
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File: 7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier: qWkwrAndVe45mvXab5b5WxLPtOCq4xKiTq2AO5uJiXs=
Subject key identifier: EC:51:82:BD:9D:A4:E3:6F:64:ED:BD:D5:CD:AE:A7:4B:FE:F3:1C:C0
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial: 019E303B8CA0BE3273AA6D98EF6270C57379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number: 0D75
Signing time: Sat 16 May 2026 10:01:09 +0000
Manifest this update: Sat 16 May 2026 10:01:09 +0000
Manifest next update: Sun 17 May 2026 10:01:09 +0000
Files and hashes: 1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: ssabRprWzvMTtjQIOtS0c8xkeAyz+9YDWaK5/fARxTg=)
2: Mt1633RiBIpuKnZW3jSMaHpSdRI.roa (hash: 6BNDp2CLnyhsZWA//die5Cd+w8BRp6sCkxu8tySEnX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:8c:a0:be:32:73:aa:6d:98:ef:62:70:c5:73:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Validity
Not Before: May 16 10:01:09 2026 GMT
Not After : May 17 10:01:09 2026 GMT
Subject: CN=ec5182bd9da4e36f64edbdd5cdaea74bfef31cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9f:29:e1:85:0f:de:fc:e3:39:7f:c7:4b:54:
b1:1e:4f:cc:45:60:0c:55:8f:fd:2c:d7:12:65:b0:
8e:fb:11:d1:b1:6f:51:e4:f1:bc:e6:7a:2a:e7:37:
f9:65:8c:e1:29:1e:1c:e1:8c:0b:e5:ec:7e:b2:ab:
92:1a:e5:28:57:8b:06:2f:8a:e6:26:82:46:bc:4d:
76:76:4c:a1:a9:86:88:ce:e8:50:9d:ea:c8:e6:55:
58:16:b0:fd:9d:91:8d:a7:65:fe:db:83:fb:7c:c3:
67:4e:3c:04:e2:23:4e:17:29:a0:38:62:76:dc:16:
f1:22:34:9e:4d:06:a8:75:ca:10:0e:ce:8e:c4:22:
62:0a:7b:33:85:61:23:5e:b6:3a:d6:5c:b1:4c:fd:
30:0e:b8:af:21:6b:f3:20:d4:36:2e:00:89:73:f2:
2f:dc:e1:5d:a7:27:f0:56:51:26:46:d6:eb:2b:42:
84:f1:4c:90:7d:e5:16:50:e7:1a:c3:e3:13:a2:69:
1d:21:fa:67:26:77:90:96:9e:ea:c6:10:e2:f7:aa:
42:7c:f7:3a:bd:c8:67:05:18:e4:0f:f4:8f:d7:ac:
e0:67:87:ce:10:4e:45:db:ac:69:91:43:98:d9:a7:
06:19:5e:0a:9a:c0:3c:21:7a:84:1a:96:79:c7:35:
36:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:51:82:BD:9D:A4:E3:6F:64:ED:BD:D5:CD:AE:A7:4B:FE:F3:1C:C0
X509v3 Authority Key Identifier:
keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c2:1b:89:e4:50:9c:95:86:64:cd:8d:42:5b:3b:4a:16:5c:
73:f8:c3:7b:32:ed:c0:40:37:bc:82:d7:e4:64:79:4f:f0:05:
1e:a5:57:96:5e:8e:d0:cc:4a:5d:80:c3:38:d9:aa:13:0f:85:
92:d8:c7:a5:a2:af:a7:86:6e:64:c1:00:61:af:5a:5f:fb:d8:
31:9e:ec:94:d5:30:cd:06:18:2e:80:75:0d:09:36:25:d2:b6:
b0:22:c3:69:8e:05:d4:80:49:bc:10:a1:5d:0d:2e:aa:41:12:
ac:77:7e:93:06:bd:3c:a1:17:70:6a:e0:41:a2:f5:ce:5b:d0:
32:5c:98:03:26:35:b7:91:65:d5:9c:77:64:c7:f0:e9:c2:df:
96:84:e6:2d:cf:02:81:13:56:5c:e3:1a:82:e3:00:ea:ad:29:
23:bc:a1:d6:c0:8b:be:fb:b2:a6:e3:cc:b5:8b:c7:8f:5b:fa:
b0:cb:e9:42:05:4f:b0:77:c2:e1:37:e6:ab:b5:85:05:d6:bb:
97:be:b4:46:d5:3a:b7:31:f0:37:9b:3c:00:1d:ed:4a:d5:25:
f0:7b:7e:da:ee:ca:5c:47:50:22:d1:9a:ee:ea:f6:c4:f2:ae:
78:36:63:bf:61:4d:81:f9:e3:67:4a:50:35:f5:f7:05:3d:9c:
41:0c:70:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:34 2026 by rpki-client