Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File: 7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier: gtsNuYOcac1673phPpmEYQOH/qBrggk9/ensA3Uesak=
Subject key identifier: FB:FA:CF:4D:B8:B7:E7:62:12:DD:C7:ED:78:BC:B4:30:9B:2D:4A:A4
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial: 019E2F602DBECC6DFF45D0EA20C396713922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number: 0F90
Signing time: Sat 16 May 2026 06:01:32 +0000
Manifest this update: Sat 16 May 2026 06:01:32 +0000
Manifest next update: Sun 17 May 2026 06:01:32 +0000
Files and hashes: 1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: iEt1xiZ1AKf3cCHbX4ut6pD8sOi87lyY+Dbfb/GzcXc=)
2: Z0WVwWptGEGRyg-sh820wNyCLqg.roa (hash: +yXI8Hiac4a98uMpERPin9vZe08d6SLlySsDllVTAlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:60:2d:be:cc:6d:ff:45:d0:ea:20:c3:96:71:39:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Validity
Not Before: May 16 06:01:32 2026 GMT
Not After : May 17 06:01:32 2026 GMT
Subject: CN=fbfacf4db8b7e76212ddc7ed78bcb4309b2d4aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:99:4f:3a:1b:84:3f:de:26:a6:c6:57:68:
a8:97:f5:ac:d4:a0:35:a0:9e:00:5b:a0:3f:57:89:
70:0d:02:d4:88:60:0e:a3:69:d8:e1:cf:5d:f1:77:
47:76:01:d0:4a:b6:ec:71:04:ad:2a:d0:c0:20:e0:
5c:b7:45:09:e5:f3:0f:f9:ed:2a:3e:d5:4d:d8:98:
f1:57:96:4d:cb:15:e1:e6:95:59:db:e7:4e:3a:06:
c7:3a:c5:29:20:c4:eb:40:07:98:cc:5c:3b:cc:e6:
92:09:0e:26:ac:1f:45:eb:b2:16:99:1b:78:a9:0a:
b6:e2:8f:0f:00:6c:e1:50:77:21:83:b5:8d:26:f4:
00:e0:2b:dd:b4:fb:9d:a8:4f:9c:1c:2c:5e:40:82:
c9:09:4e:ad:e2:4a:10:a7:b4:61:89:37:e0:29:0a:
08:a0:70:7b:d9:ef:49:9d:5a:20:04:12:71:87:01:
5a:ea:45:97:09:d8:16:f8:9c:2e:55:38:a1:23:3e:
fc:cf:ef:72:f1:4c:14:bc:90:09:8e:9e:b7:23:6e:
0d:ef:c6:b2:ee:a5:47:95:85:5f:e8:96:e5:28:98:
64:eb:1f:f0:43:dd:b6:7a:43:35:3c:a5:50:cf:a0:
85:e0:78:16:82:03:49:94:14:6b:63:13:ee:33:81:
9e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FA:CF:4D:B8:B7:E7:62:12:DD:C7:ED:78:BC:B4:30:9B:2D:4A:A4
X509v3 Authority Key Identifier:
keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cd:e0:85:0e:df:3e:c1:58:af:bc:d7:5a:b3:27:a1:06:57:
19:28:26:25:56:70:42:c3:11:11:0f:32:09:7d:f9:40:63:d1:
74:3a:90:10:a3:78:97:01:43:2f:aa:9f:28:62:10:9d:48:0d:
aa:bf:fb:30:17:3c:e2:df:4a:3a:ec:3f:77:65:57:56:59:81:
9b:bd:1e:c2:51:60:26:1b:3d:bc:5e:3a:7f:89:8b:bd:82:b4:
a8:a0:03:ea:bc:92:dc:2a:6c:63:d4:22:43:08:48:8d:71:19:
df:7d:12:10:32:08:2e:4f:90:fc:50:cc:48:f7:fe:fb:4f:9f:
07:ec:a6:28:11:4a:4b:17:e2:3d:76:20:01:00:a9:c6:8d:6e:
cd:74:28:5b:a6:6d:9f:7c:37:96:93:10:d1:05:ad:99:96:ba:
aa:7a:9a:56:fd:72:5e:22:f1:4a:a2:71:c5:40:50:fc:79:86:
0e:aa:33:50:0f:97:16:7c:7d:87:e9:eb:57:44:45:90:51:f4:
f1:0a:9b:1f:c3:bc:29:5e:e6:5c:fe:76:99:45:c3:56:d0:1f:
2d:0d:10:6d:79:d7:f3:78:ef:d7:21:54:e4:1b:6f:6e:f8:fb:
97:fa:97:59:ff:9e:56:35:14:be:ef:32:59:9e:c5:d5:a8:27:
a5:62:19:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:28 2026 by rpki-client