Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier: DI6HS3MYHUjpJq+bNvnwOcN1wjjtDSrHZUZhUxciLI8=
Subject key identifier: B1:08:EF:CE:9C:74:3D:12:C0:5D:42:BA:40:8F:3C:C9:1D:E3:F5:BF
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial: 019E1C472F1A6AA9FCEDE8ABFDB6F3B9AE65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 13:01:27 +0000
Manifest this update: Tue 12 May 2026 13:01:27 +0000
Manifest next update: Wed 13 May 2026 13:01:27 +0000
Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: Ib8uwesp68CUbMTkJ/P2XagBXZWOwOx6g66QLc22w2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:2f:1a:6a:a9:fc:ed:e8:ab:fd:b6:f3:b9:ae:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Validity
Not Before: May 12 13:01:27 2026 GMT
Not After : May 13 13:01:27 2026 GMT
Subject: CN=b108efce9c743d12c05d42ba408f3cc91de3f5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:67:59:43:e1:e3:3d:23:01:cd:98:46:43:
61:67:fd:1c:41:11:b2:7b:9e:d3:25:d1:16:fc:f2:
3c:a2:d5:7f:e3:f2:50:11:c7:86:8c:aa:9b:94:f9:
2a:ff:f4:47:05:17:a6:9f:07:32:ba:7c:83:1a:d8:
25:19:65:85:79:1d:1b:1e:d0:2e:20:af:76:39:d6:
94:36:63:bb:08:ca:2c:d2:f7:09:64:71:2f:14:90:
ee:3f:b9:87:3f:20:36:93:0d:54:25:7d:5d:16:19:
70:44:96:0d:be:87:ad:41:a7:e3:80:e7:de:5b:10:
17:cb:a0:06:a3:d6:b8:a9:08:5e:a5:28:60:f9:12:
c2:1a:15:27:74:07:dc:36:97:e4:a8:28:a3:89:99:
6e:27:ec:7a:4a:11:ef:64:95:94:c4:3d:e2:f8:f8:
1e:ac:17:be:7e:f1:13:ae:b2:22:f2:21:a9:e7:d3:
63:88:ee:7d:41:68:32:ff:fe:8c:d9:f0:30:4a:cd:
91:26:e7:2f:ea:aa:a4:9d:42:72:88:b3:50:d4:68:
cf:7a:ad:0d:4b:8e:12:7a:db:53:53:47:80:36:5e:
85:bd:f3:a4:d3:35:a0:6e:a3:b9:d2:4f:79:c8:fb:
74:f9:d2:05:e7:5f:73:9b:71:4d:10:18:46:4d:29:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:08:EF:CE:9C:74:3D:12:C0:5D:42:BA:40:8F:3C:C9:1D:E3:F5:BF
X509v3 Authority Key Identifier:
keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bf:1b:e0:fa:12:f2:c4:b0:f3:c0:30:6a:8d:74:63:09:09:
5e:c0:80:2a:71:95:8e:c7:b9:8b:f5:0f:3d:a9:eb:19:b3:9c:
9f:e0:8d:3b:fa:3f:37:99:fc:b9:d1:4b:35:7e:a3:95:8f:08:
54:97:8f:17:00:bf:e0:e5:5a:60:95:8a:ef:c6:e4:21:a3:01:
41:a5:02:a0:9d:d8:42:23:0e:55:93:26:a2:b5:35:00:24:53:
00:7d:0e:6e:ba:84:e3:94:ad:fe:e3:c4:6f:a6:85:4f:40:a0:
2d:11:a8:57:fa:09:8f:ad:89:5b:33:fb:82:64:4e:01:ae:38:
3b:57:f9:fa:82:53:81:0f:43:06:5c:3e:a1:d3:14:a4:6d:52:
ea:6a:b7:64:3f:c9:a7:3f:68:f3:6d:84:62:ca:8e:48:38:94:
87:d2:a5:06:b6:5e:21:fa:32:89:1c:64:75:ed:be:58:c0:16:
84:ba:d1:4a:d7:c9:11:7f:3d:1f:40:66:f4:5f:46:97:3f:68:
ae:24:cd:5e:d8:5f:0a:3b:0c:52:2f:7b:a1:4d:2e:45:7c:74:
01:f9:77:df:a5:08:b3:b8:d1:62:26:75:cb:0a:ab:52:36:94:
3f:a4:f7:b1:65:cb:b4:18:6e:9f:48:74:ff:c1:1b:10:70:3b:
d1:2f:34:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:10 2026 by rpki-client