Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier: U4ElPoKH36Oy4r3EHBC4b4vCxo+HYk9PDpkWYPl0nv0=
Subject key identifier: 97:9F:4C:03:30:DE:A6:A5:B4:71:16:94:77:F8:56:4F:9C:22:FB:B1
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial: 019E1CB550BB3D8EBCB58E5F0109652B3291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number: 1074
Signing time: Tue 12 May 2026 15:01:45 +0000
Manifest this update: Tue 12 May 2026 15:01:45 +0000
Manifest next update: Wed 13 May 2026 15:01:45 +0000
Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: C1Oga2Ib7OgiBoGcRElfFuTg7SU7sqaFQIT7b/em/xE=)
2: MF5bEoN5sg-nawNjAIcgKbPLo2w.roa (hash: Eoby9ocfXIo2ysG9Id22HAzaklocSsTXx7pabi0Mev4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:50:bb:3d:8e:bc:b5:8e:5f:01:09:65:2b:32:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Validity
Not Before: May 12 15:01:45 2026 GMT
Not After : May 13 15:01:45 2026 GMT
Subject: CN=979f4c0330dea6a5b471169477f8564f9c22fbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:d9:c2:7e:1b:b4:1b:83:53:4c:1d:f0:fd:
e7:db:3b:18:a3:6f:7d:69:9a:c3:9d:dc:8f:c1:d8:
c5:c7:32:d6:9c:6c:48:c8:ac:de:ac:44:83:16:28:
fa:9c:3f:43:f8:04:f7:ca:d1:8e:4a:7b:e2:35:da:
19:a3:b1:4b:cd:f3:1d:86:5b:ae:50:d1:2f:8a:cc:
73:a0:9f:3e:1b:b1:29:fd:4f:c6:35:a6:9c:1a:69:
71:aa:8d:74:84:28:e0:a0:80:0c:bc:05:7b:d1:87:
2a:b5:bf:99:f3:37:62:18:fd:b5:24:d4:e4:a7:7c:
52:fe:2d:e1:c0:49:44:a1:f6:dd:42:22:d3:e4:8f:
aa:21:00:c8:c5:12:c5:a1:5f:9f:21:dc:c5:7d:d9:
9f:6a:8c:56:a6:47:51:25:e3:f7:7f:7a:35:3c:37:
98:10:f4:eb:62:15:86:f9:47:02:6f:f2:02:79:47:
3e:28:07:60:c3:5d:84:98:e0:e9:44:40:cd:5f:38:
a5:b0:c6:13:7f:aa:7f:42:bb:e1:3c:8f:bd:1d:36:
20:45:81:67:b7:d7:7f:5c:67:2f:9f:2a:04:c7:ae:
b5:bb:b2:f9:14:59:85:fb:c8:40:4d:cb:58:c9:af:
43:74:15:cc:ab:71:f4:89:02:cd:49:24:3e:19:37:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9F:4C:03:30:DE:A6:A5:B4:71:16:94:77:F8:56:4F:9C:22:FB:B1
X509v3 Authority Key Identifier:
keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b4:98:7c:0d:1e:38:3d:d7:f0:a1:35:72:ad:90:bb:28:e1:
a3:c8:ef:e7:bf:80:e5:06:02:dc:64:a8:92:3f:7e:d9:d9:df:
04:ad:c4:c5:8a:b8:d0:da:a8:da:ca:ea:7b:7a:14:66:8c:f7:
cc:82:57:75:b1:cd:24:1d:fa:2b:73:50:46:0a:30:c4:73:3f:
6b:91:14:f2:73:f6:9a:c4:0f:2f:8c:6b:e7:fb:5b:42:b1:f7:
43:74:99:b9:90:15:f0:23:32:9d:82:ed:2c:4c:93:a5:97:16:
27:c0:d3:c8:2f:c8:16:0d:01:a2:0b:f4:09:71:4d:c3:e9:dd:
1b:5b:57:8f:f4:e8:4f:5c:25:0a:6d:4d:92:87:64:7a:d4:47:
fc:88:9c:32:90:de:fa:e6:92:bc:ff:9e:ed:a1:44:57:bb:5a:
ba:74:cf:6a:d7:18:01:de:30:5b:45:d8:e9:52:ec:f7:ef:d7:
42:18:01:96:80:98:1b:35:aa:67:47:83:8c:e6:0c:ae:32:05:
0b:c2:66:ce:f2:1b:78:46:78:bb:a5:38:00:a4:78:60:dd:77:
34:36:28:d6:b7:52:38:75:6b:ec:07:43:31:c7:02:a1:e9:73:
31:d4:da:8a:e3:b7:14:e6:a6:91:57:f9:00:e1:df:aa:ca:3e:
96:24:87:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:04 2026 by rpki-client