
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier: NfLwsIke60qLBNBjIrNxrasjK9wG45k6xTR/63PK8WI=
Subject key identifier: 7D:78:6A:D3:02:C4:DA:A0:56:5B:78:1B:18:87:7A:DB:62:72:21:B7
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 019E3184D6D654E9C1163198263E0BE706BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number: 0D09
Signing time: Sat 16 May 2026 16:00:49 +0000
Manifest this update: Sat 16 May 2026 16:00:49 +0000
Manifest next update: Sun 17 May 2026 16:00:49 +0000
Files and hashes: 1: 1-WOlFKgJ5fyuJ0mK_WXzxZSjJZ8.roa (hash: mA5SaPX5hOKD8NX3Hv1/uNqyTzg2PYZjKEyCT2Stnms=)
2: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: i0ASwxkQacZJAsT8cPUPva+rKMGfQ2cXvFMMeF4zDqY=)
3: qCla3aYy8lmkCd9GDBwAGdRopPY.roa (hash: yq0d/UWqcKfbvqZVTTAHu+E8rSvKS7DJ77n7pL88Lw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:84:d6:d6:54:e9:c1:16:31:98:26:3e:0b:e7:06:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: May 16 16:00:49 2026 GMT
Not After : May 17 16:00:49 2026 GMT
Subject: CN=7d786ad302c4daa0565b781b18877adb627221b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:8a:25:db:b7:61:cc:dc:dc:27:c5:57:ff:
91:83:52:53:d2:53:f9:b8:2e:d7:c5:76:0f:d8:74:
b5:d1:32:72:e6:f4:0a:66:2a:eb:a7:af:94:01:63:
d6:92:e7:f4:60:5e:6e:44:37:f3:54:a6:d7:b0:37:
ea:b9:57:06:75:9b:c1:cd:8e:52:da:f2:03:d2:8f:
aa:49:ed:00:a2:6c:f0:9f:3a:5e:0a:f6:94:ca:cc:
17:c0:7f:69:8f:c4:bc:05:56:f9:b2:73:39:22:64:
16:b2:02:df:92:f7:22:d5:ff:8a:78:c0:2f:77:8f:
1a:30:62:12:aa:8d:a2:93:b3:59:45:33:9c:09:48:
32:e8:f2:28:b0:d7:8f:28:26:41:66:c2:83:eb:7f:
e2:8a:a4:ad:92:0d:24:2e:58:5a:f0:6b:3c:03:93:
68:5c:8c:05:38:0a:e1:c1:45:6f:8e:23:58:99:e2:
40:9e:86:f3:13:54:83:40:fb:3b:c5:ec:7a:ba:6a:
a3:0b:6c:f7:68:8d:61:fa:82:89:e9:64:65:53:b9:
6d:08:bd:c7:53:bf:0a:e2:90:56:88:6d:62:97:79:
70:01:3e:97:71:13:35:67:db:81:9b:87:ec:11:79:
85:cf:89:b5:4a:cd:0f:19:af:1f:0e:2f:e7:0e:74:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:78:6A:D3:02:C4:DA:A0:56:5B:78:1B:18:87:7A:DB:62:72:21:B7
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bb:50:0c:1c:7c:9b:b8:b2:2a:21:65:04:55:61:70:b7:c0:
fc:5a:49:2c:94:a2:e1:22:ef:2b:5a:3c:74:56:a6:4f:83:ac:
5a:7b:48:47:e9:cc:99:d0:15:80:70:18:bc:21:90:54:e5:77:
b1:e4:2a:33:da:b3:03:e9:f3:e0:52:f9:22:61:da:7c:a5:15:
28:44:15:97:f6:f5:dc:70:8c:9c:6e:f0:fa:af:ec:fc:0d:40:
4d:6c:ca:11:77:e9:e7:eb:4b:c7:fb:99:16:63:6f:b7:75:78:
83:5b:e9:86:bb:77:1c:04:59:1c:14:da:93:2f:95:63:cb:48:
e1:11:e4:5d:d9:8b:72:fa:0d:76:54:d0:87:71:a7:8d:20:a2:
6c:33:bc:c1:52:17:0a:55:53:21:92:46:1c:3c:5a:6b:5a:64:
d1:4f:40:d7:79:6d:fb:14:5a:38:80:2a:49:c5:68:56:22:83:
56:bd:51:13:d6:bc:9a:e2:1d:75:8d:b4:d6:5c:8a:b1:f1:28:
c0:93:41:57:2b:ae:6c:c5:0d:50:fa:68:56:ff:b4:df:62:35:
34:0a:18:c0:ef:08:c5:9a:4e:e9:72:ed:5f:0d:f3:4e:9f:2a:
9a:cc:23:85:24:79:24:3a:f9:70:d1:72:7f:86:cc:50:d1:8c:
72:24:47:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:52 2026 by rpki-client