Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier: QPkR3z2iyjqEWTqzyVw9gm6PFB3meVYPPFhKBYU8b+Q=
Subject key identifier: 71:E5:EA:D2:08:C5:AC:62:F0:00:FB:63:F2:48:23:F3:40:7B:14:22
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial: 019DCFAC576BF7450705A487C2801A6E7B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number: 0CEC
Signing time: Mon 27 Apr 2026 16:01:11 +0000
Manifest this update: Mon 27 Apr 2026 16:01:11 +0000
Manifest next update: Tue 28 Apr 2026 16:01:11 +0000
Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: Nlv3PRQDha1eySzeydR5bo/bZ/ddTkJ79raw8ZReHwo=)
2: BLLh5nNCz1s5if2pHYByIfYWqoE.roa (hash: EPJ+RLaqu85xGvwiEKDRnHSjYD9ruTYxv3tR7VjbDJs=)
3: E7Yzs4RQ5PAWanrzJaRetL_vIW4.roa (hash: ZfDaAmo4Ze/Cj58O8IkcEHyg6puoaRdc7XWQV2TfV6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:57:6b:f7:45:07:05:a4:87:c2:80:1a:6e:7b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Validity
Not Before: Apr 27 16:01:11 2026 GMT
Not After : Apr 28 16:01:11 2026 GMT
Subject: CN=71e5ead208c5ac62f000fb63f24823f3407b1422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0d:39:f9:a4:e6:b5:77:0c:37:fb:ec:e4:1c:
b9:f1:81:c8:d3:a2:fb:49:28:3f:62:85:4d:71:0d:
18:23:1e:0e:55:97:a4:86:87:a6:9e:4e:d0:3d:28:
81:63:ab:f5:8e:e5:38:c8:a3:7c:5c:92:75:b5:a9:
2d:4b:67:a9:86:92:92:7c:ad:35:e0:61:eb:a4:26:
be:32:81:99:df:75:50:ae:e7:66:18:24:0a:cc:4f:
22:78:9f:f2:e7:b6:b4:39:00:07:20:32:09:c7:a2:
1a:bb:72:03:2f:6e:c9:f3:ed:af:61:f4:3e:00:1a:
67:42:ac:d8:5b:78:78:d9:f9:83:8e:f0:ec:9d:fa:
b1:c6:59:ae:55:6b:b9:b2:a7:8a:9e:33:fa:c1:e0:
a0:cf:62:9f:6d:73:85:7c:b3:6f:11:5c:0b:b8:36:
08:de:79:79:a5:62:b3:91:da:89:ce:3c:f6:be:de:
2e:37:ce:44:2d:fe:ff:95:03:23:66:cd:e6:e2:6a:
7b:dc:fa:4d:8c:09:cf:60:5b:79:9a:da:51:d3:4a:
1b:27:0d:17:fe:57:9e:0e:c2:04:4c:0c:75:ba:76:
4d:93:3e:14:10:73:bc:de:49:e1:0e:4c:0b:24:bf:
40:aa:bb:95:d1:c7:98:3e:12:03:49:a0:65:8c:91:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E5:EA:D2:08:C5:AC:62:F0:00:FB:63:F2:48:23:F3:40:7B:14:22
X509v3 Authority Key Identifier:
keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3c:89:9f:4c:31:35:99:a5:25:71:18:e9:c6:bb:3b:8b:34:
fd:23:c5:35:5f:d0:4f:11:85:37:ad:80:87:20:f2:85:2b:4b:
b4:b4:c3:06:f9:c0:e8:03:95:89:ff:8a:38:5b:2e:1d:e8:ff:
7c:da:28:c5:03:b1:8c:e8:54:3c:be:86:b1:d7:97:1e:30:02:
a9:76:55:4d:f8:e2:42:df:59:22:a7:a1:92:ac:7f:c9:97:fd:
f3:f1:db:42:3f:42:63:80:93:cf:40:2e:0c:41:72:12:71:8d:
37:60:fa:0a:b3:90:25:50:9b:70:88:15:10:b4:f7:d3:be:05:
1e:c7:a8:cf:1f:c5:39:c8:89:6d:ff:b9:6f:f8:05:10:09:53:
cf:93:37:53:93:40:e0:1f:37:a9:9b:86:71:82:40:21:f2:71:
20:14:67:04:e1:be:f2:fd:23:3d:43:90:65:9b:24:71:54:de:
3e:bf:21:64:63:3d:d2:28:05:0f:4a:af:fd:b9:6a:8a:67:4c:
30:24:07:6c:37:8f:6c:44:4d:f9:78:0a:11:63:46:51:a3:0b:
64:3e:a3:f2:f8:62:ae:ed:d5:c6:af:b6:ed:e2:b0:28:07:86:
3d:7c:7f:08:a8:1e:6c:dd:fa:bc:c6:73:36:5a:ca:36:aa:35:
9a:f4:08:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:45:58 2026 by rpki-client