Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File: 7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier: mFJnNzM12LnhX49DuVdhyuIAjThB37nWI+pH3YZfPWI=
Subject key identifier: 94:6B:FB:6D:D2:EB:41:70:28:82:48:88:B9:A8:3A:F8:50:55:D4:68
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial: 019E300569855C4B48B403ADB3A64178D673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number: 0FDC
Signing time: Sat 16 May 2026 09:02:01 +0000
Manifest this update: Sat 16 May 2026 09:02:01 +0000
Manifest next update: Sun 17 May 2026 09:02:01 +0000
Files and hashes: 1: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: 2bXIAes70mjLuGLaM6OcilDxauXfjw0lnbbCO7phYM4=)
2: rkOQVmNrUrdY7_BGJo06hjnXKUQ.roa (hash: KQFoNA+jPIAj7lXy7/IWWZc0S9NISU/38W2iXUYI9HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:69:85:5c:4b:48:b4:03:ad:b3:a6:41:78:d6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Validity
Not Before: May 16 09:02:01 2026 GMT
Not After : May 17 09:02:01 2026 GMT
Subject: CN=946bfb6dd2eb417028824888b9a83af85055d468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:4f:26:51:f0:12:9d:d5:7a:69:7c:05:f6:
49:e2:98:ad:11:f9:3f:d0:14:c2:65:08:ab:e7:a1:
7e:c1:0f:3b:83:f6:05:b4:b9:7e:27:47:cf:d9:37:
c0:1d:cc:72:a9:a9:b1:b5:85:8e:d7:86:c2:f1:2b:
06:e5:0b:cb:60:35:ec:1e:7b:61:33:0b:26:ae:ea:
70:02:43:b5:3c:42:e3:5e:6d:28:a2:dd:fc:20:ac:
a0:51:9b:8c:f3:6f:1e:d2:04:7b:41:09:10:49:36:
c5:7b:82:35:fb:f7:74:c2:ed:d1:f1:c4:6e:37:d4:
a9:ac:c4:94:84:53:35:1f:a5:dc:e0:c8:bd:f0:64:
96:cd:14:36:e1:cb:87:bf:af:7d:f2:cf:2a:f1:b2:
b9:4d:eb:a5:a0:43:f0:72:5e:19:84:7d:83:0e:21:
8f:c3:74:1f:f5:88:e7:4e:76:cf:8a:69:f6:6a:a9:
b1:89:e9:cd:a6:f1:96:03:d9:db:eb:d8:e3:9a:67:
5c:0a:3f:83:e0:4f:66:da:1f:1a:33:d9:2d:fe:a6:
65:f5:c2:59:22:0b:4d:bd:f3:0a:e0:17:43:a0:dd:
c3:66:64:ba:e7:3a:a2:41:bb:0b:fa:ae:eb:9c:50:
ff:99:fa:0c:9c:b0:bf:ce:aa:da:a2:be:ce:a0:98:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6B:FB:6D:D2:EB:41:70:28:82:48:88:B9:A8:3A:F8:50:55:D4:68
X509v3 Authority Key Identifier:
keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2a:26:98:21:93:91:6c:fb:1e:0d:a1:a5:58:65:c8:17:ed:
d2:4c:17:94:e6:da:f8:28:f0:48:ab:03:d2:ec:63:65:cc:4d:
42:3a:a5:86:6f:fa:26:0e:97:ca:d0:57:33:f8:e5:4f:d1:d9:
bf:af:76:2b:1f:5c:70:50:f1:08:17:27:22:d1:9e:c1:fc:d0:
61:ea:40:43:15:69:ba:28:83:34:93:7a:87:bb:fb:57:16:16:
22:8b:76:04:0c:8d:5a:66:db:0b:de:d5:11:a2:82:c8:fe:54:
e2:d5:6b:35:24:75:da:61:cc:b0:eb:f5:96:c7:a7:70:55:21:
2d:55:ad:d5:fd:12:67:4a:16:69:5d:0e:5a:e3:70:13:35:b3:
16:5b:e1:2a:7e:90:80:2e:5d:c9:64:d9:3d:cf:87:7f:fc:07:
f0:0f:64:3f:0c:27:43:fc:fd:f3:db:ea:51:46:28:12:3a:74:
8d:69:95:7a:53:7d:da:ca:07:b9:f8:36:51:de:52:9d:c4:0f:
4f:ba:14:52:f2:e6:00:07:e3:92:3d:3d:c2:41:48:13:9e:b3:
24:48:cf:b9:e3:4c:a0:3c:39:da:3f:93:c3:0e:9a:35:01:0a:
64:9b:3a:cd:fa:7c:32:ad:18:42:f4:7a:51:46:13:83:88:b1:
f0:72:e2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:06 2026 by rpki-client