Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: wj6QMzmE0PmQW9Ha0ueAAzmt0F7KJKcb34VmlWzOygg=
Subject key identifier: FE:B6:29:6F:06:02:F6:2E:1C:77:D4:38:6D:1A:41:10:73:2A:79:B8
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 019E2F28EE7386BFB471F771A494FECEBC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 10E4
Signing time: Sat 16 May 2026 05:01:12 +0000
Manifest this update: Sat 16 May 2026 05:01:12 +0000
Manifest next update: Sun 17 May 2026 05:01:12 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: D6yrIctkBw7nM8cv942En1raQJVwU3okhZOa+lE0708=)
2: rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa (hash: reSEL9M69wAKbL5gRtqeNyqy/DyxKPTT8rPI7JNy6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:28:ee:73:86:bf:b4:71:f7:71:a4:94:fe:ce:bc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: May 16 05:01:12 2026 GMT
Not After : May 17 05:01:12 2026 GMT
Subject: CN=feb6296f0602f62e1c77d4386d1a4110732a79b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:9b:28:3a:33:e1:3d:63:83:30:52:18:4f:
6a:53:a9:de:84:a0:b6:27:bb:b1:1a:25:05:4c:16:
5c:19:23:7a:2f:d8:9f:6c:54:b7:a6:8c:ef:2d:22:
47:17:c3:8f:6b:8c:28:08:3d:85:09:19:c3:85:e6:
f5:b0:00:49:92:d8:d5:33:42:f9:63:5b:ed:07:67:
17:0a:a9:63:f2:71:dc:bc:cd:4f:74:2d:a4:8a:79:
95:1c:26:ce:62:4e:f6:cf:c7:0e:91:64:b4:3c:57:
34:38:ea:6b:4f:54:b7:d8:33:d7:b5:f1:ac:54:7a:
3e:66:8e:4a:4a:de:b3:98:72:91:c2:01:da:3e:10:
6b:39:fb:c0:4c:c2:72:bd:64:89:41:9d:ab:bc:7d:
8c:8e:f0:bc:5d:0f:d5:97:3e:56:0f:b2:9e:45:49:
2b:d3:e9:fb:d9:ea:fd:fa:d2:a4:dc:29:f8:a2:e1:
3b:cf:24:db:5d:0c:11:cc:29:3f:5b:4b:72:d4:85:
df:c9:12:ae:4e:03:e8:bb:84:c6:64:47:70:02:00:
a9:4b:70:4c:a7:9d:b8:a9:29:25:91:a6:8e:07:94:
a7:39:cf:93:af:c5:c1:86:f4:ea:a4:9e:4a:f3:7b:
cf:72:00:da:88:5d:38:66:48:f4:c6:37:d2:21:3e:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B6:29:6F:06:02:F6:2E:1C:77:D4:38:6D:1A:41:10:73:2A:79:B8
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7d:10:e6:e1:23:dd:19:3c:94:ef:0b:27:a6:11:e1:86:df:
6d:7d:2b:30:7d:70:c0:e3:f5:15:aa:73:f5:b9:1b:7c:74:53:
fd:71:31:62:25:d1:fb:16:19:7e:32:17:4b:e3:be:4b:1d:93:
0b:24:8d:b1:26:ba:33:42:a7:9d:e7:ff:92:92:04:00:c7:3c:
c5:52:b0:53:04:b8:89:22:48:f7:94:01:e9:dd:f0:f6:49:4d:
01:f6:a1:06:de:51:c2:5a:83:ea:8b:88:88:fd:53:f3:dc:c1:
ae:cd:56:b9:24:0e:5f:89:ba:8b:ab:72:79:05:08:74:54:fa:
fe:4b:05:30:fa:4b:d6:87:08:cb:79:68:a6:c6:2b:5e:f5:a5:
60:a8:ec:55:19:01:58:98:33:94:87:94:76:93:5a:dd:09:c7:
18:fe:c6:fb:28:bd:c2:09:7e:63:7e:c5:da:1e:82:ae:1d:28:
72:f3:d5:41:8f:49:dd:28:41:17:9d:08:ba:c6:c3:9f:a0:cc:
16:01:65:77:e1:54:21:32:72:d9:f1:31:59:1c:47:8e:3a:51:
5c:3a:74:e5:3b:44:0d:75:13:bb:08:3e:8d:ab:34:25:3a:05:
be:dc:6b:e4:9c:8c:ee:35:e6:f3:40:70:a6:24:e6:53:fc:bf:
c0:09:42:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:33 2026 by rpki-client