Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
File: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft (raw, json)
Hash identifier: FKmTtU7VvUTcoUKzvv0el+SZ2GLVXYEHbWm34PKk+lo=
Subject key identifier: BF:21:06:DC:93:16:85:FB:F0:21:5C:19:35:00:22:8C:DF:47:EB:6C
Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Certificate issuer: /CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Certificate serial: 019E303B69176C36E4FD62E47F44D0CAF60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
Manifest number: 16B3
Signing time: Sat 16 May 2026 10:01:00 +0000
Manifest this update: Sat 16 May 2026 10:01:00 +0000
Manifest next update: Sun 17 May 2026 10:01:00 +0000
Files and hashes: 1: 2tKSrvE8w4OPUMtHHmn4NBgdIN0.roa (hash: xtQTDappKS+L7HJWwmh8B32VXucrBAKNvYHP3fwsAXE=)
2: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl (hash: Qgh/W6dUvXY9F44bUBwDa4G2C6E8kzEcxIe+XyWt8N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:69:17:6c:36:e4:fd:62:e4:7f:44:d0:ca:f6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Validity
Not Before: May 16 10:01:00 2026 GMT
Not After : May 17 10:01:00 2026 GMT
Subject: CN=bf2106dc931685fbf0215c193500228cdf47eb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:71:7f:f9:9c:62:5c:35:6d:fd:c6:6d:ec:
9e:3e:9e:e8:1d:e1:5b:41:ca:8e:5e:be:55:0a:f7:
d2:f4:29:2c:76:07:1f:c4:3b:81:1b:59:bd:e5:5d:
c3:8b:f7:5f:09:06:64:8a:e4:58:2d:b0:c8:3b:e7:
3a:8b:ad:f6:46:ac:4d:ae:72:70:07:59:cc:d2:8b:
47:fb:b6:68:d2:98:7f:fb:9c:87:81:93:6e:49:e9:
c8:e2:b4:40:30:a2:83:94:f9:a3:49:8f:87:50:a6:
dc:30:43:f7:ff:e4:eb:f7:a4:a8:25:78:18:ed:d8:
d9:47:5e:e2:e8:68:79:9f:35:9c:20:a1:c2:5d:7c:
ec:4b:d0:dc:c2:49:83:18:5a:c1:e8:a1:ea:16:4b:
da:cc:44:d6:70:b9:c1:25:95:61:40:b4:01:2d:93:
2a:ef:b1:b7:db:3d:06:9a:5f:d3:13:71:d0:9e:87:
dd:0e:1f:a2:48:e6:5f:08:05:54:47:d3:3f:cb:db:
b9:f1:42:03:f0:36:cd:95:81:04:43:87:e6:df:9c:
b9:7c:31:9e:e5:77:81:19:d6:5e:34:c7:8c:f7:1e:
5f:ba:fd:c8:8b:49:41:42:80:a6:b1:14:40:54:b8:
35:76:76:fb:5f:b9:81:81:55:93:3f:14:0b:67:fa:
82:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:21:06:DC:93:16:85:FB:F0:21:5C:19:35:00:22:8C:DF:47:EB:6C
X509v3 Authority Key Identifier:
keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6d:89:82:9f:33:85:29:1a:f9:59:d1:6a:be:01:a3:0f:73:
ff:dc:5a:4c:0c:e5:07:dd:00:39:a9:c1:46:3d:da:4f:f2:86:
d3:0e:85:dc:29:17:3a:8f:40:06:3d:42:1e:ea:89:3a:9d:bd:
c2:c0:8d:e3:e9:82:80:20:ff:77:bf:46:d4:63:71:33:51:30:
b5:88:5c:b4:3d:9e:08:37:55:c6:37:d4:c1:dd:80:80:6b:4f:
3c:2b:be:2b:67:59:12:70:ba:3a:60:4a:dc:ed:5f:21:d4:4e:
9e:79:0b:ee:7c:42:71:b7:c6:41:1a:cf:3e:ca:89:db:00:46:
96:77:eb:e6:e8:9c:ac:fe:6f:e6:b2:52:aa:63:1a:35:2c:e9:
a8:eb:ef:82:dd:ec:39:6c:7b:31:b7:eb:15:91:62:21:0b:79:
b2:e1:68:79:90:33:99:b1:95:f5:76:d4:d6:2a:b8:9a:79:a4:
4c:9c:c5:01:09:54:f8:a4:f4:69:d7:e8:f6:34:eb:f1:6f:b1:
66:ae:5a:58:2d:69:8b:7d:3b:06:86:19:03:1d:a2:cf:20:41:
c8:f1:57:ae:e6:b0:72:95:ed:68:85:dc:09:4c:64:46:2a:05:
a5:f8:3b:7a:96:ba:f4:a1:20:7c:f7:af:c4:1f:ec:bd:21:9d:
cc:11:87:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:30 2026 by rpki-client