Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
File: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft (raw, json)
Hash identifier: U1WnhevBmSWo4o9oYwNWDUwzOo9sHqwiXwDgnw7sWzw=
Subject key identifier: 40:BA:67:1D:C0:BB:69:E4:04:31:18:C4:B0:3D:A4:C6:3B:B7:2B:4C
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial: 019E1C0FD25C02C9CDDBA3606DA533B4753F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
Manifest number: 0487
Signing time: Tue 12 May 2026 12:00:59 +0000
Manifest this update: Tue 12 May 2026 12:00:59 +0000
Manifest next update: Wed 13 May 2026 12:00:59 +0000
Files and hashes: 1: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl (hash: Agb+gbCKASU302tezfEsXjOojVqHBNrVbX9/PboXdTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:d2:5c:02:c9:cd:db:a3:60:6d:a5:33:b4:75:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
Validity
Not Before: May 12 12:00:59 2026 GMT
Not After : May 13 12:00:59 2026 GMT
Subject: CN=40ba671dc0bb69e4043118c4b03da4c63bb72b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:72:c4:22:18:f3:b4:91:60:57:d4:a3:4c:
d3:81:b2:b4:f4:a2:84:56:8d:6d:ba:2b:c4:73:c1:
da:b0:82:50:2f:74:75:ff:5d:32:6f:5c:f3:bb:72:
7e:ae:a1:78:09:d9:46:6d:59:db:5b:94:d7:34:3e:
0e:47:c4:7f:35:35:a1:07:4c:4f:d0:b7:98:be:81:
6f:79:02:e4:cd:22:af:a6:0c:0b:3c:59:54:fa:6a:
3a:64:71:65:64:44:1d:82:71:df:31:2f:e8:70:45:
eb:bd:23:c6:5b:8c:66:19:d5:9b:38:49:71:1d:a9:
b7:d4:3a:1b:04:87:bf:6f:3d:06:47:22:0a:1e:51:
f2:17:85:7a:4f:0e:94:70:a4:33:4b:a8:ca:5d:44:
f8:22:fe:2a:4f:6b:95:8b:5e:8c:f3:35:0f:e0:7e:
80:97:5a:39:51:c5:ec:af:8f:d5:70:b3:c2:0d:70:
e7:f7:98:cc:df:93:1c:d1:2c:fc:fd:7a:25:45:14:
b9:f9:d1:d0:69:b3:78:31:90:88:32:ea:a3:4e:39:
52:f8:de:65:47:f0:6e:c1:39:58:20:70:88:a2:ba:
3f:7c:ff:2a:6d:9e:02:56:07:7d:92:55:ae:d8:ad:
4a:74:c9:42:0a:a4:60:71:46:09:e5:16:b4:0a:21:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BA:67:1D:C0:BB:69:E4:04:31:18:C4:B0:3D:A4:C6:3B:B7:2B:4C
X509v3 Authority Key Identifier:
keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e0:31:fd:28:3f:de:d1:c7:19:9b:6e:d0:38:c2:83:0e:4c:
9e:b8:a0:c0:2f:df:d1:ed:da:b9:26:81:3a:c4:e0:a7:9d:ca:
45:63:96:46:aa:7c:63:d9:dc:93:c4:43:2a:0e:48:34:5e:0d:
4c:ad:c7:dc:a0:44:a5:1d:a0:d6:4f:f3:b9:6b:1f:87:eb:57:
9a:fa:87:20:e8:0c:f8:cf:f8:b3:58:da:4a:dc:70:e4:95:9f:
cc:0c:e0:ef:3e:76:44:22:d3:6d:40:1e:ee:86:d8:e8:dd:29:
a9:19:44:43:81:75:ad:61:9f:11:67:f2:ce:36:ad:af:27:d6:
d4:3f:05:f0:77:0e:50:af:eb:78:11:1d:a4:69:42:62:29:8d:
40:8c:f7:d3:eb:0f:69:e1:ff:6a:48:92:e1:0d:e7:dc:6f:2b:
91:15:74:f3:ff:c8:bd:61:3b:bb:61:bf:f0:da:f9:6f:80:ec:
a9:1d:99:9e:e4:8e:97:0d:81:f9:ee:cd:07:7e:28:51:c8:77:
d2:a6:7f:cb:78:6a:96:ee:7b:4c:28:04:e8:61:23:d7:2b:1c:
09:75:d9:09:65:3c:ab:c5:91:c0:85:9a:e8:f8:03:dd:40:ee:
1c:71:90:3f:52:cf:cc:ea:88:2d:be:c7:10:e8:1e:70:37:af:
20:c9:7c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:14:08 2026 by rpki-client