Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier: jW8fqedwQQP2JSiQsiZg8/O8ITrQVxbHVA2XFOR62lY=
Subject key identifier: D4:5D:B6:79:38:CF:C1:91:7F:C5:3C:A6:57:44:BD:5A:79:81:C5:3A
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 019F1D2119E813DD1F8370EA05BEC2588EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number: 0D83
Signing time: Wed 01 Jul 2026 10:02:16 +0000
Manifest this update: Wed 01 Jul 2026 10:02:16 +0000
Manifest next update: Thu 02 Jul 2026 10:02:16 +0000
Files and hashes: 1: 1-WOlFKgJ5fyuJ0mK_WXzxZSjJZ8.roa (hash: mA5SaPX5hOKD8NX3Hv1/uNqyTzg2PYZjKEyCT2Stnms=)
2: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: IKXv4I9edP+fB0XyaPGtuTBGKqwlPmh9nbQW3XebtqI=)
3: qCla3aYy8lmkCd9GDBwAGdRopPY.roa (hash: yq0d/UWqcKfbvqZVTTAHu+E8rSvKS7DJ77n7pL88Lw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:21:19:e8:13:dd:1f:83:70:ea:05:be:c2:58:8e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: Jul 1 10:02:16 2026 GMT
Not After : Jul 2 10:02:16 2026 GMT
Subject: CN=d45db67938cfc1917fc53ca65744bd5a7981c53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:2f:1d:54:ad:66:a4:1c:56:da:23:c4:2b:
ac:a6:1e:80:a4:1b:2c:d6:76:69:1f:5c:3d:3f:34:
9a:f6:4f:46:16:2a:62:15:db:ed:33:c8:84:61:eb:
7a:31:3f:9c:17:18:44:9f:c9:18:2f:31:1f:84:bd:
1b:18:f0:a2:11:ec:6f:64:5f:c1:b3:79:b5:1a:ec:
21:6d:f1:5b:99:83:ee:8e:d0:6d:9c:dd:91:d0:7c:
47:61:0f:9b:08:8b:07:db:71:b8:52:a6:ae:9d:7c:
2d:ca:96:99:14:4b:42:bc:cd:a8:e2:08:97:2e:1b:
52:e5:13:95:ed:5f:89:a7:9f:df:25:04:67:98:0c:
7a:b6:b1:53:b5:54:ce:0f:71:27:c9:00:f6:88:88:
c9:60:de:e8:67:6f:3a:65:9b:8c:e3:06:42:20:22:
20:c6:02:f1:9b:0e:5c:31:5c:8e:4b:99:61:c3:01:
e5:4c:05:36:7b:94:73:c4:86:59:9b:38:f9:21:2a:
a1:9e:47:77:12:d7:2b:64:e4:e8:35:8c:9f:0d:e4:
22:43:13:4e:2a:9f:3d:94:46:22:9f:bf:8c:45:d9:
79:55:1a:f2:fa:8e:2c:ba:d1:d3:c4:60:1c:5e:63:
26:15:5e:49:ac:b2:ff:03:a9:d6:85:fd:f2:d2:c3:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5D:B6:79:38:CF:C1:91:7F:C5:3C:A6:57:44:BD:5A:79:81:C5:3A
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e2:97:f4:83:35:8b:b7:d7:5d:63:1f:30:d9:8a:b1:f7:79:
1f:16:50:0f:96:b2:62:c8:f4:a7:db:d4:3c:18:ac:53:d4:22:
4e:8a:a2:5f:52:9e:bd:ac:78:e4:ea:09:7f:e9:b1:92:e6:3e:
b2:25:9a:75:9c:c7:98:bb:54:ba:69:16:a3:37:49:d7:d6:91:
c2:85:be:2c:6b:ed:a1:2f:e2:6e:59:49:3e:52:21:e2:12:ac:
45:d4:de:93:c3:fb:86:4b:74:38:53:80:71:2d:0d:b6:f9:c3:
08:2b:cd:8f:ea:ec:0f:e5:03:9a:4b:50:4f:0f:b3:34:af:22:
52:66:5e:15:34:35:6b:7a:79:bc:64:9b:95:d4:d6:96:e2:ea:
bd:fd:fd:a8:5b:ac:35:ec:e2:9f:77:f4:23:9c:51:58:0f:90:
cb:ab:c4:5c:7a:64:4d:98:cf:ae:7d:6a:f9:e5:c5:79:bb:22:
20:7e:f3:47:3a:60:1d:23:7f:34:96:8b:9f:12:00:b3:c1:87:
a2:c9:24:bb:02:9a:02:7b:2e:72:0a:38:38:42:1b:71:78:06:
ca:58:97:e4:ad:65:04:8d:44:31:b1:16:40:db:4e:58:93:01:
0e:33:83:cd:7d:8d:22:bb:00:c8:3e:58:f4:c9:73:5d:4a:ec:
b5:28:05:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 14:49:42 2026 by rpki-client