest next update: Sun 17 May 2026 10:01:00 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: GOU8OIV5GDDt5ribfYAM4N+tNsP+NECxHOLJ10n4yz0=)
2: Y1SgnZdGMmo9fGpuJl7wUQaxlkc.roa (hash: c5a6z6fFSi3Ksmn1qg/vCHzequVOvVzrYowSPYYXoZY=)
3: zgjOZSAzojMMAhNOHNiG97-1lKs.roa (hash: 9AqyfTSVIr04hBsXGR4iW4XjBoNFR8P2652xVPdhD0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:68:4f:08:04:ac:26:24:64:da:28:9c:64:b7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: May 16 10:01:00 2026 GMT
Not After : May 17 10:01:00 2026 GMT
Subject: CN=6156d2209ce2de8e60c67c73b8bcd6729b802ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:ae:c2:b7:4b:50:8f:6a:8d:b9:88:d5:1b:
ee:b0:77:cb:70:03:b9:5f:d8:70:55:e7:5d:e2:a9:
93:f6:8e:c7:b8:7b:ca:4b:72:ed:9d:2f:ed:62:85:
a8:9b:6c:7c:39:ac:ad:d3:ae:91:32:d1:f0:1f:86:
cd:47:c9:20:44:1e:47:75:7c:dc:3e:47:ea:08:31:
8a:7d:57:29:7a:fa:49:53:8c:7a:e6:e8:4e:6c:f2:
f6:b4:d0:03:e3:6f:8b:91:7b:e5:b7:cb:86:94:00:
cd:e4:a2:13:e0:7b:ab:51:e2:4e:bb:85:06:44:75:
88:67:0d:d1:19:31:02:bb:5e:89:6e:9b:7a:e0:86:
22:51:a9:14:14:40:1d:2a:81:87:b5:1f:7c:9c:1e:
29:71:26:70:24:9f:bb:e9:84:a0:56:79:fb:e0:7c:
e6:5f:c1:dc:8e:47:e8:45:2a:f8:02:12:de:2b:25:
8b:f7:85:24:af:45:07:52:10:7e:25:c4:e9:1a:36:
30:fa:44:50:ef:ae:f3:df:09:13:18:fb:e1:b8:7f:
dc:b0:47:ef:dc:f7:06:29:ea:6c:82:18:60:28:4f:
49:36:a2:19:22:c8:83:c3:c9:54:29:4b:0e:0a:b0:
83:a4:e8:59:d1:e5:86:4d:68:00:b5:e5:e3:4f:a6:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:56:D2:20:9C:E2:DE:8E:60:C6:7C:73:B8:BC:D6:72:9B:80:2D:DF
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c1:86:18:71:2c:96:22:e2:fc:e3:63:5a:7f:ea:3d:0f:e3:
92:88:0a:ea:37:dc:94:c4:1c:0f:ae:c2:c6:4d:8d:15:e2:57:
22:27:fc:b7:1e:21:18:59:b9:59:45:56:3d:0a:02:59:01:9b:
0e:29:fc:f6:02:a4:79:82:dc:9c:3d:00:59:9a:68:61:04:99:
c5:23:dc:c1:e7:2d:33:2e:dc:14:37:b5:66:29:19:b0:11:04:
b0:26:e2:d7:32:20:25:3f:e4:d3:f1:35:2a:c3:f0:09:f0:66:
6f:f9:19:d0:40:7d:2b:81:f9:e6:6a:ff:fb:83:e5:df:e8:3f:
be:c5:d8:0e:58:f5:00:bb:a2:78:f4:c6:5a:56:57:8a:d1:80:
fa:27:7a:8c:2c:ae:16:8a:68:b7:8e:0f:de:14:af:7a:66:b3:
c2:96:8f:7b:af:e5:58:82:a9:60:b9:a1:23:bf:91:e6:0b:ca:
70:98:f1:29:b5:82:53:15:ec:e7:69:cd:fa:08:2d:e3:35:c0:
ac:9b:c9:2d:58:b2:e9:5a:c8:13:18:a6:56:20:81:b0:97:84:
93:31:53:ad:5c:e6:8f:17:d9:b1:3a:dd:bd:ba:db:75:18:23:
bc:f3:21:bb:66:ae:5b:8b:4d:97:39:91:c9:57:3e:0a:64:5b:
73:de:7c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:34 2026 by rpki-client