Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
File: 7etEJKvYbW70jbnnZG9TnG0QyIY.mft (raw, json)
Hash identifier: Ra4RP90AMQaC2mGQdwVSDxxMv7uXN64bKoPFYbCQ7UY=
Subject key identifier: 70:E2:11:2F:A0:9A:9A:31:BC:DB:3E:1B:02:BA:63:7B:EE:01:68:A8
Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
Certificate issuer: /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Certificate serial: 019E1CB4728C8172D7D147BD8A79DDE270CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
Manifest number: 0A4B
Signing time: Tue 12 May 2026 15:00:48 +0000
Manifest this update: Tue 12 May 2026 15:00:48 +0000
Manifest next update: Wed 13 May 2026 15:00:48 +0000
Files and hashes: 1: 7etEJKvYbW70jbnnZG9TnG0QyIY.crl (hash: ccgKcWhUs1XsOGE08cg/ZCHr0dJ0lxzhMq/Hgi+y+60=)
2: C77YJP8fJa8-Zz4rlDlE0c9emSo.roa (hash: DN6PsoZ+s4zlPu3wgZ94PNHVaR06pVMEb9575uK0WK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:72:8c:81:72:d7:d1:47:bd:8a:79:dd:e2:70:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Validity
Not Before: May 12 15:00:48 2026 GMT
Not After : May 13 15:00:48 2026 GMT
Subject: CN=70e2112fa09a9a31bcdb3e1b02ba637bee0168a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:5a:14:92:59:87:b4:58:c1:2b:51:51:4a:
f9:41:99:33:dc:76:53:02:ce:91:e7:d8:bd:4f:a7:
a2:09:c7:9c:e4:98:13:b7:78:3c:cf:b3:af:39:61:
c3:8f:5c:4e:83:ad:ec:b1:b9:bc:47:c1:5d:cf:c4:
1f:9d:c7:66:79:79:53:8e:a7:65:7e:ca:b5:89:21:
f2:4d:ca:a9:cd:46:99:b2:2d:c9:26:30:67:b7:89:
05:8a:7e:a7:60:de:a7:9a:8f:c6:5b:64:db:0b:4f:
85:28:50:08:c9:f0:9d:b9:3a:0f:d4:b4:09:80:95:
6c:39:8f:4f:7b:31:85:97:9b:98:58:dc:9b:3a:d5:
ce:06:b1:06:a1:bd:46:64:ab:75:ae:eb:c6:41:6e:
28:11:76:a3:a8:5d:9f:dc:12:8d:92:cf:6f:9d:bb:
f5:ee:2b:14:70:74:6b:8d:69:c3:3b:d2:7d:46:56:
c5:42:af:e0:ec:f7:bc:fa:24:ff:9a:f2:cf:bd:1a:
7e:c2:50:5e:c4:c7:07:b3:c4:83:39:ec:44:70:54:
dc:70:75:e7:15:11:e4:e8:64:c7:48:9e:cb:7c:12:
93:e5:f0:b7:1f:34:6d:c5:a6:f1:10:ab:08:bf:a8:
60:e9:58:97:a9:0c:a0:8a:a3:51:32:4c:50:7a:3a:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E2:11:2F:A0:9A:9A:31:BC:DB:3E:1B:02:BA:63:7B:EE:01:68:A8
X509v3 Authority Key Identifier:
keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ce:92:85:a1:ce:45:f1:8c:e4:82:c3:18:0d:ca:91:91:14:
32:ba:18:e9:0a:9b:67:74:69:13:74:df:ca:39:a5:93:c8:7a:
67:9a:c6:f1:c6:db:d2:38:b8:36:80:15:25:47:45:3d:2b:73:
30:df:73:7b:c5:53:26:b7:b7:b0:21:13:ad:49:eb:b6:49:a7:
53:cd:ea:39:41:2e:b5:a3:dc:aa:c8:2c:33:1d:6d:6f:6e:d8:
f0:f9:f2:c8:19:b2:4d:76:3d:ad:e4:88:4c:24:8c:90:5d:8b:
ec:85:f8:2a:24:e7:bb:f9:86:15:01:64:5b:df:98:2c:94:9b:
a9:f7:b2:4c:9a:f0:7c:4d:f8:43:97:5b:44:fc:b5:73:3b:48:
15:48:df:f3:64:ce:ac:3d:83:ad:d6:ad:34:1d:ae:db:ce:de:
58:6f:ce:06:89:5a:11:fc:d7:c9:8e:fe:8f:21:56:73:f5:62:
8b:b1:41:16:4a:ea:8c:ad:4a:0f:10:a2:9a:71:bc:c3:56:71:
49:88:19:c3:75:dc:5b:49:eb:36:96:f7:9e:b6:e9:a0:56:83:
de:ea:5d:83:57:9b:3c:01:d5:d4:9d:63:91:ea:41:e9:3a:0c:
de:29:46:01:35:0b:82:b0:60:32:ba:5b:2e:a5:a4:df:5f:4f:
d6:0a:95:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:47 2026 by rpki-client