Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: rkyc7GaR6xpQuJMOO9dmABPX3+29A2eUrUbwvWf3Up0=
Subject key identifier: 19:80:65:F7:14:CE:9A:64:5E:4C:CA:D0:E8:C8:1D:67:AA:FF:46:B8
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 019E1D22A635232A49C15B1A9F4473EA616F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 17BC
Signing time: Tue 12 May 2026 17:01:10 +0000
Manifest this update: Tue 12 May 2026 17:01:10 +0000
Manifest next update: Wed 13 May 2026 17:01:10 +0000
Files and hashes: 1: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: Y1y/bUrdZkU6x5vssLHC3KqEx7uftCyuYaElIHErwss=)
2: m5yvHicFnXm_Esifvf9nJ43HYjM.roa (hash: 2UG9meAu50+1K4RYnFNAIuouwlkL5D4Ox6KRSauQKrc=)
3: rI-1eY7TtxFeY70hEXPRG9r4SUU.roa (hash: 3yzUSLFgFbapDsLKTnHWd+eZDAnjuQ4IsvzD3dpVDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:a6:35:23:2a:49:c1:5b:1a:9f:44:73:ea:61:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: May 12 17:01:10 2026 GMT
Not After : May 13 17:01:10 2026 GMT
Subject: CN=198065f714ce9a645e4ccad0e8c81d67aaff46b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:8f:22:1c:97:29:91:bc:ed:3f:4f:23:ad:
2f:09:f3:f6:c6:b4:db:63:75:e8:09:93:94:ef:d0:
2c:1c:ac:66:89:6f:f6:a3:fd:a1:8c:55:64:d8:5c:
92:2e:6c:f7:17:5c:1e:69:f6:b1:43:89:b2:7c:b7:
ab:b2:ea:a6:60:26:0e:46:4c:ce:0f:2d:a5:f6:26:
3a:c5:35:49:b5:70:5b:5a:9b:b7:4e:ee:be:6f:23:
15:71:1a:4f:6b:23:1e:38:3b:73:b7:77:3e:ce:41:
6d:ba:65:89:56:e9:5c:75:72:70:69:46:7d:29:ea:
bf:e1:e6:52:ae:e6:0a:84:f5:ab:73:09:fd:b0:5c:
b0:bc:bb:cf:25:84:06:61:41:97:22:88:d0:ce:a0:
44:e5:e6:0b:00:6a:1f:fa:83:f2:dd:e9:90:3d:0f:
22:39:5b:24:83:c7:e4:61:bf:8e:5b:d2:5d:d3:21:
07:23:ed:91:28:0a:29:0c:52:ab:10:13:23:32:97:
57:87:b4:0d:5e:b8:9a:5c:2a:8b:9c:4c:12:19:86:
03:a3:8b:42:86:07:b1:e7:9f:76:0e:9c:5f:e0:04:
5d:d0:2d:b6:ba:f6:27:93:cb:e0:89:5d:40:3e:7a:
a4:09:77:94:34:b5:aa:05:ba:5d:97:ea:7a:f4:26:
26:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:80:65:F7:14:CE:9A:64:5E:4C:CA:D0:E8:C8:1D:67:AA:FF:46:B8
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f2:bd:9b:d3:d1:29:75:c3:97:d6:61:ca:0b:ba:59:7f:fc:
71:08:06:3a:c9:30:c4:83:0a:55:b0:76:c5:83:ee:62:fa:87:
60:a4:cd:0b:97:20:3b:e3:aa:1d:6d:97:ea:16:be:95:26:d9:
a1:08:25:43:12:e7:13:41:91:f9:26:c7:f9:7a:c0:8f:b6:fe:
55:53:3b:22:e8:75:a3:7e:ae:89:50:5e:43:2f:b4:aa:87:b7:
55:eb:64:86:56:a7:ac:bf:4f:d0:b9:1d:0f:88:50:7c:a0:0f:
0e:b0:2d:7b:92:91:48:f6:51:3f:59:1b:d8:66:63:3c:0e:7f:
6a:95:c6:59:21:16:c5:e3:d7:d4:0e:30:14:a9:a5:b3:92:86:
30:dc:4c:cc:35:a0:17:19:1a:ca:12:5d:fe:94:4e:7d:e7:47:
49:df:f7:3d:50:b6:ef:d3:6d:83:b5:e5:bd:d3:69:fc:f6:49:
05:da:16:eb:7e:de:ec:08:3b:c4:6e:e2:ce:a7:0f:83:3a:2b:
a4:25:d8:a1:10:98:65:ff:ca:b5:0b:a2:15:33:14:b7:cb:ea:
25:44:27:e6:27:6e:eb:3e:7b:22:10:03:1a:8a:ca:49:65:c6:
a3:52:5e:ac:09:df:9d:a2:2a:30:1b:da:39:b0:b9:05:aa:16:
ed:77:37:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:34 2026 by rpki-client