Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier: vzibE+NEJyqVZwmVCBOA96gvdC+ce/Rp7iUbDdH4im4=
Subject key identifier: BC:26:FC:1D:94:35:72:FD:CE:73:FC:BA:C5:74:2A:43:27:CB:1E:17
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial: 019E303BADF420424C50F9608D843240280C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number: 0693
Signing time: Sat 16 May 2026 10:01:17 +0000
Manifest this update: Sat 16 May 2026 10:01:17 +0000
Manifest next update: Sun 17 May 2026 10:01:17 +0000
Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: eRXCcyc8X+VgPo1oqFoNWRP97yBmgF831wUMFxz+uio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:ad:f4:20:42:4c:50:f9:60:8d:84:32:40:28:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Validity
Not Before: May 16 10:01:17 2026 GMT
Not After : May 17 10:01:17 2026 GMT
Subject: CN=bc26fc1d943572fdce73fcbac5742a4327cb1e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:54:6f:ec:3d:3d:53:1f:da:c0:d5:56:17:
28:1a:29:27:3e:37:c8:40:7f:b7:1f:3d:a0:2f:18:
21:b2:a0:d9:92:77:b2:7d:cd:78:1a:01:6f:f8:a5:
69:bc:58:f9:5b:39:77:e4:31:92:c9:41:83:b0:13:
31:05:c7:b0:ec:e2:1a:93:c0:98:9f:fd:c4:56:36:
67:cb:c2:e3:66:17:fa:bb:79:4e:d5:5e:fd:f5:c6:
06:3c:ad:d0:f5:ac:bf:d4:b8:d5:aa:68:d6:68:6f:
e9:a4:de:3b:e7:1c:b5:d6:02:b3:29:39:49:98:2f:
16:95:02:34:7b:29:16:ea:04:06:42:38:b1:93:54:
e9:11:3a:fe:5e:46:18:e7:db:b5:a9:43:c2:f7:bd:
44:f4:d0:75:7c:75:78:16:4a:49:a1:62:4c:00:a3:
f1:5b:79:26:a7:02:64:16:ab:c8:a2:15:5a:d1:c8:
96:d3:df:e8:3c:d1:f1:29:73:ef:51:99:ae:1c:0f:
3d:64:c5:d3:da:b4:80:65:4d:1f:fc:31:47:e6:56:
8a:4e:78:5c:6c:e7:bd:1f:61:69:3f:73:33:dc:8d:
ac:56:d4:03:92:04:5a:0f:21:db:b0:0c:86:1f:28:
24:db:ad:34:0e:30:26:a4:19:62:47:b7:75:97:be:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:26:FC:1D:94:35:72:FD:CE:73:FC:BA:C5:74:2A:43:27:CB:1E:17
X509v3 Authority Key Identifier:
keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fc:47:ae:0a:5a:b3:4e:dc:64:53:b7:72:11:2e:e4:e0:44:
1d:d1:8d:4c:0f:77:57:c5:15:de:56:7e:fc:8e:2d:ca:e6:0b:
30:84:26:d3:31:b3:a4:80:23:ed:13:4c:51:8b:7d:04:04:d2:
6d:09:63:4c:11:7f:02:5a:f6:74:80:02:07:41:35:e9:75:bf:
ba:24:fd:47:79:50:f1:c7:57:7d:06:ab:ef:c6:96:dd:15:10:
1a:07:5e:80:a2:a2:cf:40:66:7f:4f:04:4d:b4:00:af:71:70:
de:ee:ac:16:b7:65:94:a9:75:93:8f:c6:19:72:2d:78:63:63:
fa:88:52:0c:68:76:e8:f9:b5:46:2a:72:95:c1:44:1b:23:c2:
da:e8:e3:b5:94:3b:f2:b3:b9:40:be:d6:16:e9:30:55:2a:f1:
95:14:56:2b:0e:48:ec:41:6b:ba:94:d4:c7:d7:f7:f5:38:c2:
b9:2a:9a:8d:43:50:a8:6f:40:94:bc:d7:4c:b1:b7:f7:48:6d:
81:52:11:31:b7:40:33:0e:f5:92:dd:da:77:af:d1:aa:4f:ee:
3e:6c:40:a1:98:fc:2a:b7:0d:ef:6a:8b:e3:c3:fe:84:11:cc:
9c:9e:24:7a:9d:91:b8:a4:43:42:10:51:f0:b0:f7:99:6d:72:
c5:ba:89:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO630IEJMUPlgjYQyQCgMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNjQzYjRmYTNmMGUxM2NjYTgwNTU4MzNhYzcwYzY5ZGQx
Y2E4ZTEwHhcNMjYwNTE2MTAwMTE3WhcNMjYwNTE3MTAwMTE3WjAzMTEwLwYDVQQD
EyhiYzI2ZmMxZDk0MzU3MmZkY2U3M2ZjYmFjNTc0MmE0MzI3Y2IxZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteFUb+w9PVMf2sDVVhcoGiknPjfI
QH+3Hz2gLxghsqDZkneyfc14GgFv+KVpvFj5Wzl35DGSyUGDsBMxBcew7OIak8CY
n/3EVjZny8LjZhf6u3lO1V799cYGPK3Q9ay/1LjVqmjWaG/ppN475xy11gKzKTlJ
mC8WlQI0eykW6gQGQjixk1TpETr+XkYY59u1qUPC971E9NB1fHV4FkpJoWJMAKPx
W3kmpwJkFqvIohVa0ciW09/oPNHxKXPvUZmuHA89ZMXT2rSAZU0f/DFH5laKTnhc
bOe9H2FpP3Mz3I2sVtQDkgRaDyHbsAyGHygk2600DjAmpBliR7d1l76BOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwm/B2UNXL9znP8usV0KkMnyx4XMB8GA1UdIwQY
MBaAFOxkO0+j8OE8yoBVgzrHDGndHKjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMt
NzllNzQ2MzgzZjhkLzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMtNzllNzQ2MzgzZjhk
LzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPxHrgpa
s07cZFO3chEu5OBEHdGNTA93V8UV3lZ+/I4tyuYLMIQm0zGzpIAj7RNMUYt9BATS
bQljTBF/Alr2dIACB0E16XW/uiT9R3lQ8cdXfQar78aW3RUQGgdegKKiz0Bmf08E
TbQAr3Fw3u6sFrdllKl1k4/GGXIteGNj+ohSDGh26Pm1RipylcFEGyPC2ujjtZQ7
8rO5QL7WFukwVSrxlRRWKw5I7EFrupTUx9f39TjCuSqajUNQqG9AlLzXTLG390ht
gVIRMbdAMw71kt3ad6/Rqk/uPmxAoZj8KrcN72qL48P+hBHMnJ4kep2RuKRDQhBR
8LD3mW1yxbqJqw==
-----END CERTIFICATE-----
Generated at Sat May 16 19:31:48 2026 by rpki-client