Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier: tFIR75B3NZ8vK0FpG6WMGZeMalpYfZTOmiXxwHOW4+k=
Subject key identifier: BD:B0:EF:84:36:BB:A0:65:D0:C4:F1:16:89:3F:F4:17:EC:44:99:D2
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 019F19435DD2CA5FA4F2E08F8A96A7670A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number: 0EE3
Signing time: Tue 30 Jun 2026 16:01:13 +0000
Manifest this update: Tue 30 Jun 2026 16:01:13 +0000
Manifest next update: Wed 01 Jul 2026 16:01:13 +0000
Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: r28D2Rzgis3wdVpsGVjLqcTYg5sNLM3VIxZMwzVeIKk=)
2: _bZKuF7AFVv9FOPtEDmaIyaLkgc.roa (hash: /OjfGerjj4MNTsCbNROwrp1Es3nNekhRr//F8a0HSXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:5d:d2:ca:5f:a4:f2:e0:8f:8a:96:a7:67:0a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Jun 30 16:01:13 2026 GMT
Not After : Jul 1 16:01:13 2026 GMT
Subject: CN=bdb0ef8436bba065d0c4f116893ff417ec4499d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:59:db:7c:ef:a3:75:3d:14:d1:6c:6a:26:
06:bd:ef:2e:f1:d5:42:34:d6:e0:9b:09:61:97:b3:
2f:f1:8f:9e:32:9e:d4:40:28:13:d0:68:02:a0:a2:
23:f2:a1:f0:b8:43:87:a9:e0:be:93:2c:4f:04:fd:
5f:2c:06:e6:f2:d7:71:2f:fc:35:c0:8e:f4:e1:23:
f4:1d:dc:a1:70:dc:c6:61:ba:c7:57:72:ba:a3:61:
61:e8:33:56:30:c1:6c:ad:25:2a:91:48:d8:af:5d:
ca:c2:84:8f:cd:88:34:19:59:76:19:6f:dc:bf:62:
8d:fa:12:2a:9a:e8:04:0d:cb:eb:b3:47:59:cb:b7:
72:68:70:40:8e:19:56:34:50:50:06:81:1a:77:b1:
10:af:37:9b:90:9e:e2:59:1c:e5:45:27:cc:8d:ae:
fc:f6:73:87:57:56:a8:f9:5a:61:be:13:ca:c2:70:
2d:db:14:31:13:eb:7f:fa:4d:24:42:41:84:22:7b:
e2:e8:e5:25:c8:9d:fc:7d:98:87:ce:89:1f:51:b2:
26:b7:e3:0d:a1:14:3d:0d:42:2a:0f:0a:bd:53:b6:
f5:c4:80:41:50:53:a7:46:1a:56:e2:f9:a2:e1:36:
15:bd:f2:c3:42:db:db:de:a7:25:e1:1a:5b:99:38:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B0:EF:84:36:BB:A0:65:D0:C4:F1:16:89:3F:F4:17:EC:44:99:D2
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:31:be:71:31:26:ea:e2:49:89:ce:fb:f2:04:d4:5e:c7:bc:
44:0a:d3:ed:07:b4:d4:e0:99:45:19:83:d7:a2:81:d2:ae:9a:
68:4d:6d:7f:49:d6:64:3e:72:1a:3c:49:20:4e:27:33:00:4f:
85:92:96:2c:47:57:ca:b1:01:2a:f7:52:02:67:5f:20:cd:c6:
a9:f0:9a:91:f9:e7:f2:2e:91:a8:ff:0e:7d:09:5d:94:91:4a:
94:b3:8a:08:fd:a8:43:0c:e8:8a:98:1b:79:27:bc:7d:a7:0f:
82:bc:3f:8c:d3:c0:c2:51:ab:76:ca:82:34:da:c4:be:10:50:
3a:91:9f:c3:47:25:dd:7f:ce:cb:5c:1c:61:c0:e2:e6:e7:06:
a4:c5:89:c4:5a:65:c6:9a:b1:9e:63:4c:7b:c2:ea:2c:26:6c:
b4:ca:0d:8c:17:22:e5:7f:7e:ad:d0:3b:d0:48:a9:7e:d6:8d:
2e:0e:2e:35:49:6a:d8:38:96:b0:d2:4d:93:12:ce:d6:79:66:
64:36:bb:ba:e4:e9:4e:a2:48:1c:8c:22:f9:66:e2:b1:5c:df:
9f:93:54:cd:fd:9c:f3:5d:e1:2f:16:37:95:e1:91:db:c3:e3:
9c:b2:9a:9e:5d:53:bc:3d:e9:fe:dd:cb:38:f2:9a:74:29:7e:
2f:91:e4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:07 2026 by rpki-client