Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: kZXIVuiR45TTH2WyEGHaRk1ho5OrebarNR+CkWRYn0w=
Subject key identifier: C4:32:86:E2:C0:7C:05:AA:C4:8F:65:79:7E:16:D2:F7:D9:8B:6B:60
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 019DCE6361123DE655A796DD912A766F8EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 16A7
Signing time: Mon 27 Apr 2026 10:01:52 +0000
Manifest this update: Mon 27 Apr 2026 10:01:52 +0000
Manifest next update: Tue 28 Apr 2026 10:01:52 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: rA4AvFLhrxQiJ0QIfKNVco/mdI7dPOreEGXjz3DQVQ0=)
2: 85hHBUSy8Y2Mc7vYU29WfYNmQrs.roa (hash: hECfZ/fS6sGLnY/Td9cShCJ8J6B4XtgL9wvigKz0Uo8=)
3: LBH8ztFntHz17Sq_yk4WOvpZIOI.roa (hash: tYe43lNMSz/FpD84gMI0wKiTsaNLmmzOrcD2RhXlgfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:61:12:3d:e6:55:a7:96:dd:91:2a:76:6f:8e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Apr 27 10:01:52 2026 GMT
Not After : Apr 28 10:01:52 2026 GMT
Subject: CN=c43286e2c07c05aac48f65797e16d2f7d98b6b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:6c:26:8a:b1:90:0f:fb:bf:a9:1f:5f:ff:
f5:21:09:67:9f:7e:48:a5:50:e1:fb:74:4a:d5:f6:
90:54:4f:9d:07:5d:51:69:26:2d:d6:ce:4c:80:4a:
9d:4f:8b:68:d6:5e:fc:fe:b7:4d:02:82:5c:6a:5c:
30:e2:da:47:4d:5d:50:9a:d6:cd:07:af:16:02:d3:
ea:9a:ed:eb:06:ae:87:71:9f:39:01:2e:49:69:d2:
b8:61:40:6c:80:c2:09:11:ff:8a:2f:5e:6c:f0:2e:
3b:59:70:c9:27:7e:ff:4d:ec:74:7b:da:58:55:48:
e0:f8:c0:92:3a:31:37:02:1b:a8:f0:24:8b:0d:4b:
f7:6e:4f:81:09:85:3e:5f:1f:0a:68:99:7e:af:68:
4a:17:7b:85:db:d9:8a:38:21:e1:89:fd:62:24:67:
f0:c8:51:8b:fd:66:25:ec:ec:ba:5e:63:0c:86:c4:
52:ac:1d:54:af:e8:88:54:f6:b8:83:c0:b0:c0:ec:
2e:cc:a7:3b:a9:83:45:fc:1f:b8:5a:77:b7:71:1b:
c4:19:38:29:12:36:d6:8b:ea:86:f9:b9:fd:e7:56:
08:c3:c2:98:96:e9:62:d5:51:56:33:76:a1:cb:14:
5d:6e:98:2e:2d:6a:b9:f3:dd:f9:91:3f:4b:90:b9:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:32:86:E2:C0:7C:05:AA:C4:8F:65:79:7E:16:D2:F7:D9:8B:6B:60
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a5:55:ef:f4:55:2b:20:6d:69:6c:be:d2:6a:69:3a:a7:78:
d0:5b:ee:6f:dc:9a:d0:35:93:36:af:ac:c7:63:91:d3:c5:4e:
1b:39:31:60:65:a5:f6:1c:31:4b:d1:4a:85:ea:b8:f2:c5:a1:
69:2b:d7:72:1d:11:c5:50:93:86:9c:b5:e8:86:d6:44:cf:82:
9f:70:aa:be:00:18:56:25:82:22:b4:9f:e0:cc:28:68:d3:58:
6c:2b:68:f3:77:5a:98:6d:a2:b4:b1:42:53:61:bb:8c:13:d8:
09:fc:14:4d:3c:d3:22:42:26:f7:fc:21:a9:3a:15:83:18:f3:
fe:74:24:2d:74:80:5d:35:5a:13:47:a2:32:58:31:5f:9a:90:
9d:ae:6c:a0:d4:09:9a:9e:b6:4c:b7:f5:7a:7e:89:75:08:89:
eb:f1:d1:b7:6f:9a:21:19:ca:e2:20:d8:0b:1a:de:93:d0:d8:
25:f7:06:3e:84:a9:54:f0:81:19:4a:4c:db:b3:df:b8:3c:45:
a7:e7:67:ed:dd:bc:d1:31:6e:ae:95:72:92:30:f8:28:3d:ab:
2e:29:2d:0b:ce:ab:c0:61:a8:70:1e:f1:9a:3e:d5:13:9d:9e:
12:92:44:a0:e8:41:ae:88:17:1b:75:62:34:e3:a1:f1:2d:d5:
79:79:7f:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OY2ESPeZVp5bdkSp2b47fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMmU4MjFkODhkZTdhMDExMzQxNzA0MjAyMzQ2ZjdjMmJi
OWViY2YwHhcNMjYwNDI3MTAwMTUyWhcNMjYwNDI4MTAwMTUyWjAzMTEwLwYDVQQD
EyhjNDMyODZlMmMwN2MwNWFhYzQ4ZjY1Nzk3ZTE2ZDJmN2Q5OGI2YjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1lsJoqxkA/7v6kfX//1IQlnn35I
pVDh+3RK1faQVE+dB11RaSYt1s5MgEqdT4to1l78/rdNAoJcalww4tpHTV1QmtbN
B68WAtPqmu3rBq6HcZ85AS5JadK4YUBsgMIJEf+KL15s8C47WXDJJ37/Tex0e9pY
VUjg+MCSOjE3Ahuo8CSLDUv3bk+BCYU+Xx8KaJl+r2hKF3uF29mKOCHhif1iJGfw
yFGL/WYl7Oy6XmMMhsRSrB1Ur+iIVPa4g8CwwOwuzKc7qYNF/B+4Wne3cRvEGTgp
EjbWi+qG+bn951YIw8KYluli1VFWM3ahyxRdbpguLWq58935kT9LkLm7WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQyhuLAfAWqxI9leX4W0vfZi2tgMB8GA1UdIwQY
MBaAFOwugh2I3noBE0FwQgI0b3wruevPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZGRhNGYtZjBjNy00MDA4LTlhYjkt
ZGZhMGI4MDUyNjE0LzEvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZGRhNGYtZjBjNy00MDA4LTlhYjktZGZhMGI4MDUyNjE0
LzEvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKVV7/RV
KyBtaWy+0mppOqd40Fvub9ya0DWTNq+sx2OR08VOGzkxYGWl9hwxS9FKheq48sWh
aSvXch0RxVCThpy16IbWRM+Cn3CqvgAYViWCIrSf4MwoaNNYbCto83damG2itLFC
U2G7jBPYCfwUTTzTIkIm9/whqToVgxjz/nQkLXSAXTVaE0eiMlgxX5qQna5soNQJ
mp62TLf1en6JdQiJ6/HRt2+aIRnK4iDYCxrek9DYJfcGPoSpVPCBGUpM27PfuDxF
p+dn7d280TFurpVykjD4KD2rLiktC86rwGGocB7xmj7VE52eEpJEoOhBrogXG3Vi
NOOh8S3VeXl/Xg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:13:39 2026 by rpki-client