Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: U/h8pyhrX7ZJmAUwhhGP8YuRmXQ+y9rvx4MjSa9MA00=
Subject key identifier: 52:F4:5C:B5:F7:24:49:F8:99:8F:5E:7D:BD:02:E2:23:2E:75:7D:E8
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 019E1D90CC5181D1DAD0F2357439E4096BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 07BC
Signing time: Tue 12 May 2026 19:01:29 +0000
Manifest this update: Tue 12 May 2026 19:01:29 +0000
Manifest next update: Wed 13 May 2026 19:01:29 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: vt58odz02c5E8EPQOLhJ9i2B26MnYLBRTg7ZwSDM2xk=)
2: QanxQFNXzm9WZ4FLagQm8rqjYVg.roa (hash: z/pk9haxpoiUwaj9wllu1rSy4e1+a+aVccYlUM/WIn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:cc:51:81:d1:da:d0:f2:35:74:39:e4:09:6b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: May 12 19:01:29 2026 GMT
Not After : May 13 19:01:29 2026 GMT
Subject: CN=52f45cb5f72449f8998f5e7dbd02e2232e757de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8b:c4:7d:41:0c:80:89:a9:0f:53:20:6e:e2:
28:1c:a8:ca:38:7c:d6:2b:5f:b0:73:b4:db:67:b7:
4d:a8:1e:32:31:31:27:cb:bd:6a:9f:57:93:ab:97:
9d:57:48:29:39:81:60:23:7b:2b:ed:25:44:eb:ec:
56:46:79:e0:e4:34:37:d4:27:c5:8a:bc:e9:1b:b6:
c4:cd:77:d8:ef:ad:97:84:63:54:d4:5d:de:57:1b:
0c:c7:91:7e:ea:1e:10:b0:30:22:e8:68:8d:32:fe:
b9:70:7c:d0:c9:17:a1:6b:02:e9:15:50:c4:6b:4b:
dc:96:db:cb:4f:43:ef:a5:fa:5f:23:fe:69:34:4f:
12:0f:02:59:ac:f9:36:a8:3a:15:4c:38:63:63:20:
d9:f7:9b:d1:e3:6e:9f:b6:f8:e1:b6:67:56:d7:20:
c0:a5:6c:2a:13:9c:a2:46:09:58:4c:c2:89:ed:1d:
0d:18:f6:ad:2d:c9:b5:86:76:8f:49:f9:6e:05:43:
78:d2:59:1a:a7:50:08:2c:51:a7:a4:f5:7f:5d:4c:
1b:62:64:8c:50:3d:8d:fb:97:83:56:3c:5c:ed:8a:
fc:2f:ac:7e:ce:4f:36:10:0d:90:b6:b0:2b:f3:ab:
c6:1e:2d:43:f2:c7:60:5f:71:a2:86:08:5d:23:6f:
ad:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F4:5C:B5:F7:24:49:F8:99:8F:5E:7D:BD:02:E2:23:2E:75:7D:E8
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:17:bf:5d:bb:e2:e5:cc:46:4b:58:51:d8:1c:59:1f:ac:34:
b9:a7:4f:4d:bb:4c:ec:94:e3:02:24:d5:76:c7:d2:a6:90:54:
5c:10:4d:bf:86:15:ad:35:1f:d1:bf:79:0e:2e:d9:51:44:5d:
f2:8e:26:38:1c:7d:d7:39:35:0f:de:ef:65:66:33:34:f9:64:
20:5f:cf:12:ab:fb:14:0d:59:28:c7:7e:51:a9:4f:cd:fb:3f:
8a:9f:83:82:cc:38:d1:af:01:38:30:0c:4e:f2:93:dd:67:51:
f0:b8:72:b5:85:f2:87:5b:f2:d5:cb:ec:da:52:fc:c1:f4:17:
e1:42:00:b0:ac:9f:84:a9:12:2f:4f:4c:e4:24:2b:74:4c:28:
aa:ef:67:62:b2:ba:70:97:03:23:cf:e4:24:9c:64:b2:b6:cf:
3b:5d:ae:ca:b2:d1:6b:4a:29:3e:51:0e:f4:e2:ff:49:9b:c7:
4b:58:fa:d5:1a:1a:50:b5:21:e5:73:72:44:71:a0:7a:88:ed:
b4:fd:8b:9c:bb:25:eb:9c:b3:36:26:4e:e5:e8:d9:87:54:a0:
5d:7f:02:77:14:63:8d:34:0a:5a:66:82:40:ea:69:22:69:d6:
23:6c:47:e0:53:9e:cb:83:87:85:cd:d7:19:3f:9e:9b:48:ac:
8c:9d:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:38 2026 by rpki-client