Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: 65Epk5+v7Enshi7pa30R5J91QG9IzLRQaKh3WAHVvo8=
Subject key identifier: 45:5C:79:BD:3C:9B:CB:1C:05:D1:A7:64:68:D2:D8:59:2B:60:B7:EE
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019E1BD90EB1C4023319418A54CB90441FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 1925
Signing time: Tue 12 May 2026 11:01:10 +0000
Manifest this update: Tue 12 May 2026 11:01:10 +0000
Manifest next update: Wed 13 May 2026 11:01:10 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: gzFmnQSgFbVanlYgghdn2CZTmRyLKtX7jbHjm1Za6XY=)
2: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (hash: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c=)
3: JnNygfiur-rHLJuAn1hkxLz25cQ.roa (hash: CEYmgo0zOa133sbdNYSecv5niw3ZeeRwnisUaeasxBY=)
4: UV-Za1MLDNSaG4DuH_q131i6c6o.roa (hash: /nY7i2nihg09pwfCz4ZETusOQgWbnKeEZAo2lp/8PQQ=)
5: XwwEduTGUdEUmzQ6Vn1Qh0lULKE.roa (hash: yP/C4oSHOkCL3b3u7lTD0ceM0Z9V/7tsggm9f4RRupE=)
6: bc8LaOm-Ug6E5hSvds9yGbuwrFA.roa (hash: RaZzZcOTQlGar1i6XUpTh++hxvp7YrNT3WX2Bc1Xmtk=)
7: gDu74A_Z1ksatoKHQD455fxsAx0.roa (hash: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig=)
8: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (hash: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:0e:b1:c4:02:33:19:41:8a:54:cb:90:44:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: May 12 11:01:10 2026 GMT
Not After : May 13 11:01:10 2026 GMT
Subject: CN=455c79bd3c9bcb1c05d1a76468d2d8592b60b7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:9f:70:36:0b:e9:8f:78:ae:50:37:05:6f:
7b:6a:6f:9f:68:88:e9:c4:70:0f:13:fe:e6:6b:6a:
ca:b0:c6:3b:bb:44:21:2b:fe:df:26:53:f3:b1:5e:
19:92:79:5f:fe:5f:83:fe:df:8c:33:bd:cb:96:21:
ec:cb:0d:e4:11:7b:5c:97:f4:25:0e:95:27:6b:dc:
0c:f7:02:c9:3d:84:db:05:33:30:70:2b:18:ad:aa:
17:80:7c:62:1e:be:f2:f4:68:a2:70:99:90:59:c2:
c3:ed:8a:48:69:9c:db:6b:38:c3:96:fc:8d:80:a9:
95:b4:df:93:51:61:fc:83:c2:91:b2:05:d6:20:cf:
34:fa:d8:1e:8b:bd:57:1f:9d:a8:6e:ea:a0:6f:cd:
30:2b:0d:31:f6:5d:f0:a8:1f:28:1a:97:41:13:9c:
b5:a1:1c:52:70:8c:e6:27:6c:32:8c:ec:1e:0b:29:
bc:af:b4:55:9e:39:47:7a:d0:dd:eb:86:be:cf:5b:
4c:65:fa:df:19:0e:c1:97:7e:c4:b4:1d:65:19:15:
e1:76:92:e8:5d:f7:a2:5b:e1:a4:0d:8a:db:72:dc:
b2:8c:a6:7a:a2:0a:65:76:e1:0f:db:18:5e:ba:d2:
f1:11:76:d0:e9:f0:a0:c4:d8:af:84:47:1a:ec:da:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5C:79:BD:3C:9B:CB:1C:05:D1:A7:64:68:D2:D8:59:2B:60:B7:EE
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:df:ba:7c:b8:05:f1:31:3d:f4:4e:c2:68:c9:ad:e2:b8:e6:
81:c7:c5:53:22:11:66:2b:98:63:84:44:67:00:b8:b9:03:45:
45:c6:f6:d0:53:49:60:67:ca:4a:62:49:b0:e9:bc:88:d0:36:
54:b4:8a:35:c4:a4:8c:04:55:0e:80:d5:a2:34:b9:9f:9e:c3:
5d:c5:09:e9:06:ae:54:f0:53:41:00:ef:20:77:4a:c1:34:8b:
50:29:3d:44:76:9c:77:e2:00:b4:0e:e9:6d:44:85:51:bb:52:
91:8a:08:63:23:78:29:b3:13:57:e5:f9:e8:d6:82:df:41:91:
94:95:d0:22:21:90:dc:4d:f7:58:1a:40:15:1b:97:a2:7b:de:
70:d5:12:9e:31:ed:0f:77:63:37:f7:c3:88:d0:fc:bc:ad:89:
8b:5c:fb:f9:01:9e:c4:f9:e3:72:18:a1:d4:7f:99:ce:f5:14:
37:64:be:e0:cc:00:1f:9d:d9:ee:81:4a:06:c5:3c:45:7e:1f:
df:da:9c:26:77:79:75:8b:81:14:9f:54:40:f5:22:2b:9b:7f:
23:9b:27:f4:bb:74:46:8e:5d:a8:cf:57:7f:89:57:bc:53:b5:
99:6f:3a:56:d0:10:d0:b1:32:01:e1:46:d0:12:e3:37:1e:7c:
b2:b2:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:39 2026 by rpki-client