Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: SKIkBR59fl0tGQJxdgsGRKCj07Bfl95b8ig1af+2kKw=
Subject key identifier: 07:AC:2E:44:39:80:E5:CD:51:63:3D:D6:20:EC:A9:CA:93:F5:FA:0B
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 019E1F7F79F1E240D50DA19949DE8491B327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 04:01:48 +0000
Manifest this update: Wed 13 May 2026 04:01:48 +0000
Manifest next update: Thu 14 May 2026 04:01:48 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: D0rtwa04WGHqN+usZ0+WQdOK1PW7nlVXXHaCCRBeYPo=)
2: x6n822Rpr9x_ujzRReAoyI3uWJE.roa (hash: xHlOIj9K0jyV1cDKqnDaDCInd6n4ZibqQVDDfE1qwao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:79:f1:e2:40:d5:0d:a1:99:49:de:84:91:b3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: May 13 04:01:48 2026 GMT
Not After : May 14 04:01:48 2026 GMT
Subject: CN=07ac2e443980e5cd51633dd620eca9ca93f5fa0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:7d:fa:72:aa:2d:89:56:ff:34:7c:e6:ab:
33:ef:f5:db:85:a2:7f:c2:b6:61:a1:ad:82:73:79:
81:c1:39:06:b3:62:91:16:35:a2:cb:7d:56:2e:d3:
63:69:98:72:f6:bd:f5:d6:45:ae:2e:9d:ed:52:de:
cc:15:3b:4e:53:3a:0c:7a:18:57:cd:bf:5d:01:fd:
e6:8f:72:c0:fc:e4:f3:34:35:00:f1:80:54:7f:5d:
b1:18:c7:9d:12:8a:39:48:48:3d:69:4e:36:92:c4:
da:ac:9e:f3:e6:e4:b1:15:90:d6:0d:ce:ea:08:db:
e9:0e:75:b3:7c:5a:9e:e2:1f:2d:f3:23:4f:16:8e:
ad:5d:ca:dd:6e:ee:91:43:e7:a7:73:0d:f8:c6:fb:
00:ed:37:85:3e:00:6f:bf:34:5c:e8:9f:1a:a8:60:
17:2d:a7:81:b7:68:08:ca:7b:9a:c3:bf:0a:d0:70:
3f:6b:7a:27:cd:fb:bb:7c:4c:63:5d:f5:9a:88:07:
28:a9:a9:41:5c:12:7f:36:26:10:3e:91:d2:c0:62:
f0:3b:24:49:c5:91:ff:d8:1c:1c:ed:8f:f2:e2:e7:
36:c3:1c:ee:15:ee:13:4e:98:74:f0:60:c0:9b:c4:
34:b3:b9:d5:9d:5e:34:5a:bf:d0:35:1b:1d:e3:34:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:2E:44:39:80:E5:CD:51:63:3D:D6:20:EC:A9:CA:93:F5:FA:0B
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:af:84:1a:fe:0c:f0:39:f1:71:90:4f:d7:e7:1b:6f:e4:d1:
e0:e0:30:a6:f1:8e:d1:d3:b9:18:2e:d6:07:80:c4:3d:d1:ae:
2e:39:26:5e:3c:be:ac:27:d4:8c:62:3c:6e:3f:ae:a5:eb:c2:
34:8e:de:d1:9c:24:90:ba:72:35:cc:8a:f6:e4:57:73:67:c0:
17:0f:b9:c0:fe:87:df:31:f1:7d:b5:0a:3a:98:fd:15:23:31:
38:9a:ff:4e:c3:03:95:c7:77:99:4b:1e:20:0d:e1:ed:b2:41:
1c:6b:44:d4:0f:bb:ce:53:5b:00:92:ab:ff:1c:9f:33:13:9a:
4f:fc:cc:d3:28:14:c5:09:24:a4:1a:24:ed:a5:7b:1d:b1:af:
f6:e3:ad:0e:17:7c:76:fc:4a:0b:83:59:ee:88:20:f6:68:52:
b7:d5:cd:22:1d:15:49:5d:5c:7d:82:1c:a1:e4:a5:8c:84:e4:
8d:2e:22:b8:04:bd:8c:0a:ee:92:9d:40:05:ed:52:f3:fb:c7:
64:a8:52:fc:7f:5d:07:df:5e:66:53:d9:95:28:dd:0e:e2:39:
49:0a:77:e2:74:ac:cf:4b:69:48:34:61:82:8d:f0:7c:78:89:
c7:e0:31:c6:f8:ff:0c:b4:47:22:9d:02:ec:ac:55:d8:5c:c6:
9a:38:92:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:54 2026 by rpki-client