Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
File: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft (raw, json)
Hash identifier: DLjzB9tO6Jnce9WV3xyaCkMvbG7AsEGbOOhFH9EsGKo=
Subject key identifier: 90:BC:91:4B:8E:25:44:FA:AA:84:A6:E1:EB:08:16:72:6A:96:F7:65
Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
Certificate issuer: /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Certificate serial: 019E31BC3666C9A6A54509A69C96922E42CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 17:01:18 +0000
Manifest this update: Sat 16 May 2026 17:01:18 +0000
Manifest next update: Sun 17 May 2026 17:01:18 +0000
Files and hashes: 1: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl (hash: c4IeCKwTF7Bj76zER6vXiuKaAgTyrbOVo5vH/Fy2WZI=)
2: aTDLH8OzshREg-8mq0j-dLNvoVA.roa (hash: bWxd+gcoFiIXVBKwuiK0uKoGEVScpNqYAsExPghzTho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:36:66:c9:a6:a5:45:09:a6:9c:96:92:2e:42:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Validity
Not Before: May 16 17:01:18 2026 GMT
Not After : May 17 17:01:18 2026 GMT
Subject: CN=90bc914b8e2544faaa84a6e1eb0816726a96f765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ca:2d:8f:eb:f1:91:55:b2:a9:d0:cf:32:69:
9d:8d:0e:0e:e9:bf:bd:e6:39:12:6f:64:2a:69:5a:
bc:64:a8:60:ce:36:8f:27:59:84:c9:68:46:e5:fb:
8c:4d:f2:75:26:c5:77:3e:78:50:6a:61:7d:3b:21:
5b:49:b8:bb:e2:45:08:53:4c:fe:2a:b3:91:ed:67:
af:c0:7f:3e:af:0a:e5:04:ee:bb:af:78:23:e6:93:
b9:d1:2f:4b:53:3b:72:dd:68:12:04:42:c0:d5:54:
98:25:81:2a:52:fd:2e:80:db:d6:22:a4:c6:87:c5:
ab:74:6c:b1:84:4a:77:ff:e1:21:62:7b:e1:e5:eb:
59:bb:cb:11:36:52:32:fb:76:17:f4:a0:3f:bd:98:
80:15:ab:ae:f5:5a:ac:a0:94:84:9f:b8:4c:d1:f4:
ca:80:2d:6b:30:66:50:5a:77:f0:cb:84:9a:71:ce:
c9:6b:08:1c:11:2c:5e:31:20:64:4b:99:f6:da:99:
09:89:d4:35:e1:87:07:ed:38:bc:ae:c3:40:72:c1:
4e:e6:b7:e5:a6:c4:89:00:5c:6a:57:94:4b:47:14:
ec:a2:fe:e9:97:d3:52:85:50:3f:dc:bb:2c:fb:eb:
a9:f0:e2:4d:d3:1b:8d:5c:42:7c:c0:03:be:16:b7:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BC:91:4B:8E:25:44:FA:AA:84:A6:E1:EB:08:16:72:6A:96:F7:65
X509v3 Authority Key Identifier:
keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:41:26:78:da:bb:06:f4:9a:9f:6d:cd:7c:71:65:03:38:a7:
ff:66:1d:7c:ac:81:18:59:ae:4c:06:e8:1c:cf:10:49:39:77:
e9:7f:1e:88:e2:86:33:38:fb:5f:f9:8b:cd:29:32:c7:74:f6:
3b:8e:cf:fc:22:60:b6:99:07:95:97:9b:df:3c:f8:2b:13:ee:
74:ec:7d:ba:74:d4:26:6c:65:df:ff:d9:58:70:6f:6c:ec:64:
0a:99:e5:f4:e7:ea:ac:d6:93:8f:0c:64:01:9d:a1:3c:ec:ef:
fc:2b:9a:84:cd:6a:63:ac:70:f0:e2:d8:a5:1d:0d:48:6d:da:
de:2f:e6:fd:03:67:40:fd:21:90:b3:22:96:27:49:d8:31:1d:
d2:ea:e8:a9:5f:7e:02:bf:ea:ac:0c:41:4e:38:f6:0d:bd:03:
ff:47:14:14:ff:8f:5b:66:ba:58:9f:20:0a:12:35:5a:9b:f9:
25:ed:fa:69:78:07:eb:e3:4a:86:33:0e:77:e0:f7:3a:8f:c1:
06:f3:66:0d:5e:80:5c:79:2e:13:b4:85:10:cc:99:8f:b8:fd:
51:b0:b2:3d:f6:f7:b4:cc:f9:23:a4:61:57:03:17:07:39:cc:
73:b6:d8:e9:b6:7c:27:4e:b2:a8:ab:52:fc:14:c4:07:3e:88:
92:ec:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:55 2026 by rpki-client