Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
File: _7JidnKHfQ9t6bxOfhhu7dE1YRA.mft (raw, json)
Hash identifier: /lSWFYMKsKA4KtkWPbO6Cq2iy9JefKLl/ygUZVwFi70=
Subject key identifier: D6:F7:81:38:DD:30:76:2D:26:67:62:D6:D2:52:3D:95:02:B4:DE:3D
Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Certificate serial: 019DCDBE1A47AF1FE32F3B2809CEE2C1BDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
Manifest number: 06CC
Signing time: Mon 27 Apr 2026 07:01:20 +0000
Manifest this update: Mon 27 Apr 2026 07:01:20 +0000
Manifest next update: Tue 28 Apr 2026 07:01:20 +0000
Files and hashes: 1: 3jq3JT05Xk8RZ2a5qjD2FUJa1Vg.roa (hash: BN7qrk5PhVCDMZZc/gkWTb+z7DTTxiTcCVTVZQiCQ5A=)
2: I6ALXmCteTenZcrOg4TP1V_iWag.roa (hash: mBTMfxZNjNhqmIR4K/UJM2sVF73blQR0DlqlzSJjP8c=)
3: _7JidnKHfQ9t6bxOfhhu7dE1YRA.crl (hash: ivT+H7+EKSo/VpTQ3jRJbp/nYQ/nT70EokppoLbw6b0=)
4: _KX5px9_8t4gmUQxbL9xxFEe0EQ.roa (hash: Ce1QjD72lAMkVrk9tsAIYNVsMGWhveRz8PigeWgSs88=)
5: kR23whFjS1yTPrK8lRsUC1IvToE.roa (hash: QZPua623BL753r2guNY8Q/Q1bYRMgfE3VvsbXCxTsdo=)
6: r6x-mCfX6y2HE8Fca-6L19rnZBI.roa (hash: uQHVblgOp1wekrgJVHdlCHMrkJ9aLpwbv/ZWjTHqqwM=)
7: rrn-hLlASc3QfQ_2G9XagIYTuhQ.roa (hash: 6mhOZyZWiBej5y33Jy7KbJNVz0VK2ieBWiaEGjbBwok=)
8: zQddJR0srh3UpgKOtESUaO1UkDw.roa (hash: tDBd3jYaumlCeJ61X+7zkMh6GIuzkfDLvRK2eN/iQ+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:be:1a:47:af:1f:e3:2f:3b:28:09:ce:e2:c1:bd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Validity
Not Before: Apr 27 07:01:20 2026 GMT
Not After : Apr 28 07:01:20 2026 GMT
Subject: CN=d6f78138dd30762d266762d6d2523d9502b4de3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:e4:3b:33:da:97:a8:3a:c3:ed:e0:d2:1d:
cc:bb:2c:13:f9:61:b8:d3:7f:6c:d3:a5:a9:1f:92:
1a:68:54:3c:7b:55:74:77:3a:c3:8f:4c:ec:3e:f5:
8b:dd:17:ac:13:e6:ff:8a:c8:dd:52:a0:98:8b:6c:
1b:15:1c:f5:1d:c9:17:fd:ce:87:94:97:47:57:c8:
06:bf:08:72:83:4d:20:77:2c:0f:6a:1d:fe:19:c4:
fc:0d:90:66:b5:d5:ef:35:d6:51:1c:53:3a:8b:dd:
77:38:2e:08:59:04:d0:41:f3:7c:e8:f1:46:df:0d:
51:8f:c1:ca:9a:34:60:52:a5:f5:42:07:13:9b:87:
6f:df:57:ef:17:d2:07:cd:dd:89:90:a3:69:59:8f:
05:51:8c:c3:a8:fa:58:8d:04:35:1e:61:fd:a1:80:
3c:83:d2:c9:bb:ad:26:ff:e6:71:42:c3:63:f4:39:
f1:c2:b9:f8:b4:5d:3d:cc:11:1f:ff:ea:c1:1a:6d:
77:dc:34:ee:9e:96:71:2d:13:b1:cd:51:23:30:85:
59:66:2c:1e:35:3a:fa:af:de:b1:8c:ba:06:01:97:
e6:88:0a:2b:b7:a0:0d:1a:7e:60:8f:05:c4:83:d2:
01:70:a4:1f:e2:95:7b:3b:a8:7c:fc:3c:ef:30:05:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F7:81:38:DD:30:76:2D:26:67:62:D6:D2:52:3D:95:02:B4:DE:3D
X509v3 Authority Key Identifier:
keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:53:5e:2f:2b:ad:7c:97:10:f8:20:c2:45:51:07:c5:9b:3e:
0a:2c:c9:3c:bb:1d:51:85:f1:f6:65:99:35:b8:c1:ba:6c:e5:
c1:c3:d5:c7:8b:18:0a:21:08:97:07:63:44:6a:73:93:04:3e:
97:b7:e9:b8:93:0e:c3:4b:d8:08:18:b2:f5:68:bf:52:7a:91:
5d:90:77:7b:70:26:71:10:b7:d9:5e:31:84:d1:6f:13:cb:1e:
7a:6d:85:f7:52:e7:3e:9f:1c:02:06:45:26:c0:dd:c7:93:4e:
80:a7:f8:90:12:11:6a:b4:ee:dc:1c:5b:69:85:aa:2a:cc:9e:
7a:02:c4:54:22:b7:39:60:1c:0c:f6:54:89:1c:4d:e1:77:19:
63:ef:78:c8:4d:fb:71:9d:a3:05:98:f7:78:b7:55:84:df:7b:
29:78:78:91:ed:2c:32:2d:10:2c:3b:db:e7:bb:2f:bf:5f:8c:
49:53:e0:56:34:98:49:46:35:c8:32:0c:ad:f2:a4:ec:1d:58:
9a:aa:7f:87:f3:aa:d1:6d:ac:12:f3:a9:18:34:fe:3f:a6:ef:
b6:4d:13:05:53:81:66:13:3d:43:c5:c7:4f:20:98:0a:25:4b:
ac:3e:92:02:54:00:13:1e:af:8d:9a:1b:9b:4c:75:51:9f:58:
07:a2:df:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:50 2026 by rpki-client