Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier: 46UGxJ8aVkFIi/oOUuj1BcgBbcA1xJKgZarp58HUuSU=
Subject key identifier: 87:F5:65:C9:57:36:96:16:38:03:D4:74:DF:DE:57:02:6E:BF:88:82
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 019DCCAABAED9625E51D88892B51623FD9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number: 0450
Signing time: Mon 27 Apr 2026 02:00:34 +0000
Manifest this update: Mon 27 Apr 2026 02:00:34 +0000
Manifest next update: Tue 28 Apr 2026 02:00:34 +0000
Files and hashes: 1: 6_ZblNm9ZRmYGkapxWHWsVXv62A.roa (hash: l1m5QGoRdp/fQXdkGDAgYT7UXYr7yNDfK4bT6u+JkJo=)
2: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: O/VfkseSLd64oQLYWiuJsp05t6O8p2DAdc1+2WF+foQ=)
3: nnVHZXt9DivgToJiSfHRWDPCX58.asa (hash: /8k8/1a46VaQnelGrFv4w1ybQa3EbefqWYHF9uEGkc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:ba:ed:96:25:e5:1d:88:89:2b:51:62:3f:d9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Apr 27 02:00:34 2026 GMT
Not After : Apr 28 02:00:34 2026 GMT
Subject: CN=87f565c9573696163803d474dfde57026ebf8882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:b3:c6:9d:3a:3c:ed:ce:e7:61:c2:b9:fd:
9a:31:a1:48:b3:32:c7:f7:c9:d3:81:65:4f:cd:b8:
ad:f7:04:5e:e6:59:14:63:f6:af:9a:c1:33:9a:54:
4a:44:ce:eb:00:98:2d:d8:fa:4c:c8:10:35:64:c6:
93:9a:b7:0a:07:5a:2e:56:9e:76:a6:fb:94:dd:7e:
c4:e1:da:7a:97:90:37:26:ec:e0:fa:a5:a0:c9:1a:
de:81:d7:1b:c2:8f:b7:25:44:4d:0e:87:c2:73:8b:
8c:10:f9:33:42:4c:b3:88:7c:00:3c:8f:71:f2:ce:
03:98:fd:77:4f:ff:6b:2f:09:9a:eb:25:51:6c:17:
43:de:ff:41:56:8e:70:ac:f7:d7:73:bf:da:f9:81:
af:ff:04:0e:0d:5d:80:aa:7d:4c:5e:07:2e:ac:24:
a7:b3:ac:e7:70:e2:61:f6:28:a2:aa:88:52:d4:f8:
58:b2:4e:59:6f:eb:cc:c0:68:82:25:8d:31:fd:dc:
00:06:25:d2:34:4f:3f:87:77:9e:fc:39:5d:d2:16:
ef:c5:ba:5f:2e:74:fe:7a:3c:a8:e2:81:b1:ca:3c:
38:f8:70:b6:cb:da:8d:90:9d:ad:1c:25:47:d1:be:
c2:a2:d7:c7:f5:a2:b3:51:34:3e:6d:9c:51:c1:f1:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F5:65:C9:57:36:96:16:38:03:D4:74:DF:DE:57:02:6E:BF:88:82
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:16:f2:b6:8d:06:08:58:22:93:cb:5d:76:b3:0b:b4:df:d2:
b8:e3:53:5c:2b:6a:54:f2:1d:15:f6:93:0c:2f:b5:d5:3e:a0:
e0:74:2a:65:80:fe:a1:9e:0b:45:25:62:ad:68:02:dc:85:f9:
8b:fb:99:68:82:e2:dc:60:42:fd:1b:0b:b7:c7:f0:41:c2:83:
87:5e:5a:ed:0e:81:6c:d3:20:50:6d:57:c3:20:fc:ac:87:53:
a0:cc:f6:7b:cb:99:23:d0:7b:0c:ed:cd:6b:de:59:05:84:20:
fd:d7:dd:9f:4c:1c:04:8b:3f:cd:f6:89:b9:09:a9:73:47:96:
a7:37:73:87:4b:be:81:67:25:d5:1a:52:2c:e5:fe:a2:f8:ae:
c7:b7:7a:e3:ba:c4:5e:68:72:98:a0:1a:d1:b9:b7:df:49:df:
5e:90:43:7b:4a:22:e8:a2:84:55:80:f9:ef:52:66:60:b4:b3:
56:cf:a1:d2:57:e3:5c:8d:e3:21:64:f3:08:d8:d2:ad:ba:27:
a7:4b:a5:58:c7:c7:78:a8:53:15:81:61:02:65:11:d2:7e:0b:
9a:c6:a2:59:f8:5a:ed:7b:0d:53:08:e5:0b:d5:d1:d4:1d:30:
3a:47:90:bf:db:0b:84:ae:b8:86:7a:11:8d:4c:65:24:50:02:
17:94:d0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:59:23 2026 by rpki-client