Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier: a/MrqZS3/DBFM3PX6N9ttv0O2hNvUXu4xwvx2DLMl7Q=
Subject key identifier: A5:60:8D:97:1F:1F:92:D5:36:BF:15:11:CA:3D:47:0D:C6:52:1D:65
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial: 019E1D22E961307F5924F3E1EDC9BA5D76FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 17:01:27 +0000
Manifest this update: Tue 12 May 2026 17:01:27 +0000
Manifest next update: Wed 13 May 2026 17:01:27 +0000
Files and hashes: 1: 5M_dzDXzTB3Y0brCjbUvwSZRed8.roa (hash: IY7K+wfx2bW1m/Ix+hlJ62XrT+AVkyx4H7HyP9JrVMM=)
2: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: D4JOX6NS2zPtn5qKgnqVeAPM+XGRHXodZlal8p5GeOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:e9:61:30:7f:59:24:f3:e1:ed:c9:ba:5d:76:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Validity
Not Before: May 12 17:01:27 2026 GMT
Not After : May 13 17:01:27 2026 GMT
Subject: CN=a5608d971f1f92d536bf1511ca3d470dc6521d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:80:0d:87:ae:54:52:3a:f1:85:88:26:1f:c7:
9c:4f:fa:65:ca:de:63:15:08:53:d5:d5:7d:29:2c:
d2:dc:30:92:d0:c7:6b:af:89:19:e7:f5:83:5e:9b:
f8:c7:1a:c5:a1:4a:68:4b:4f:41:5e:b8:51:a8:77:
1f:02:6d:aa:2b:18:7b:11:82:58:59:3e:f1:4a:6c:
58:6a:fe:71:5a:09:cb:80:ac:29:47:5c:b8:42:37:
1b:db:c9:b3:a1:95:2b:19:37:d1:80:0b:68:3b:32:
5f:40:5d:e5:9c:ae:1e:e3:e9:4e:29:c8:f7:03:1a:
e7:f9:27:a8:15:d3:e9:b3:62:af:f1:ef:dc:b8:57:
d3:91:7f:87:1f:66:d2:25:74:dc:8e:56:3a:e5:d9:
f8:eb:1d:17:1d:86:02:8e:c6:10:10:70:ab:ba:20:
3d:b5:d8:a8:68:c3:60:15:7f:54:cb:8a:15:15:44:
33:be:00:a6:fc:11:54:64:fa:7b:c1:9e:9b:3f:00:
a1:97:7e:28:e0:d0:99:3a:4f:2e:bf:e1:58:f2:61:
c6:34:1e:6a:aa:24:67:34:c2:c9:a2:24:b9:0e:c4:
eb:37:7d:fc:76:d3:70:f4:60:33:b8:cf:b9:d9:03:
48:b8:eb:11:30:ef:1d:65:39:a6:37:ca:0a:45:a3:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:60:8D:97:1F:1F:92:D5:36:BF:15:11:CA:3D:47:0D:C6:52:1D:65
X509v3 Authority Key Identifier:
keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:01:d3:ac:65:1e:b0:d4:2f:f6:7b:1d:c4:25:8a:a0:f5:e8:
03:90:7d:39:a7:6e:3a:c1:98:dc:78:1d:43:da:3f:9d:87:08:
2f:56:a5:e3:d0:f3:b6:63:fc:ec:89:f1:ad:12:66:e5:3d:43:
d0:ee:a2:84:84:15:24:1b:53:8a:df:91:ff:55:86:af:46:52:
56:51:9f:30:92:31:ff:01:6a:94:b7:1d:e7:05:eb:ac:2a:e8:
58:67:0f:b8:3c:f1:0a:14:84:0e:db:ae:0b:93:be:2c:55:43:
7f:84:60:e2:92:15:4c:7c:a0:2f:00:9e:41:1f:71:81:76:e1:
24:f4:c6:1c:4f:da:24:5b:c8:b1:36:a4:d0:eb:03:16:6f:37:
60:3a:d0:b7:20:6e:72:81:f6:c2:68:14:ef:88:1e:4c:63:7a:
ea:af:74:2f:72:b7:2d:37:94:8a:39:c4:ee:eb:05:e9:bb:a1:
5a:da:10:b8:dc:9a:c5:e1:18:24:19:13:a6:c4:d0:96:f0:34:
89:89:ed:86:11:3f:92:09:8a:57:47:26:04:ac:5e:39:90:9a:
bb:ea:d6:8f:62:39:15:f2:7c:80:56:43:55:55:71:bc:9d:9c:
ac:b6:5f:00:50:26:c4:a9:c5:67:a7:b6:c3:77:e9:09:36:22:
94:a6:b1:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIulhMH9ZJPPh7cm6XXb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNTI5M2NkNGE2MjdhODQ2YWVkNjBjYTdmYjVkNWE5MDE5
YWFlNTEwHhcNMjYwNTEyMTcwMTI3WhcNMjYwNTEzMTcwMTI3WjAzMTEwLwYDVQQD
EyhhNTYwOGQ5NzFmMWY5MmQ1MzZiZjE1MTFjYTNkNDcwZGM2NTIxZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24ANh65UUjrxhYgmH8ecT/plyt5j
FQhT1dV9KSzS3DCS0Mdrr4kZ5/WDXpv4xxrFoUpoS09BXrhRqHcfAm2qKxh7EYJY
WT7xSmxYav5xWgnLgKwpR1y4Qjcb28mzoZUrGTfRgAtoOzJfQF3lnK4e4+lOKcj3
Axrn+SeoFdPps2Kv8e/cuFfTkX+HH2bSJXTcjlY65dn46x0XHYYCjsYQEHCruiA9
tdioaMNgFX9Uy4oVFUQzvgCm/BFUZPp7wZ6bPwChl34o4NCZOk8uv+FY8mHGNB5q
qiRnNMLJoiS5DsTrN338dtNw9GAzuM+52QNIuOsRMO8dZTmmN8oKRaMIzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVgjZcfH5LVNr8VEco9Rw3GUh1lMB8GA1UdIwQY
MBaAFO1Sk81KYnqEau1gyn+11akBmq5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUt
ZTI0MzM2ZWM4YTA4LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUtZTI0MzM2ZWM4YTA4
LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgHTrGUe
sNQv9nsdxCWKoPXoA5B9OaduOsGY3HgdQ9o/nYcIL1al49DztmP87InxrRJm5T1D
0O6ihIQVJBtTit+R/1WGr0ZSVlGfMJIx/wFqlLcd5wXrrCroWGcPuDzxChSEDtuu
C5O+LFVDf4Rg4pIVTHygLwCeQR9xgXbhJPTGHE/aJFvIsTak0OsDFm83YDrQtyBu
coH2wmgU74geTGN66q90L3K3LTeUijnE7usF6buhWtoQuNyaxeEYJBkTpsTQlvA0
iYnthhE/kgmKV0cmBKxeOZCau+rWj2I5FfJ8gFZDVVVxvJ2crLZfAFAmxKnFZ6e2
w3fpCTYilKaxqA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:15:23 2026 by rpki-client