Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: ymPEQ+c+knoOKvaRxvxkBSyjoxb9GdQRgaGHUJTOqzM=
Subject key identifier: FA:8D:A2:2C:3C:24:76:EC:F6:AB:20:47:56:37:E1:CF:CE:7B:BB:B4
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 019DCF07F97854E09673417536466C977753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 0FBE
Signing time: Mon 27 Apr 2026 13:01:39 +0000
Manifest this update: Mon 27 Apr 2026 13:01:39 +0000
Manifest next update: Tue 28 Apr 2026 13:01:39 +0000
Files and hashes: 1: 1-kxWXv05LSEshrBJnjD59T0FQ7Q.roa (hash: rHapWpK9pigcf/GGIQp1nmEJbzSoQssokoPt9LrVksY=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: yuGzwQaiUhony7oXD6hskCxkrJNBGtUy0hKrYbRggVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:f9:78:54:e0:96:73:41:75:36:46:6c:97:77:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Apr 27 13:01:39 2026 GMT
Not After : Apr 28 13:01:39 2026 GMT
Subject: CN=fa8da22c3c2476ecf6ab20475637e1cfce7bbbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:14:fe:fe:98:52:51:14:8f:2d:b8:22:ca:
88:0c:84:4e:c3:90:09:cb:58:31:03:c6:9b:93:f9:
b4:5b:17:85:39:86:d9:f9:21:16:18:b4:0f:4e:b0:
ef:97:f7:5a:bc:da:7f:c1:db:ac:68:da:aa:e8:ad:
80:56:86:21:4d:52:14:6f:ca:0c:75:e6:92:0f:7b:
e1:05:db:38:c4:57:f6:f9:5f:9c:16:72:fc:57:8f:
ad:07:7c:a6:9e:54:d7:d0:30:e1:19:8f:b5:b4:97:
63:d9:e7:52:fc:d9:5f:fb:59:dc:28:4c:a5:8f:ee:
eb:4a:ae:16:76:26:a3:4f:ae:33:dd:bb:59:b2:b1:
ef:90:3b:c5:6b:f9:fd:1b:05:53:f8:7a:24:aa:f2:
98:78:d7:20:42:b6:34:e4:14:a2:43:50:2e:3d:44:
0d:38:f1:43:dc:2c:77:b4:79:28:ef:48:55:6c:f9:
26:8f:89:fe:39:c9:c4:4d:c3:16:21:48:87:0a:27:
23:c4:9c:a0:2a:21:bc:2b:39:6b:fe:4e:ad:5f:c7:
8d:b2:02:e6:48:bc:13:04:93:bf:12:ea:02:c7:e4:
23:ed:40:a4:72:8c:25:3e:85:71:1b:c9:15:7e:fc:
23:d5:3a:39:2b:f0:12:a7:70:df:03:c7:a1:2f:4c:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8D:A2:2C:3C:24:76:EC:F6:AB:20:47:56:37:E1:CF:CE:7B:BB:B4
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:60:14:0f:34:bf:9a:22:4c:85:46:49:22:c2:0d:b6:f1:cc:
7d:a3:07:dc:15:ee:35:d8:3a:45:3f:e6:5f:e5:0e:c0:c2:74:
a6:e4:e3:9c:fc:51:2c:4d:62:34:96:a5:69:8a:6d:70:29:0c:
bd:fd:68:1d:d3:68:44:67:d3:77:5c:db:ea:d6:78:5f:79:c2:
46:69:a8:31:68:8f:1c:69:87:5f:55:87:1c:48:be:75:ec:cc:
b3:d5:e5:49:24:b2:7b:f0:b4:20:c1:4b:f1:14:86:73:6c:d0:
35:bc:78:0b:be:7e:b5:f0:03:c0:c9:f9:aa:d9:eb:0f:3b:7d:
08:0c:0b:77:25:91:ff:34:3c:31:54:7a:f5:41:54:a6:8f:c4:
a6:65:f8:0c:41:05:59:e5:09:0c:46:87:e6:66:34:c9:58:2a:
d8:25:31:d4:cb:8a:38:a2:5d:06:d5:da:14:77:13:50:b9:2f:
c1:03:db:03:ae:07:09:f7:59:ad:6d:16:2f:a3:f0:76:11:d2:
45:a2:06:7f:4e:9f:ba:7a:cf:a9:c7:1c:2d:02:11:2e:f6:14:
6b:b7:6b:43:1e:29:be:ff:c6:d7:ae:b1:e7:fe:03:74:5d:44:
ef:b6:2d:1b:b8:39:0c:28:48:a3:2f:80:8d:f4:08:d9:72:99:
aa:0f:c6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:59 2026 by rpki-client