Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: fzxdheWV+jO9dcNU+ra31Qd7gkkNIE2VoVGw1c4eZqc=
Subject key identifier: D4:21:FC:F1:8A:09:1B:A6:9E:D9:74:41:46:EC:36:EE:EE:CB:9F:70
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 019E1CEB40D71CCD46D1D62DFB30330AD89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 0B78
Signing time: Tue 12 May 2026 16:00:39 +0000
Manifest this update: Tue 12 May 2026 16:00:39 +0000
Manifest next update: Wed 13 May 2026 16:00:39 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: vA9LWIwnovbGNXhCEoJ9Qe4ohcdcc9fJyFz5i0VNeMU=)
2: aO8SV7r8aRmaMsrCVn54MAITseY.roa (hash: UBYs9t/xpmJLmkQIIYwuZf57SETqiU4zYplqSc9D++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:40:d7:1c:cd:46:d1:d6:2d:fb:30:33:0a:d8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: May 12 16:00:39 2026 GMT
Not After : May 13 16:00:39 2026 GMT
Subject: CN=d421fcf18a091ba69ed9744146ec36eeeecb9f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:cf:3c:33:95:8d:c7:b6:4e:5e:1e:15:35:
22:1c:65:46:a2:01:61:8a:f6:50:99:ec:7e:ea:49:
0d:c8:d0:04:33:2c:9d:12:94:a9:04:bf:58:87:11:
5c:c8:c3:5c:3d:61:43:3b:3e:ab:e8:dd:1f:3f:00:
b6:dc:5b:6c:69:00:ef:41:5d:97:9a:40:25:e7:c2:
2d:5c:50:80:e0:1e:40:66:60:ad:8d:06:26:6e:82:
e5:96:0a:3b:24:52:c2:04:ea:7f:e2:80:ac:0f:68:
54:e6:d8:33:28:13:13:c1:77:38:79:01:19:65:26:
21:47:7f:cd:44:36:f2:41:89:4c:bc:ae:2d:54:94:
ff:22:70:91:f8:d3:c2:dd:91:44:bd:1a:18:f1:45:
7e:78:97:cc:c7:63:a2:12:97:b8:e2:68:98:c6:3b:
00:37:99:aa:2b:d1:4c:d3:b0:f9:9e:20:88:e0:ff:
ce:1f:62:66:aa:da:99:d5:d6:e4:51:6c:23:8d:9b:
01:28:62:88:f8:a7:6f:d3:25:d3:a3:04:3b:90:8a:
06:26:50:01:9f:5b:28:43:f2:56:0a:9a:69:18:d9:
2b:00:54:c9:f4:a6:9a:31:ee:01:4b:8a:85:89:17:
9b:21:cf:b5:f2:45:78:53:ec:b1:bd:3a:24:c5:45:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:21:FC:F1:8A:09:1B:A6:9E:D9:74:41:46:EC:36:EE:EE:CB:9F:70
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:09:31:c7:bf:f1:e2:16:dc:6e:4c:ee:bb:c4:8b:54:13:e0:
8f:ff:c6:ee:63:23:72:6c:ce:f4:28:5a:b7:04:8c:84:58:d2:
cd:cd:46:d7:d0:e5:96:1e:5a:99:e5:cc:15:85:8e:05:e7:36:
fd:32:82:54:39:a9:06:54:86:9d:2c:f7:a4:dc:54:78:8e:57:
eb:07:5e:0d:ae:86:7a:8f:d8:a7:ae:aa:4e:a1:8c:8b:9b:05:
05:8d:6b:08:2e:09:7b:38:c8:a6:22:c3:98:20:31:32:a4:3b:
76:11:92:a2:de:9f:89:6f:c6:80:ed:d1:77:fe:fa:e3:3c:d3:
d6:cd:88:99:f9:ac:f0:61:87:41:95:b0:9b:09:08:cb:b7:db:
ef:07:ec:62:c9:83:99:97:7c:7a:c1:a8:80:d5:95:c6:36:ba:
92:a5:62:ce:80:04:a4:e4:f6:22:fb:9b:33:3a:0e:1c:61:a3:
8b:3d:fe:48:71:46:f1:2f:56:bf:88:5d:2f:44:ea:d4:5a:63:
31:7e:ea:2b:49:84:34:0c:0b:6a:ac:0e:a5:47:e9:5b:43:b1:
35:84:cc:37:39:b3:40:39:5c:e3:b8:9b:78:21:90:e8:0d:d5:
9e:29:4b:9b:56:f2:e5:cf:4a:28:e4:b3:ca:79:f2:8c:83:5b:
25:33:d5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:33 2026 by rpki-client