Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
File: 7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json)
Hash identifier: DR/zw/3IAeolVg4Rq6b6XGLFIV6y5OJOfdYdvaFO91A=
Subject key identifier: 5B:21:52:03:AA:20:37:B3:91:1E:F7:03:0B:54:6B:12:8D:84:B4:26
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Certificate issuer: /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial: 019E30DFEB8B11BF36746DECAFB6C7F2D94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
Manifest number: 1840
Signing time: Sat 16 May 2026 13:00:41 +0000
Manifest this update: Sat 16 May 2026 13:00:41 +0000
Manifest next update: Sun 17 May 2026 13:00:41 +0000
Files and hashes: 1: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: dhBZLXZE4YWpYSFWxCy+sKFXObN/GAjWT/4Qs4AwQQM=)
2: WxQ64uv-zX-eye9sRlN7C2cRqwI.roa (hash: H3Nchr9jYSxejrjh37X3oEL6arcb0RjMrAm9O9pSwMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:df:eb:8b:11:bf:36:74:6d:ec:af:b6:c7:f2:d9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Validity
Not Before: May 16 13:00:41 2026 GMT
Not After : May 17 13:00:41 2026 GMT
Subject: CN=5b215203aa2037b3911ef7030b546b128d84b426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:4c:de:66:cf:ba:31:43:17:c2:0c:e1:f1:
f2:e1:c5:72:68:3c:d2:84:61:ac:48:5b:23:ab:aa:
8e:0f:47:4e:ab:65:f1:29:41:76:2b:1b:f8:15:63:
ef:d9:e2:4e:b4:25:47:73:14:9e:a0:a2:e3:ca:1a:
69:61:5c:22:e0:e7:e1:0d:9a:c1:d0:9c:30:cb:6a:
cd:ed:30:1f:a0:42:9c:61:28:73:c1:b6:13:bd:51:
0d:f3:30:59:9b:8b:c2:a2:db:f8:e8:1f:a1:1c:f4:
6f:76:e8:5f:e4:1f:d1:30:2f:74:28:66:2e:39:d4:
6f:48:80:3b:bc:71:b9:02:3f:86:6f:37:e2:2c:10:
8f:16:57:e4:f0:73:8d:3f:2a:3c:eb:51:a3:9c:07:
11:e5:47:f8:02:59:4c:05:1d:98:c1:7d:a7:7e:d1:
d8:43:aa:6b:e9:2c:58:42:c0:50:90:14:a8:a0:fd:
1e:8e:60:eb:91:3a:e1:d3:8a:d7:12:3f:66:aa:a5:
51:a4:ad:5c:e0:f2:33:91:4a:5f:c5:ca:c2:ed:11:
fe:7f:88:7a:84:46:f8:57:a3:73:43:7a:0d:3e:1f:
33:27:4a:82:80:6a:58:37:66:88:3e:7b:0d:e0:c5:
1c:18:34:e5:1c:97:bf:6e:04:28:97:1e:62:77:2a:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:21:52:03:AA:20:37:B3:91:1E:F7:03:0B:54:6B:12:8D:84:B4:26
X509v3 Authority Key Identifier:
keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b3:85:33:09:4e:cf:2f:86:86:6b:05:75:fe:b3:99:74:a0:
fa:b1:d1:27:c7:47:c3:72:31:ed:e4:f5:29:62:eb:4a:d0:c1:
36:76:85:dc:7c:43:36:12:94:65:bb:9e:ae:be:05:67:e3:17:
26:3a:eb:99:44:5d:8f:ed:2c:01:17:a4:ce:0a:ed:6e:bf:d1:
a6:06:d9:82:b2:b8:29:0b:5e:3f:3f:9f:16:1d:b3:02:88:92:
c9:f5:3e:0a:8c:78:d1:bf:b4:6a:26:c1:60:0d:74:df:38:23:
13:ba:4e:53:94:6f:5f:73:65:d8:72:46:c9:f5:d6:06:75:fa:
7e:57:6e:b0:81:24:99:93:12:c0:4b:94:80:f2:19:74:fb:b3:
b7:ac:0c:76:59:c8:63:f1:75:44:c3:81:70:50:44:11:fb:df:
56:2b:cb:4d:92:85:93:36:5a:c9:00:4c:62:3d:93:78:9e:ab:
63:a5:35:7d:0d:6f:0f:97:88:08:05:97:72:dd:5c:40:29:d5:
19:17:ed:8f:c4:ba:0f:64:d3:fa:38:e8:da:e1:75:41:f4:d8:
93:db:40:8e:b9:12:77:a0:dc:c3:10:e0:1b:b0:9b:93:80:72:
5e:aa:a6:a3:56:ed:70:cc:ce:e9:62:34:1f:f2:3c:47:d9:77:
65:74:bb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:35 2026 by rpki-client