Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File: 7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier: QOAk6m9zgDr2cVsGIrOL0XB2W2f5tl7XegdIIeCqKkE=
Subject key identifier: E2:10:3D:2D:7A:C2:59:06:F9:D5:44:75:84:EA:1B:18:E4:42:C1:8A
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 019E1BD91C708392778574BE44F95D3C86EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number: 1602
Signing time: Tue 12 May 2026 11:01:13 +0000
Manifest this update: Tue 12 May 2026 11:01:13 +0000
Manifest next update: Wed 13 May 2026 11:01:13 +0000
Files and hashes: 1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: 9iZ2xJliikEnUPpS767uIkGfJbccGSdGWS3Y6FReGhw=)
2: 80dI9feXzE2T2t1bf2lPrI9UTCM.roa (hash: Q8e0O49tibA3BkTmL30HyVvrm1M+ka9VvoTMNCf2EJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:1c:70:83:92:77:85:74:be:44:f9:5d:3c:86:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: May 12 11:01:13 2026 GMT
Not After : May 13 11:01:13 2026 GMT
Subject: CN=e2103d2d7ac25906f9d5447584ea1b18e442c18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fc:3e:40:61:d1:41:eb:61:f2:19:49:4e:6b:
ed:fb:cd:68:4a:c9:a6:16:7b:6e:ff:f6:e0:1f:b1:
5f:0e:1c:c0:69:a5:a1:70:f5:e7:7c:fe:f3:69:fd:
c5:36:34:fe:70:2c:8d:fa:3c:d6:af:21:4b:14:2a:
7b:2d:fe:2d:22:76:4a:7f:44:ae:42:cf:f9:82:c8:
48:71:d6:03:a7:b0:64:0f:ba:3c:06:0d:f3:58:5b:
04:92:7f:a1:78:56:20:30:5d:c1:96:83:d7:3b:27:
ab:f3:09:53:df:7b:9b:d2:55:05:6f:5e:aa:20:fb:
06:e9:6b:7d:08:96:ae:a6:c3:99:75:2e:94:62:10:
f4:42:12:0d:76:ce:db:dc:d7:5b:09:02:2a:08:08:
82:da:0f:76:90:ca:87:a3:a3:08:22:c5:79:8f:87:
34:64:95:eb:59:eb:86:fd:75:cf:68:f1:9b:df:f4:
61:98:59:c6:5e:3e:0a:54:9c:ab:a2:f5:82:97:1b:
8e:45:c8:25:f3:53:da:eb:53:2e:d3:70:21:38:14:
e6:e5:7c:ce:8d:68:e8:92:4b:f7:ee:3d:34:92:09:
a2:7b:36:ab:97:75:78:81:a0:10:1c:2d:6a:19:30:
23:7b:1a:b1:27:40:2a:8e:9a:36:7c:e7:48:9b:16:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:10:3D:2D:7A:C2:59:06:F9:D5:44:75:84:EA:1B:18:E4:42:C1:8A
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a5:3c:3a:3a:d2:4e:16:70:4f:31:20:65:13:3d:25:78:fe:
07:20:fe:12:31:ae:0f:ac:fc:5f:9b:d7:0d:f9:53:19:c1:01:
c4:7c:ea:5c:ee:29:f1:3a:e7:33:48:7b:03:51:10:ec:10:fc:
e5:d4:5c:2d:7a:4e:e5:bb:8e:de:06:ee:8a:17:de:60:a0:14:
64:6c:13:b5:8b:28:58:dc:df:4e:bb:ec:f1:ef:21:f4:f9:a7:
bb:3e:8f:96:73:ed:e2:57:59:d7:1f:d7:db:24:1d:c5:bf:d0:
bd:1e:90:a7:35:17:10:bf:70:b0:74:44:50:a4:e4:ba:e2:06:
bc:6a:ac:53:c3:ad:9b:98:6e:bd:ac:a3:c8:71:21:2e:28:e5:
cb:6d:2c:1d:1d:04:63:87:b8:10:0d:5a:8e:64:7d:b9:59:bd:
0f:89:68:f0:cd:31:a5:01:17:ac:99:32:a1:95:19:f5:8c:b7:
31:83:31:3d:ab:b1:25:40:01:03:6e:81:03:62:c1:b1:4b:54:
08:d5:de:fb:44:77:6a:fe:0c:f9:12:7e:7a:16:8a:58:d1:4a:
ce:60:ca:5d:ec:9a:d6:f4:e8:59:e0:02:ac:31:04:b4:79:83:
a6:a8:fc:7d:68:a6:93:33:60:10:52:68:bd:41:1f:c8:6e:9e:
41:1b:c9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:59 2026 by rpki-client