Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier: Tg8KGHLbzV5rB0JnexvqG/m8sGdlzQmOb08OLJP6rJ0=
Subject key identifier: 75:7E:97:19:FE:47:46:59:62:EE:2D:81:A7:8C:72:32:F1:D3:46:4F
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 019E1CB5355B8E60EBC18F2584BD50906942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 15:01:38 +0000
Manifest this update: Tue 12 May 2026 15:01:38 +0000
Manifest next update: Wed 13 May 2026 15:01:38 +0000
Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: SzxCA9y9sF2WD80jYGzsBh9U6TAeO9k4gIWto5hbePQ=)
2: Uzq6jnjiBmJhQ77sdYIGU3rtoW8.roa (hash: TaYrbh565HuhRP+MsEApRFlphctYPIuvYOeurCpD+fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:35:5b:8e:60:eb:c1:8f:25:84:bd:50:90:69:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: May 12 15:01:38 2026 GMT
Not After : May 13 15:01:38 2026 GMT
Subject: CN=757e9719fe47465962ee2d81a78c7232f1d3464f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:24:bb:98:87:d7:5f:bc:a6:76:36:99:8f:
45:8e:5c:b1:df:6c:91:ef:e2:79:e9:ea:b2:7a:66:
6d:f7:a6:6e:34:07:12:c6:9d:27:f7:89:f8:e0:4d:
b7:85:78:3f:52:72:94:f1:a2:ad:99:0e:ab:1f:52:
6f:50:81:98:ec:2f:70:88:61:88:d2:21:62:68:3b:
5c:c9:2c:68:c7:80:70:ef:3e:09:04:ea:72:cf:26:
bd:ba:70:71:a2:e6:c0:30:1e:aa:60:bf:22:63:cf:
7d:31:b8:53:bf:d8:45:8d:3a:de:bc:b4:88:be:80:
0f:69:8d:e4:ca:32:e7:88:39:1c:d6:30:cf:e2:ae:
18:c1:a7:85:a3:a4:a5:c5:0a:23:37:c4:de:74:c8:
28:5d:60:da:dc:60:4f:fc:04:a7:17:e3:d2:2c:5b:
e9:10:43:eb:19:38:c5:4a:75:de:56:9f:d8:ee:68:
1f:a5:e3:c2:a9:c1:ef:2e:64:a9:ee:cd:d9:8b:84:
de:3c:af:1c:17:4e:43:63:e6:27:96:3d:21:d0:46:
b3:26:ba:b7:31:3c:56:db:ce:31:99:6d:4c:06:44:
2b:a1:15:c4:bd:a3:f6:be:53:a6:71:f4:91:e1:77:
72:78:66:6f:bd:ab:e8:62:a6:36:c1:e0:16:28:51:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7E:97:19:FE:47:46:59:62:EE:2D:81:A7:8C:72:32:F1:D3:46:4F
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7f:cb:99:8b:f1:33:40:cb:4d:b4:3f:94:e5:97:3b:d0:f5:
63:1a:f0:75:a2:ac:8b:af:96:2c:c4:f7:48:16:77:42:ea:01:
6b:b6:8b:e5:99:cd:86:be:11:5d:d9:81:1c:27:c0:32:c1:59:
64:04:c4:d2:05:79:3b:a1:52:57:70:a7:da:76:ac:b4:32:4d:
ca:80:26:64:95:04:9a:2b:93:27:fc:af:05:9c:f6:41:21:3f:
96:e6:ce:e4:a0:1a:65:aa:b1:a2:1f:f4:3a:e8:56:2e:f4:e1:
00:03:e8:9b:37:79:b5:ec:45:61:50:66:1f:8c:01:7d:5c:f2:
5c:84:ed:05:a8:33:0c:4a:ec:8b:fb:19:b2:c9:c2:af:1f:c0:
ec:0d:b0:86:21:89:52:a3:92:8f:57:f2:36:ed:3f:75:d2:ce:
94:15:b5:98:8d:e7:f3:69:15:09:c0:f8:05:d4:3f:93:d5:46:
86:6f:29:db:01:e9:39:5e:b8:1d:10:15:57:4c:ee:2c:74:2a:
de:19:41:81:5c:4b:e9:e7:81:cb:09:b9:d9:e2:0a:1e:84:c7:
2c:dc:e0:52:76:4d:1b:26:58:36:b6:fe:af:61:ce:86:c3:97:
3a:6f:b8:ea:3a:d1:b6:0b:e0:6b:cf:62:41:05:18:86:18:90:
1c:06:4b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:18 2026 by rpki-client