Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier: V3X8nQfeznq6DepOwug3+TzWD+DL14RhQvSadOHZGIg=
Subject key identifier: 1F:DD:65:6E:91:0A:13:59:70:50:AE:B3:2C:FF:F6:81:79:26:E1:4D
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 019E1FEC83561DA65702F32FB742304A8774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 06:00:54 +0000
Manifest this update: Wed 13 May 2026 06:00:54 +0000
Manifest next update: Thu 14 May 2026 06:00:54 +0000
Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: sNUhp5kVAJTG5AKf0R6Ggv34nJ7H3rDXlN27cYbR95c=)
2: RwU9zWthyfSOUWuvsWlsVhpMbmQ.roa (hash: 74TavDCjufR6GUNTwdp6AJnNFnxix31gx+8KWS5C2g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:83:56:1d:a6:57:02:f3:2f:b7:42:30:4a:87:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: May 13 06:00:54 2026 GMT
Not After : May 14 06:00:54 2026 GMT
Subject: CN=1fdd656e910a13597050aeb32cfff6817926e14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:8f:1f:4c:9a:c4:84:90:4b:94:27:28:bb:
e7:f5:20:f9:37:ed:85:3b:3c:97:3b:8b:e5:78:7c:
ec:4d:ec:16:f1:c5:b2:19:23:f9:5b:c7:9e:1b:2d:
b2:cf:1c:02:97:90:fc:57:4b:36:a0:16:a5:eb:8e:
42:de:88:8d:6b:2f:23:24:e7:f6:ff:74:ce:b1:7d:
0a:f0:20:d3:d3:cc:f0:e1:39:af:9d:1a:27:60:95:
20:79:ce:0f:3b:3c:4b:bc:2e:f7:a4:3c:98:5a:40:
ec:6e:c6:f6:6a:bf:f5:58:00:69:e0:4b:f0:90:01:
88:19:1e:4d:a3:17:56:2f:4f:5d:55:f4:c7:eb:40:
a7:b7:a0:4a:67:d4:55:ce:06:27:2a:0a:e1:b4:89:
a0:9b:c3:33:34:06:c2:a2:16:21:e9:18:ac:2a:ff:
7f:6d:d3:ec:fa:f3:d1:fd:dd:8b:13:2b:30:97:00:
8a:53:ee:76:80:f4:2b:8b:f9:d3:7c:fa:82:c8:1e:
8b:4e:27:bd:ce:34:0d:34:e9:72:23:9e:dc:8c:15:
9d:ff:9e:33:f5:a2:3a:ad:65:0d:ca:d0:d6:50:8e:
0a:ca:07:67:1d:01:9c:cf:72:e5:d7:5c:50:73:e6:
90:83:c0:89:22:07:6c:6a:47:25:ac:5f:c0:fa:5e:
21:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DD:65:6E:91:0A:13:59:70:50:AE:B3:2C:FF:F6:81:79:26:E1:4D
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:07:34:e0:e5:0e:e1:41:d2:64:7e:49:be:ff:0c:ed:25:60:
c7:fa:4e:7b:1f:13:bb:94:72:dd:f7:5b:c2:a6:96:4c:cd:32:
cd:8e:f1:26:a1:9a:04:01:95:db:86:14:98:0b:14:d9:36:db:
ab:96:e3:bc:bd:2a:ce:3f:c4:fd:5d:cf:18:b9:a2:2a:55:40:
fe:a7:cc:04:65:21:6e:21:5a:d2:29:69:7f:2a:99:1d:36:d5:
fb:fc:83:53:d3:50:ef:5f:0d:62:3e:32:5e:4e:5a:16:c4:67:
35:be:8d:4e:b0:c5:d0:bc:e0:2a:8e:a4:4f:20:d9:39:2d:fa:
f5:ed:82:3d:97:2e:e9:19:0e:3e:db:33:64:65:19:b8:f2:50:
6f:8b:5b:a1:d1:25:29:9c:75:30:19:92:f9:d7:e2:37:e3:d4:
38:4c:4b:89:5a:07:59:34:3d:dd:8f:06:83:ab:6a:6b:0f:77:
5b:34:1e:eb:44:39:f2:e6:33:4d:40:6b:18:e0:8e:e5:d8:b0:
8e:86:8c:75:d5:6a:51:de:36:26:d4:4e:7e:72:5d:ee:63:b6:
5a:cc:21:49:81:d8:d7:c2:72:bf:c3:4d:5b:80:e4:70:ed:47:
fb:9a:c7:3c:3a:66:61:da:fe:9e:36:cd:55:1c:f3:2f:6a:b9:
3a:53:eb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:49:02 2026 by rpki-client