Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: YCeI38jsptRXUzFZNIRWI5oFViWsDovW5QNNK3ja9bw=
Subject key identifier: BF:4C:BB:52:5A:AB:8C:87:06:FA:E2:87:8E:A8:79:39:FE:AD:6A:E3
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 019DA8D5BB537060B9E1682303B15C3FF9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 1614
Signing time: Mon 20 Apr 2026 03:01:12 +0000
Manifest this update: Mon 20 Apr 2026 03:01:12 +0000
Manifest next update: Tue 21 Apr 2026 03:01:12 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: MG11KiLPFhw/dEARGxQiG+eSPAK5r2dQGbbcprxQyhE=)
2: Qy_dYjktdWTMwKlvlGZGCPvqukk.roa (hash: HyB9pQQ7gH7LCMcZGQN6Qp3fcmCpTOcafmUokwLnbLM=)
3: knZABU6A8bvYatZnGIApuHOdxF8.roa (hash: ZG17hdxOoYWoARbjcCtZd2S+SWHd1m7LFGZzi15/I2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:d5:bb:53:70:60:b9:e1:68:23:03:b1:5c:3f:f9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Apr 20 03:01:12 2026 GMT
Not After : Apr 21 03:01:12 2026 GMT
Subject: CN=bf4cbb525aab8c8706fae2878ea87939fead6ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:53:08:cf:a5:d2:37:bf:7d:f0:eb:8e:40:b5:
00:d1:f4:71:45:13:23:d2:87:e5:ed:de:c0:81:a3:
52:4a:5f:61:2b:1e:56:92:48:f8:af:7d:f7:95:21:
bd:c9:5f:ae:29:ac:2b:6c:c8:5b:63:ae:67:3c:43:
9a:2a:90:a8:ae:fe:21:5a:e8:5e:28:52:02:5e:8d:
cb:53:cd:58:9a:1b:e8:ef:55:0e:80:9b:9c:2b:46:
b7:7f:76:b9:dc:58:f0:e2:84:35:38:32:a2:2d:a9:
68:fa:d2:62:65:5a:7b:9c:45:84:f7:aa:d2:0e:ed:
91:15:a1:e2:28:35:0a:f4:1b:58:1b:fc:f9:3c:01:
41:3d:5a:cf:fb:5c:ab:ca:31:78:24:59:f1:9c:71:
cd:54:e3:3a:6e:61:13:b3:5e:5a:78:c5:e7:e8:7c:
cc:4e:af:28:48:c1:0e:31:bd:ad:b5:2f:33:59:ec:
0c:6f:36:1d:99:dc:fd:70:94:fa:2f:4f:32:04:62:
61:5c:b4:09:90:a2:15:14:ec:8f:ac:97:23:02:21:
db:9d:c8:49:da:00:4d:b0:c2:29:a1:6c:b3:d9:6f:
30:42:46:6d:6d:e0:a8:b5:8c:be:1f:ff:40:ff:d7:
66:b2:db:5b:c7:c0:f6:21:1f:56:e5:a0:6c:3f:e8:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4C:BB:52:5A:AB:8C:87:06:FA:E2:87:8E:A8:79:39:FE:AD:6A:E3
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fd:b0:1b:f1:af:42:a8:5a:41:c5:34:68:59:8b:1c:ae:ef:
a2:0c:fa:50:2c:90:04:d7:d0:8f:1b:78:3e:44:46:c0:24:23:
d9:fc:4d:93:5e:0b:a6:51:e0:56:7a:2b:57:61:ec:9e:09:82:
81:82:18:ae:e4:1d:56:65:8f:82:ee:0b:dc:c5:ba:04:df:79:
28:a5:94:d9:8a:99:d0:bf:27:6a:c9:99:b7:2b:2f:f0:03:ec:
1f:3e:d3:55:17:bf:a2:ce:94:15:30:87:26:0d:85:2c:05:57:
be:19:97:de:24:99:53:a7:2a:78:51:e4:aa:fd:71:44:1d:9d:
ef:44:4b:48:cc:be:ac:11:f5:97:04:4b:0c:ee:c8:9c:7b:a2:
9c:e7:e6:6c:8c:2a:7f:d8:a5:df:47:a7:f7:52:24:3e:e9:44:
43:17:b7:bb:a3:67:35:4d:c5:97:93:09:9c:b6:51:e8:14:37:
96:34:39:03:1e:94:25:d4:46:9b:89:41:ff:43:4e:44:a8:ad:
c9:9d:4c:57:b1:b6:80:cc:7d:43:48:4c:94:f0:3e:b1:b6:c0:
62:bd:e9:5e:19:d6:99:63:37:29:22:d7:a3:05:79:73:93:e8:
e8:28:a1:fd:1e:f0:45:c4:40:c1:ab:32:ba:f7:c5:fb:55:eb:
76:2d:88:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:46:38 2026 by rpki-client