Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
File: 7GV-idqz-xXjuuDrGsf6yT32OF0.mft (raw, json)
Hash identifier: 6JMNFGhJKnRn3eDV+0/YN4WbSuZGz2BQ2UeulHznN1s=
Subject key identifier: 17:58:25:E9:CA:C7:51:57:EB:F7:49:52:6D:A2:25:57:A1:53:3E:32
Authority key identifier: EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
Certificate issuer: /CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Certificate serial: 019E30A9954871E0FBABE57699FE826F37AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
Manifest number: 0901
Signing time: Sat 16 May 2026 12:01:20 +0000
Manifest this update: Sat 16 May 2026 12:01:20 +0000
Manifest next update: Sun 17 May 2026 12:01:20 +0000
Files and hashes: 1: 7GV-idqz-xXjuuDrGsf6yT32OF0.crl (hash: wI+hQYwLkY/e/M0L/e35P+SRFHCwGSC4DBCTVkczsVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:95:48:71:e0:fb:ab:e5:76:99:fe:82:6f:37:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Validity
Not Before: May 16 12:01:20 2026 GMT
Not After : May 17 12:01:20 2026 GMT
Subject: CN=175825e9cac75157ebf749526da22557a1533e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:2c:54:b4:07:93:92:e0:83:3c:8c:20:ac:
80:48:bb:bb:fa:27:e4:6e:22:9a:9b:3c:3b:ff:7c:
05:1b:bf:d4:9b:98:53:e8:41:03:67:79:cb:0a:c1:
e2:e6:ba:db:bc:b0:e4:73:09:bc:fe:11:4f:d3:6b:
85:4e:5c:80:42:56:4f:af:ca:1b:6a:49:1c:e4:0b:
09:02:c8:d2:fb:50:5b:40:2b:be:9b:9d:f1:f4:ba:
05:d1:a4:4f:d6:89:f6:8c:7a:57:49:c9:ec:4f:eb:
1c:0c:1d:68:de:b7:ad:00:f7:4b:36:85:79:34:b5:
59:67:a3:48:d2:33:17:98:f2:d6:e5:f8:c2:19:52:
5d:ca:25:74:4e:f4:6d:ae:79:b2:44:95:93:f6:d4:
29:d4:94:be:34:70:cc:2d:97:9e:d1:37:f3:b5:36:
4d:50:4c:80:bf:54:c3:21:3b:31:57:a6:b3:ce:ac:
91:77:00:e0:41:0d:a0:3e:37:99:68:18:e3:98:a4:
e9:1f:1e:96:cd:ab:a6:2a:2e:52:70:0a:6a:cd:2b:
4f:e6:4e:55:4e:72:84:13:18:92:4b:f3:31:f6:53:
fa:4f:6e:3b:b4:23:1f:f4:c8:d4:6b:df:ee:d5:81:
1c:b6:ed:8c:7a:44:16:27:19:83:c1:d1:e0:55:6e:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:58:25:E9:CA:C7:51:57:EB:F7:49:52:6D:A2:25:57:A1:53:3E:32
X509v3 Authority Key Identifier:
keyid:EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a6:3b:80:a2:7e:13:b2:7c:79:ff:12:f3:38:6b:9e:99:29:
93:0f:b9:1f:0b:e7:e0:4b:cf:14:ad:d9:2c:f3:67:44:4b:89:
bb:f7:33:d1:fd:e6:19:ea:1c:28:c6:49:44:8a:5f:22:53:ad:
4c:95:3e:0a:f6:f9:0e:c4:5b:e5:fa:df:2d:67:93:85:6a:9f:
d8:ea:5c:5a:c0:bf:d3:4b:e4:eb:c5:55:0a:ff:ca:e3:76:80:
60:35:e5:94:40:b4:44:08:a9:82:03:7c:3b:2a:21:d2:4a:d6:
5d:62:de:a0:70:eb:ff:6c:0a:d6:66:e3:43:db:9a:b0:58:fb:
25:72:55:e8:d0:41:0e:9f:f0:72:08:c7:c6:a6:2f:2c:b4:d2:
ac:2d:6f:0f:69:7c:ff:7d:1a:44:a4:f8:4b:4d:b9:41:95:5c:
28:8b:7b:45:b2:f1:da:37:ab:7d:27:cb:db:a6:1d:a1:b3:1e:
a3:0c:a8:2f:bc:58:95:bf:cf:06:88:40:83:67:f7:33:56:e4:
b0:c7:2a:dd:54:f1:37:68:b8:0e:de:ad:6e:81:43:56:34:52:
4d:b9:ea:09:f8:3b:e8:c7:d3:d0:ca:e1:2a:62:f9:54:2b:72:
fd:ac:2a:ce:b5:0c:28:71:f9:b0:01:61:2d:19:4a:e7:64:bd:
94:66:8e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:20:58 2026 by rpki-client