Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
File: 7JezJx8tLSwHdy-q0BM8VG5JdAg.mft (raw, json)
Hash identifier: aNAoNt18OBbG4FAYUmshjbG6Vy/HVh40dUhOcIvX3OI=
Subject key identifier: ED:1D:16:41:41:07:06:6A:20:A5:8E:DF:B5:9D:85:5B:C6:E9:7E:CC
Authority key identifier: EC:97:B3:27:1F:2D:2D:2C:07:77:2F:AA:D0:13:3C:54:6E:49:74:08
Certificate issuer: /CN=ec97b3271f2d2d2c07772faad0133c546e497408
Certificate serial: 019DD087FD31208E918BE950868890059D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
Manifest number: CE
Signing time: Mon 27 Apr 2026 20:01:06 +0000
Manifest this update: Mon 27 Apr 2026 20:01:06 +0000
Manifest next update: Tue 28 Apr 2026 20:01:06 +0000
Files and hashes: 1: 7JezJx8tLSwHdy-q0BM8VG5JdAg.crl (hash: uDy9CXXAFyzbxW3V9xvvwiSJkOZwFUv2YIMJEhFRiBA=)
2: tZzd-4vJwTNaHI1mDTSbAye9aUg.roa (hash: WUVxikPavSYyUIB2ehZCr1awJETbczoTgfaX/AVFzSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:fd:31:20:8e:91:8b:e9:50:86:88:90:05:9d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec97b3271f2d2d2c07772faad0133c546e497408
Validity
Not Before: Apr 27 20:01:06 2026 GMT
Not After : Apr 28 20:01:06 2026 GMT
Subject: CN=ed1d16414107066a20a58edfb59d855bc6e97ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:77:1a:d2:56:bc:19:2f:f7:5a:1a:f0:af:dc:
72:df:01:11:48:0e:ee:95:70:5a:0f:db:1d:da:4f:
0e:25:9a:14:c9:d6:43:65:66:db:3d:6f:e1:f1:ad:
6f:b8:a5:52:95:7d:b8:ff:dc:a0:ad:ff:a1:0f:fa:
43:7e:25:bf:fe:76:5b:88:df:2e:6f:2b:29:cb:7e:
30:5a:46:68:bf:3d:5a:0a:7d:5f:e0:94:0a:87:ba:
64:75:fa:d5:b4:7f:f4:be:d6:0d:39:b4:5a:e2:eb:
ca:7f:9c:db:96:c3:87:65:85:d5:1b:5d:9e:cf:d6:
60:06:32:70:7c:28:79:8a:a9:5a:9e:f6:4f:02:d8:
3e:8b:33:e2:9e:a1:3b:b1:30:81:61:0f:6e:b1:f2:
ef:36:5c:17:ca:64:52:09:5f:69:a2:c8:d9:8d:2e:
a0:34:30:4f:a4:79:97:84:72:e4:3a:a2:56:32:61:
86:e0:81:56:2d:30:c0:23:5d:d5:b8:f6:ba:31:be:
f9:70:b0:3b:99:f9:34:82:a0:3f:e1:35:e3:52:73:
c5:b6:ae:5d:b5:e9:03:16:08:83:65:d1:2c:cc:5d:
92:4a:47:1c:db:ce:fe:c9:da:61:bd:3e:6b:3e:d3:
20:11:ce:57:6d:1c:60:57:33:b8:0b:05:68:29:a8:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1D:16:41:41:07:06:6A:20:A5:8E:DF:B5:9D:85:5B:C6:E9:7E:CC
X509v3 Authority Key Identifier:
keyid:EC:97:B3:27:1F:2D:2D:2C:07:77:2F:AA:D0:13:3C:54:6E:49:74:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:de:1b:d4:32:30:39:77:9c:79:30:11:6e:56:78:da:15:33:
30:ec:12:7c:1a:19:18:ed:0c:9e:5e:6e:6b:63:ea:ab:79:77:
1a:e3:0a:80:58:7f:e6:58:b5:ff:1f:a2:90:60:de:bd:35:34:
65:bb:9e:ef:af:f3:11:9e:01:fb:92:8e:ac:53:0d:b2:82:75:
90:73:6f:27:4c:30:bd:4e:e9:8b:37:0d:2b:00:00:41:f2:06:
d3:7f:c7:9c:53:59:7b:97:f8:a8:2c:77:4e:82:e5:0d:51:da:
02:29:38:e5:13:23:d2:7c:45:b4:10:84:8e:f1:3d:28:83:f1:
c3:b8:0c:64:13:97:5b:e8:ca:b6:c6:75:10:f0:68:3b:b2:b0:
89:09:ac:eb:02:40:ae:11:34:6d:e3:c5:7d:b8:30:2d:22:18:
28:f2:9e:72:a5:87:43:f6:14:47:7f:9d:82:10:d6:11:0e:35:
b6:87:7d:37:7b:5d:de:b4:82:db:4e:19:79:06:c7:97:71:4a:
ab:84:b1:75:19:40:bc:0a:80:aa:7e:54:50:66:21:d0:d9:c5:
96:3e:a5:3a:4b:69:65:52:88:b8:fb:b6:39:48:fe:2a:49:09:
dd:28:a0:b8:9b:5c:6d:69:66:60:3c:57:95:1c:84:f0:3b:69:
07:9a:e1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:19:37 2026 by rpki-client