Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
File: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft (raw, json)
Hash identifier: hbmhpD0gFu08biSzHB6f4iGEP5ew/WcB3CUCBzCVCGo=
Subject key identifier: C6:97:BB:CE:6E:BB:BD:2C:C1:F9:7D:B2:75:D6:71:5A:4F:35:16:B3
Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
Certificate issuer: /CN=ed32ef0caf0a057529fb928f76962a7425390dba
Certificate serial: 019DCFE2FB021CBC40DFDEAD2D9FA662552A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
Manifest number: 0393
Signing time: Mon 27 Apr 2026 17:00:52 +0000
Manifest this update: Mon 27 Apr 2026 17:00:52 +0000
Manifest next update: Tue 28 Apr 2026 17:00:52 +0000
Files and hashes: 1: 4ck5stj-Nruh5mOMgR2qNBplGK4.roa (hash: pnWvPZcJH3rubSBQDARfPzyblV+Aac+zG4Cuud9DAE8=)
2: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl (hash: HUUKGufHawnI1nT5vEbCKFBwx4fTzG5aHPxve2CQvPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e2:fb:02:1c:bc:40:df:de:ad:2d:9f:a6:62:55:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba
Validity
Not Before: Apr 27 17:00:52 2026 GMT
Not After : Apr 28 17:00:52 2026 GMT
Subject: CN=c697bbce6ebbbd2cc1f97db275d6715a4f3516b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3a:24:68:53:d6:aa:77:5f:3b:65:40:57:48:
a6:90:69:df:e9:8d:e2:7c:80:48:cc:89:cb:34:99:
49:29:11:cf:06:87:73:fc:9e:fc:55:79:a7:fb:c7:
89:2f:b8:f5:83:c5:43:0d:04:a0:1f:49:e2:37:09:
ef:43:5a:08:26:f2:fd:82:54:ae:c3:e3:37:01:fd:
f3:db:2c:61:95:94:42:85:13:d8:40:23:66:bf:fe:
70:b8:6b:a6:cd:38:8e:67:30:c2:cd:b4:92:12:2c:
2b:bc:b5:f2:69:77:c4:b9:9f:5d:66:8b:37:3f:5b:
bb:e9:ed:86:11:46:93:f7:d6:58:02:a1:96:a0:f0:
62:16:fe:49:6c:6a:da:95:ad:75:29:b4:ba:db:d1:
b5:4e:e0:14:bc:5c:27:e8:c6:8c:c6:0e:57:a8:6f:
cd:74:ba:0f:9f:1a:0a:48:cf:c4:34:af:8f:f4:eb:
19:45:2c:08:3b:64:6c:91:7a:00:ee:ac:12:7b:b7:
09:7e:32:0d:8a:f7:56:19:c9:22:6e:70:33:32:74:
a0:6e:6a:b5:ce:c2:18:0b:be:49:8a:d3:6b:ac:86:
19:96:de:7f:19:3f:93:01:20:43:ce:18:2e:ad:b1:
a4:54:d4:16:3a:80:2a:2c:82:77:94:c0:8a:c0:ef:
75:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:97:BB:CE:6E:BB:BD:2C:C1:F9:7D:B2:75:D6:71:5A:4F:35:16:B3
X509v3 Authority Key Identifier:
keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ab:c6:d6:c3:16:e3:58:e3:1b:8d:83:30:12:a9:6f:4b:ed:
9a:13:a2:63:c4:cd:ab:fd:e9:6e:59:19:de:a2:1d:2a:47:9d:
f6:0c:55:3e:4e:a2:ad:20:6a:d1:2f:5e:8c:91:15:11:2b:3e:
46:26:28:ba:74:f7:71:b7:f0:29:5a:26:e2:2a:da:42:e0:62:
26:e6:0c:e3:4d:3b:7b:0f:87:fc:21:d7:c7:13:00:08:7f:c2:
ad:82:af:f1:98:c4:fa:28:f3:3e:c6:07:08:d9:aa:0f:6b:dd:
4b:ca:3a:68:d7:09:fc:9e:5b:ea:c2:ed:9c:c1:a5:f2:9e:60:
97:f0:23:37:58:c5:d0:21:39:1e:d0:13:e8:4e:a1:67:15:ff:
d1:80:2b:79:68:4a:ef:61:2e:48:1b:2a:3b:d8:bc:33:a6:3f:
d2:f0:5f:65:4f:a4:bb:62:e6:19:99:90:56:a7:b5:90:2b:dd:
11:88:b6:7b:aa:bb:38:fc:70:34:60:d6:e8:55:78:5c:13:22:
74:f8:0e:e4:3c:64:19:91:d0:c3:18:dc:b2:dd:38:59:be:f1:
41:9c:60:09:c6:e4:6e:5c:b3:54:06:60:f1:eb:a2:70:ca:63:
65:cc:30:7a:ee:47:39:13:70:f9:c5:df:ce:54:7f:9d:09:90:
78:31:32:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:33:02 2026 by rpki-client