Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
File: 7lsNNqN0qzXENu4Awuyu-7KjVEg.mft (raw, json)
Hash identifier: 1PgXojfPA59i+1Pib11Y6ZvpnB3+hnQ9Dzosc7aTsfI=
Subject key identifier: 86:BA:0B:B7:C1:28:2B:57:0A:AC:AE:C8:FC:7C:42:2F:C7:21:06:2C
Authority key identifier: EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
Certificate issuer: /CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Certificate serial: 019E1D9073648DDCC6376C3F2979A0586B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
Manifest number: 0325
Signing time: Tue 12 May 2026 19:01:06 +0000
Manifest this update: Tue 12 May 2026 19:01:06 +0000
Manifest next update: Wed 13 May 2026 19:01:06 +0000
Files and hashes: 1: 7lsNNqN0qzXENu4Awuyu-7KjVEg.crl (hash: qe28rz3Upqq3KRc1pRvCbTWc9W3J9IZVKzPINmP3ybE=)
2: fHCIkDI_tyAmmW1GOo4OCmgrWOQ.asa (hash: mjIlqPcdqEqZv1LLEdjujFp2APfTOPyNRkl6rj99vbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:73:64:8d:dc:c6:37:6c:3f:29:79:a0:58:6b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Validity
Not Before: May 12 19:01:06 2026 GMT
Not After : May 13 19:01:06 2026 GMT
Subject: CN=86ba0bb7c1282b570aacaec8fc7c422fc721062c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:6f:54:e5:cd:34:28:e2:67:47:e6:08:87:
22:76:5c:86:13:60:da:fd:40:f5:7f:6a:39:93:2d:
0b:05:02:c4:10:6e:ea:6d:3b:fc:2d:ce:4d:3c:7a:
d8:0c:a5:56:03:b1:70:4a:9c:ee:b7:33:33:11:17:
a3:b1:85:2b:10:24:e5:94:b1:02:84:c1:52:b2:e7:
c1:50:96:fd:59:7a:6a:98:b4:2f:c2:9e:82:70:15:
67:15:20:95:d9:da:de:2d:5f:f8:8e:48:73:ca:15:
2d:21:a5:69:1c:ea:bc:15:1d:74:5d:aa:4d:c4:83:
7c:7e:55:de:df:7e:2d:95:21:2b:59:00:59:29:ae:
e7:b4:71:2f:a0:94:3a:7b:3a:fc:d8:79:97:2e:e6:
35:00:8d:5e:70:f8:4a:10:92:72:20:c0:34:d0:3c:
6e:83:de:16:ee:81:e3:0a:a7:31:11:32:ea:99:97:
2b:25:71:37:39:7f:84:2e:31:57:89:5d:68:88:51:
a6:d2:7a:79:c7:89:d6:b6:6e:e9:14:2f:03:a5:0b:
8a:58:0b:b3:1e:fa:c1:87:89:f3:f3:1a:eb:d6:2b:
eb:64:5c:bb:fe:c1:c5:f5:15:97:13:0b:c8:a7:4c:
e8:d4:17:c9:36:0e:ec:31:5c:95:b1:9e:67:b8:ba:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BA:0B:B7:C1:28:2B:57:0A:AC:AE:C8:FC:7C:42:2F:C7:21:06:2C
X509v3 Authority Key Identifier:
keyid:EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1c:a2:cf:58:ab:af:94:04:d0:5b:a1:98:f8:77:d1:53:46:
68:19:a2:34:c7:c0:c6:42:07:c2:f8:03:e1:e0:27:2b:4b:3a:
2e:6d:01:41:be:2d:65:41:a8:31:8c:e9:57:bd:c3:55:ed:cf:
df:7e:9b:25:1f:a8:e1:b4:82:9a:78:28:10:14:a9:55:2d:64:
8f:15:3f:7e:ac:69:4b:50:b5:14:a9:63:6a:68:50:1f:16:a2:
e9:11:fd:84:ea:5a:0d:7a:5a:ab:c6:19:fe:20:11:9d:2e:4d:
f1:3e:12:79:03:96:c7:57:2e:60:da:4b:cd:7d:56:31:d5:26:
ae:7a:5a:38:cd:e5:9c:21:e5:c5:24:64:5e:12:31:75:83:ae:
81:c8:77:15:8e:e1:60:3b:9b:29:dd:b3:ef:3f:b0:db:19:46:
b8:7a:eb:b6:47:3f:0c:05:f8:4e:40:1b:b7:7c:15:fd:83:bb:
e5:1d:c3:0b:68:60:98:8e:f1:7b:71:21:3c:96:ae:c1:cb:b1:
0b:8b:ee:0d:c1:ad:3a:74:ae:da:52:81:5a:6d:82:fc:2b:ee:
99:17:28:60:4d:ba:7f:c5:a1:10:57:c9:26:1a:b0:5e:69:e5:
86:f7:f1:45:88:18:79:4b:84:ea:3c:ee:e8:b5:cc:13:07:30:
f9:9d:1d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:24 2026 by rpki-client