Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: P67J1+inRlOoYp8J+v74IydjbgPRu8NGc2gbL7Fe3Z4=
Subject key identifier: B9:33:EE:71:F5:56:84:1A:60:60:FF:1F:F7:C4:42:C0:91:6F:7A:96
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 019E1D911D0A4E5CBEF3E35036FE110532DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 19:01:49 +0000
Manifest this update: Tue 12 May 2026 19:01:49 +0000
Manifest next update: Wed 13 May 2026 19:01:49 +0000
Files and hashes: 1: 0xwfSsFkb05U4ozVSEb8hCqR4ZM.roa (hash: wDnxCrMW737wBP0bFwNqAOo1oxv3iXJSRvzrJ/qp1Dc=)
2: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: 3xrd6hZR3B2G8hE7OSmUdm6BIIo9bx6/nN7Ubp1A1Mo=)
3: zq7GSsBTb4iCu4BsJeZ1X5mLg0g.roa (hash: wAonBOQHcI2HVnsLhr53pN++Gv5Cyj0r6V/3M0lZCdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:1d:0a:4e:5c:be:f3:e3:50:36:fe:11:05:32:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: May 12 19:01:49 2026 GMT
Not After : May 13 19:01:49 2026 GMT
Subject: CN=b933ee71f556841a6060ff1ff7c442c0916f7a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:91:35:45:c7:be:c9:48:84:85:81:44:c1:
30:8d:68:94:1c:38:8f:64:1c:90:37:f7:bb:42:71:
57:ca:58:95:0a:24:3f:9c:b1:80:d8:fc:3d:65:2e:
9a:d1:b9:80:b8:19:70:a3:b2:9d:63:cf:9c:66:9f:
97:7c:74:48:8b:95:9b:4d:ca:28:07:f9:9a:59:f6:
65:c3:92:89:79:24:22:10:67:4e:94:9d:c6:c2:16:
bc:7f:99:f4:ce:ba:a1:38:29:f4:d1:e8:f5:af:85:
d8:ab:35:dd:d6:ff:39:a5:f9:d9:0e:5d:fd:37:6f:
36:55:12:02:d1:6b:75:75:f0:e0:b0:26:5d:fc:29:
f5:38:83:14:1f:ec:2c:c0:e6:a4:9a:16:78:ec:90:
e9:cb:c1:d3:87:da:7b:8e:06:d5:64:e2:d8:f6:b4:
5d:a2:8d:05:9b:55:f0:36:22:23:86:21:c5:bb:c4:
f7:dd:3e:cf:98:c0:64:66:c4:d0:2c:b8:c4:99:99:
dc:0d:d4:73:32:e0:94:26:ec:cf:f0:01:8c:e9:3c:
28:f1:1d:e0:a8:c6:5a:68:aa:64:51:42:b5:51:11:
5e:a2:c6:81:e3:a3:74:3a:19:5b:3f:1f:f2:c0:81:
81:0d:5a:01:d1:07:28:b4:f7:ff:89:52:c5:a7:b3:
03:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:33:EE:71:F5:56:84:1A:60:60:FF:1F:F7:C4:42:C0:91:6F:7A:96
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a5:2b:26:9b:6e:e7:8e:2b:94:36:63:62:45:0e:5d:8c:df:
77:cd:39:f8:f5:67:6f:c0:b5:67:a0:72:79:98:7d:3a:ed:35:
1b:ed:e7:be:42:0c:b2:61:82:70:62:a1:cd:a5:df:ee:eb:ed:
3d:04:e7:67:05:47:21:b3:88:63:e3:3b:97:ea:b9:08:ce:e6:
cd:72:c2:bc:f3:6b:c3:bb:43:3e:20:92:51:32:6b:29:ea:f1:
50:04:cd:45:97:f4:ed:b3:7d:e2:82:2e:04:44:39:d1:c4:83:
ad:e7:2f:1f:b0:50:26:73:6b:66:3a:41:02:c5:fd:48:f8:6a:
4b:71:d0:de:ec:ee:87:d0:35:51:5d:98:c4:94:d9:d8:08:f6:
ee:11:b0:5b:2f:f5:f9:fa:00:b1:f6:ae:bd:4b:da:82:09:33:
8f:2c:3c:1c:fb:55:a4:a2:b0:a1:bd:1d:cc:30:13:c9:1d:bc:
f3:f1:fe:cd:ea:7f:b1:cc:e9:6f:aa:cc:b5:cc:f4:d4:eb:ad:
4a:4f:e6:4f:9b:49:1d:07:15:e6:f3:a3:1c:0c:c5:5e:64:86:
a2:73:2f:4a:3e:91:c8:df:63:1b:19:f4:5f:1d:a9:63:01:d7:
db:7d:bd:f1:07:2f:9b:8b:26:f7:4d:d0:42:c3:67:71:fe:73:
2d:f9:93:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkR0KTly+8+NQNv4RBTLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYjk1Y2ZjMmQxODdmNDA1MzBlZjA4M2JiZDEwYzg4YzQ5
NTZjMWQwHhcNMjYwNTEyMTkwMTQ5WhcNMjYwNTEzMTkwMTQ5WjAzMTEwLwYDVQQD
EyhiOTMzZWU3MWY1NTY4NDFhNjA2MGZmMWZmN2M0NDJjMDkxNmY3YTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+2RNUXHvslIhIWBRMEwjWiUHDiP
ZByQN/e7QnFXyliVCiQ/nLGA2Pw9ZS6a0bmAuBlwo7KdY8+cZp+XfHRIi5WbTcoo
B/maWfZlw5KJeSQiEGdOlJ3Gwha8f5n0zrqhOCn00ej1r4XYqzXd1v85pfnZDl39
N282VRIC0Wt1dfDgsCZd/Cn1OIMUH+wswOakmhZ47JDpy8HTh9p7jgbVZOLY9rRd
oo0Fm1XwNiIjhiHFu8T33T7PmMBkZsTQLLjEmZncDdRzMuCUJuzP8AGM6Two8R3g
qMZaaKpkUUK1URFeosaB46N0OhlbPx/ywIGBDVoB0QcotPf/iVLFp7MDJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkz7nH1VoQaYGD/H/fEQsCRb3qWMB8GA1UdIwQY
MBaAFGu5XPwtGH9AUw7wg7vRDIjElWwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgt
NDY2MDEzNDM1MDc5LzEvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgtNDY2MDEzNDM1MDc5
LzEvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6UrJptu
544rlDZjYkUOXYzfd805+PVnb8C1Z6ByeZh9Ou01G+3nvkIMsmGCcGKhzaXf7uvt
PQTnZwVHIbOIY+M7l+q5CM7mzXLCvPNrw7tDPiCSUTJrKerxUATNRZf07bN94oIu
BEQ50cSDrecvH7BQJnNrZjpBAsX9SPhqS3HQ3uzuh9A1UV2YxJTZ2Aj27hGwWy/1
+foAsfauvUvaggkzjyw8HPtVpKKwob0dzDATyR288/H+zep/sczpb6rMtcz01Out
Sk/mT5tJHQcV5vOjHAzFXmSGonMvSj6RyN9jGxn0Xx2pYwHX23298Qcvm4sm903Q
QsNncf5zLfmTxw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:22:59 2026 by rpki-client