
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
File: E7myHACB0jxKIfYKCEp1y1-VvqI.mft (raw, json)
Hash identifier: r5cTnZdBGK//53nxFv3JkfjC3ojqdYykJndB9jAzAiM=
Subject key identifier: 12:C2:27:05:E5:03:E0:E3:E1:FE:8A:92:E2:C2:DE:25:0B:A8:34:72
Authority key identifier: 13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
Certificate issuer: /CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
Certificate serial: 019F17F954BCDF036C48371183217AB55E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
Manifest number: 0ABC
Signing time: Tue 30 Jun 2026 10:00:43 +0000
Manifest this update: Tue 30 Jun 2026 10:00:43 +0000
Manifest next update: Wed 01 Jul 2026 10:00:43 +0000
Files and hashes: 1: E7myHACB0jxKIfYKCEp1y1-VvqI.crl (hash: zQiFfs+3tvawVUmHuJNSCOMc/st2nUrPCe4H7aph0E4=)
2: nBaSbmtZu4NrFhfgsgrmwUZYBbg.roa (hash: TGjV+Bn0STBLHDURzdnH0m2eTzhKRI7/ugPawErQAOk=)
3: xJgVtdXjTRsXhcsLNoQEOd3WPUw.roa (hash: PbrwVhyr9VwnsYtmcA/Kxh412q3DSawxivXz8EKb0kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:54:bc:df:03:6c:48:37:11:83:21:7a:b5:5e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
Validity
Not Before: Jun 30 10:00:43 2026 GMT
Not After : Jul 1 10:00:43 2026 GMT
Subject: CN=12c22705e503e0e3e1fe8a92e2c2de250ba83472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:08:3f:98:78:fe:b8:72:dc:9f:11:d2:f9:
04:60:fb:94:32:0b:6f:7e:50:d9:39:49:76:95:85:
01:10:c8:18:fb:90:d6:91:9e:48:48:4e:89:ad:cb:
7f:1f:7a:5c:92:00:3b:72:79:a3:92:e7:1e:6f:e9:
c1:ce:21:7c:16:d7:f7:60:53:63:52:b0:df:77:57:
13:87:9f:f9:74:49:00:ce:18:db:ad:b2:ae:6e:7c:
59:52:d4:2f:0e:aa:4a:89:c6:92:e8:b7:4f:74:8a:
d5:dc:56:01:15:7a:b1:1a:9d:c1:ab:78:54:36:53:
3b:c1:00:e0:44:a1:66:1c:e8:43:52:e6:2d:9c:83:
93:a2:4a:b8:fd:d0:5e:7f:22:d2:5a:40:c4:c1:05:
52:41:ca:49:03:b1:02:a8:a1:b9:7f:98:71:53:a5:
e7:40:42:2d:19:24:c0:61:6d:af:f4:13:c2:13:1c:
1c:60:7d:79:16:33:0f:a8:53:d9:a6:5b:c7:4b:62:
de:af:f2:a5:e6:ce:d7:53:c9:3f:53:eb:e4:4b:c8:
4b:79:96:e0:90:1b:f8:5a:04:6d:27:0f:a1:1d:11:
4a:1f:0e:42:26:6b:3a:f5:b4:4b:a0:38:6b:d3:ff:
c3:87:fd:c8:e4:be:3a:88:e7:cc:80:d7:a4:66:c0:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:27:05:E5:03:E0:E3:E1:FE:8A:92:E2:C2:DE:25:0B:A8:34:72
X509v3 Authority Key Identifier:
keyid:13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d5:5e:88:c2:68:2f:1a:43:89:67:3e:66:ee:7f:3d:b6:83:
e6:0a:7f:3a:a5:71:93:71:bf:f5:24:6b:4a:c8:c6:9f:21:56:
1b:88:1b:25:42:08:5e:ee:d5:8b:5c:56:50:58:8a:d3:5e:01:
fd:63:c4:fc:10:77:11:a1:50:9b:9e:ed:0c:3f:21:f6:37:3c:
47:32:dd:3c:4e:77:03:60:33:57:73:98:6b:e7:84:58:46:7c:
da:14:90:f3:ee:90:f4:33:c7:48:c7:51:fe:46:27:a3:b1:2d:
a7:04:de:ac:12:5d:cc:8a:66:6c:96:33:73:5d:a8:36:d3:74:
38:ec:15:e4:f7:fd:0a:14:09:8d:ec:6b:99:c8:d0:a5:2b:55:
0c:d1:3a:51:d4:bb:e0:1f:55:eb:59:1a:18:90:16:57:86:e9:
c2:9b:67:e1:ba:fb:29:dd:32:e0:35:91:83:8b:6b:52:9d:e7:
f5:ca:eb:a4:40:b8:a1:05:29:15:73:00:13:a6:aa:b4:b6:41:
de:d7:44:d7:43:57:4b:58:c0:db:07:16:f2:e0:1e:26:7e:34:
60:6c:27:57:d4:68:2c:1b:0b:6e:f0:76:44:e1:1c:1c:57:db:
c7:87:d9:5a:ce:9b:53:e5:5c:8d:7d:31:3d:85:fe:86:cc:48:
8c:38:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:12 2026 by rpki-client