Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier: Z/0YzFnEvnJbq4uUTy8WYiyfUZxhYNqyo95W2lQDxqE=
Subject key identifier: 9D:BF:67:CD:EC:D8:3D:1B:18:94:9A:4C:29:97:4E:47:4F:E5:BA:83
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial: 019E1C103B94B8D9A3FE5C939C22DDF2EDBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number: 0889
Signing time: Tue 12 May 2026 12:01:26 +0000
Manifest this update: Tue 12 May 2026 12:01:26 +0000
Manifest next update: Wed 13 May 2026 12:01:26 +0000
Files and hashes: 1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: 9K/verY0+1n51oMz8nuu1IuWPHkOYZ3Q7AadEOSGRc4=)
2: ci8f7Y86uB9atamo1D3e8sszzV0.roa (hash: JE0+am3liaO3am6zHqUi0SmfiCv9crbc5X4aX8Cwg8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:3b:94:b8:d9:a3:fe:5c:93:9c:22:dd:f2:ed:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
Validity
Not Before: May 12 12:01:26 2026 GMT
Not After : May 13 12:01:26 2026 GMT
Subject: CN=9dbf67cdecd83d1b18949a4c29974e474fe5ba83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:ac:44:d7:b4:c8:26:61:2f:0f:42:ce:4b:
36:e6:b5:32:a2:be:a4:34:a3:1c:1a:de:75:5d:db:
09:08:8f:1c:d8:fe:dd:83:02:fc:02:6b:80:b5:5a:
8a:37:ed:bf:7d:39:c3:8c:a8:fd:d5:fa:25:c7:cb:
a5:ea:93:e4:b3:31:c8:34:ac:76:b3:c2:95:ec:6b:
5b:26:b9:d6:c7:bf:8d:82:4c:b9:c5:ec:3d:83:77:
61:b4:86:ff:7f:a4:c7:8b:7a:3e:1c:8a:49:c9:13:
c2:30:b2:e9:e9:ea:8b:9e:5c:eb:3a:1b:12:7c:3d:
22:28:85:8d:a7:ab:fe:a1:50:b3:62:8d:da:04:70:
10:62:86:15:27:26:3c:71:60:90:4e:10:7d:17:12:
3f:3a:b4:c6:6b:46:fe:a2:9f:4c:66:06:cf:11:48:
28:77:67:96:9b:c4:83:a5:9d:20:69:03:8f:ce:65:
0a:43:cc:84:06:66:e3:60:1f:c4:fa:dd:c6:46:01:
e6:fd:03:7c:fc:51:58:4d:5a:ed:17:c2:d3:d6:4c:
b7:d7:0b:04:96:f4:fb:29:fa:ff:ad:35:4f:29:92:
24:ee:b9:7e:48:e5:28:76:8d:46:4a:17:14:f9:2d:
fe:cf:05:e5:fd:4c:73:e4:83:a9:d4:6b:fc:ad:a2:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BF:67:CD:EC:D8:3D:1B:18:94:9A:4C:29:97:4E:47:4F:E5:BA:83
X509v3 Authority Key Identifier:
keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ea:2c:20:9b:c6:ff:61:b0:31:61:71:b9:c1:ff:80:db:a0:
6d:e7:b9:f8:3a:8e:93:ad:64:75:d3:aa:c0:25:39:1c:b3:b6:
d4:26:91:a6:76:b4:a4:b8:8f:98:bb:66:be:63:ae:18:02:76:
63:e7:17:f8:ef:76:d3:ad:6f:6a:7c:5a:0a:db:ee:cc:28:a3:
38:90:65:e2:8e:b3:de:78:80:0a:fa:64:14:5b:0e:42:91:d9:
0b:bf:66:b6:f4:2c:06:4a:73:08:19:6e:d1:2f:11:00:a2:47:
32:5f:bc:08:20:0c:04:ee:ed:b3:af:62:af:e2:4b:ce:87:ec:
c5:0a:db:c0:02:a2:07:8e:56:a5:81:d9:9f:d0:83:0c:49:c3:
4c:45:87:d8:ae:1b:e7:7b:eb:02:1b:78:04:7e:40:9d:fc:2f:
42:b3:f6:0d:bc:73:6f:57:bc:19:73:76:77:fa:0b:0a:eb:02:
2b:7c:9a:b2:1d:13:36:f6:65:d6:ec:1d:86:e3:65:67:f1:25:
e9:f1:ec:b1:9d:df:65:2d:83:62:94:0a:d6:81:8e:af:18:b4:
14:68:fb:c1:8c:63:fb:fb:39:54:d2:50:44:e4:5f:23:e1:e1:
38:52:66:d4:f2:8d:84:01:2f:17:8b:85:eb:f9:fd:dd:27:fc:
9e:76:4d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:43 2026 by rpki-client