Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier: 87IoLv1w6qSomxFcQ8X09D4DyyEsUZ3KMG4IpmiOsIs=
Subject key identifier: A8:1D:A7:1F:CF:44:42:7D:E2:3D:2A:02:65:94:D3:7C:B4:F7:48:2D
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 019E1DFE8BD067E4FAB571756D6531097DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number: 15E7
Signing time: Tue 12 May 2026 21:01:21 +0000
Manifest this update: Tue 12 May 2026 21:01:21 +0000
Manifest next update: Wed 13 May 2026 21:01:21 +0000
Files and hashes: 1: N611FyyDWK9ug4tcbq7YvkQysOc.roa (hash: cBgwqk8mDKhuXD2KmuvuFfz0Mfhld+DUNOT4u8hWcPE=)
2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: Wl2R2cOPHrDweYrzFkRl4YQgEk2pceS1bVUFGfG3J2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:8b:d0:67:e4:fa:b5:71:75:6d:65:31:09:7d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: May 12 21:01:21 2026 GMT
Not After : May 13 21:01:21 2026 GMT
Subject: CN=a81da71fcf44427de23d2a026594d37cb4f7482d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:81:fc:26:b6:66:e8:08:0b:8d:c3:ac:18:
bd:63:60:c6:f4:5a:76:d6:54:e2:af:39:fe:ef:94:
22:a6:0e:1a:99:db:6a:44:fd:eb:5f:81:30:b9:2e:
4d:2f:23:ef:a5:f1:9e:d0:5b:fb:ff:c1:ec:37:2e:
62:08:2d:27:0d:f4:ff:f8:4b:66:3d:59:3a:80:2d:
d6:96:da:4a:43:d5:8f:aa:3d:b6:24:62:8c:fb:90:
e5:f8:64:05:c8:be:cb:5a:64:a4:18:41:64:29:ac:
9d:c2:71:c1:4c:b5:b7:7c:ae:01:0f:8e:25:6a:bc:
0d:da:8c:70:a3:12:a3:55:80:8b:ee:c4:94:8a:ba:
f4:30:74:1f:9f:ac:de:07:c3:fe:15:b2:9b:7a:9d:
e9:c4:34:24:77:bb:8e:86:73:4d:db:dd:50:a4:94:
59:81:c0:a6:08:65:67:0f:87:86:40:8f:8f:2b:78:
0c:61:09:1a:3f:e4:24:bc:0c:4e:e1:71:f8:be:b8:
20:17:ef:1f:ba:fa:76:12:f7:b3:f7:e8:37:bf:7b:
f7:bd:58:fe:0c:10:41:9b:0c:cf:6b:91:2f:4d:ca:
23:6c:ac:7a:2c:34:02:2f:d7:58:0a:98:62:8e:45:
89:58:94:74:b6:1e:cd:a8:bf:02:96:97:ad:58:ce:
b8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1D:A7:1F:CF:44:42:7D:E2:3D:2A:02:65:94:D3:7C:B4:F7:48:2D
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ce:3e:93:9d:20:72:f3:bd:5e:16:79:9b:af:5e:f6:df:dd:
b7:1a:3d:5d:7e:5b:6f:ac:28:75:cf:e5:65:b0:06:e6:7a:97:
28:b5:bd:8c:19:29:b4:19:d1:26:4b:68:43:b4:92:c0:d4:c7:
b7:5f:d7:5f:55:37:b0:61:fb:26:ab:90:6d:0c:7d:86:ac:70:
18:33:d3:af:35:74:1d:72:46:44:a2:b2:1e:b3:c9:e4:43:1d:
5d:d8:64:bc:47:a3:75:f6:33:e9:a6:69:26:cc:05:5d:97:e1:
fb:45:88:9b:90:5c:33:41:7e:e5:f4:b5:1e:57:6f:25:f8:2e:
9a:00:39:61:10:97:29:f4:46:fc:29:9e:e8:c7:80:10:1d:be:
af:aa:b4:83:a2:9f:f3:63:3e:e3:e9:78:db:36:73:be:ab:db:
b0:7f:f0:ee:07:29:db:d1:04:07:00:ac:54:ca:f6:de:6d:db:
d6:bd:65:2b:d6:f8:1a:20:bc:a7:18:52:6e:7c:7d:7a:b3:0f:
c0:96:02:16:6d:20:1e:24:40:0d:75:31:31:08:98:cd:66:4a:
ce:62:f2:d4:61:e2:a6:57:f9:a9:28:f6:0b:35:06:59:22:0e:
33:4f:b3:8f:f2:ee:c9:d8:57:25:e6:34:74:7d:67:4c:77:2e:
0a:21:13:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:22:56 2026 by rpki-client