Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File: 7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier: 5AK7XktAyIp8xRCiXUFCmlyn1pbc5Z2qJUzJ9quuL0Q=
Subject key identifier: 75:E0:6B:9D:C2:9D:90:98:08:36:D8:30:BE:24:3B:B1:2D:1E:10:2B
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial: 019E1C10199167C65778E7A7769E8903577D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number: 0F86
Signing time: Tue 12 May 2026 12:01:17 +0000
Manifest this update: Tue 12 May 2026 12:01:17 +0000
Manifest next update: Wed 13 May 2026 12:01:17 +0000
Files and hashes: 1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: 3rVwhi6oqkuarvHwxelkRwAVCHzkRZnswkhgVuI4s4Q=)
2: Z0WVwWptGEGRyg-sh820wNyCLqg.roa (hash: +yXI8Hiac4a98uMpERPin9vZe08d6SLlySsDllVTAlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:19:91:67:c6:57:78:e7:a7:76:9e:89:03:57:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Validity
Not Before: May 12 12:01:17 2026 GMT
Not After : May 13 12:01:17 2026 GMT
Subject: CN=75e06b9dc29d90980836d830be243bb12d1e102b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:9e:b1:f3:9d:97:58:45:12:c8:3b:76:06:
03:bf:cd:38:52:a2:7a:c7:bc:5f:34:74:89:47:ac:
ab:85:84:a9:22:e0:30:76:cc:91:24:4e:89:89:ab:
ef:7a:df:b5:1c:ee:22:ef:89:4b:59:43:dc:dd:b3:
5e:f6:a6:21:09:be:7e:7c:6f:eb:9c:6d:f1:4d:fa:
d5:b7:ea:c7:68:b5:a2:ac:92:00:82:f9:e3:66:56:
b2:8a:b6:ea:1a:55:35:6e:52:1a:87:9c:f3:76:3f:
05:5b:e0:cf:02:ae:e9:ec:01:8f:7a:8a:ad:6b:db:
ec:65:2b:89:7d:32:3b:db:8d:54:1b:3e:74:2b:09:
81:01:93:d2:2c:d2:82:b5:57:1f:bd:d1:2e:8c:ee:
c5:c7:d0:1e:8c:7a:df:08:39:f7:88:70:57:7b:b2:
fb:5e:27:77:05:0a:24:7b:74:80:0c:6c:e1:d8:b0:
7a:12:2a:07:39:80:a9:2a:b3:53:35:6e:b1:9e:e6:
bc:fb:08:d3:59:c6:f3:47:f0:24:73:57:8a:fb:ee:
7f:1b:4c:ce:93:fd:bb:d2:69:83:66:26:51:a9:fe:
34:fe:46:7f:3b:82:41:b1:3e:65:cd:d9:4c:71:68:
11:4b:17:74:38:29:a8:24:24:92:54:ea:6d:3e:a9:
b2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E0:6B:9D:C2:9D:90:98:08:36:D8:30:BE:24:3B:B1:2D:1E:10:2B
X509v3 Authority Key Identifier:
keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:44:34:49:ac:9b:7a:9e:e3:b9:1f:c8:0e:20:34:93:53:c3:
92:7a:f7:81:3d:bf:c4:48:aa:c9:60:5a:7c:1d:b2:8e:3e:61:
ce:ba:9e:cb:ec:39:bc:94:8d:4a:4a:f4:e3:d8:a8:b3:4d:ae:
df:f2:ed:67:1c:58:50:51:d1:54:2d:08:52:eb:5b:24:7e:0b:
01:f1:41:8c:1a:78:67:e2:8f:4d:f1:31:58:d7:57:b7:a2:f4:
cf:3b:02:20:a8:1b:ae:37:1a:39:3f:52:7c:e2:aa:f3:fb:83:
27:dc:74:40:14:f9:87:6c:09:60:f2:34:29:f3:ae:52:ac:3b:
58:64:bc:6a:18:15:23:5b:55:00:be:d2:d6:c5:80:ac:26:bd:
a5:46:7e:65:50:63:fe:44:62:31:2a:f4:9b:4e:2f:d0:1f:86:
33:33:f9:ba:35:1d:ab:a4:96:24:d0:10:cc:3b:64:bf:d5:9b:
19:62:aa:d2:be:bc:6a:6f:05:c1:eb:b1:13:b4:bc:41:63:ba:
57:33:da:bb:f4:e6:a3:2d:4b:04:a6:55:f5:f3:7e:1b:0f:14:
ff:66:c9:82:27:35:f8:42:8d:b5:07:6b:0e:0d:d7:14:3a:a6:
71:bc:ff:7f:13:63:ae:7e:55:bf:0e:51:1d:53:72:8d:a3:f9:
ec:33:54:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cEBmRZ8ZXeOendp6JA1d9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOGRkZjgyMTIwOGEzNzBlM2E1YjdlZjhjZDQ3OTdjZmM1
Nzc0ODIwHhcNMjYwNTEyMTIwMTE3WhcNMjYwNTEzMTIwMTE3WjAzMTEwLwYDVQQD
Eyg3NWUwNmI5ZGMyOWQ5MDk4MDgzNmQ4MzBiZTI0M2JiMTJkMWUxMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru+esfOdl1hFEsg7dgYDv804UqJ6
x7xfNHSJR6yrhYSpIuAwdsyRJE6Jiavvet+1HO4i74lLWUPc3bNe9qYhCb5+fG/r
nG3xTfrVt+rHaLWirJIAgvnjZlayirbqGlU1blIah5zzdj8FW+DPAq7p7AGPeoqt
a9vsZSuJfTI7241UGz50KwmBAZPSLNKCtVcfvdEujO7Fx9AejHrfCDn3iHBXe7L7
Xid3BQoke3SADGzh2LB6EioHOYCpKrNTNW6xnua8+wjTWcbzR/Akc1eK++5/G0zO
k/270mmDZiZRqf40/kZ/O4JBsT5lzdlMcWgRSxd0OCmoJCSSVOptPqmyawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXga53CnZCYCDbYML4kO7EtHhArMB8GA1UdIwQY
MBaAFO2N34ISCKNw46W374zUeXz8V3SCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMt
ZTlkODFlM2Q4YjU0LzEvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMtZTlkODFlM2Q4YjU0
LzEvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUQ0Sayb
ep7juR/IDiA0k1PDknr3gT2/xEiqyWBafB2yjj5hzrqey+w5vJSNSkr049ios02u
3/LtZxxYUFHRVC0IUutbJH4LAfFBjBp4Z+KPTfExWNdXt6L0zzsCIKgbrjcaOT9S
fOKq8/uDJ9x0QBT5h2wJYPI0KfOuUqw7WGS8ahgVI1tVAL7S1sWArCa9pUZ+ZVBj
/kRiMSr0m04v0B+GMzP5ujUdq6SWJNAQzDtkv9WbGWKq0r68am8FweuxE7S8QWO6
VzPau/Tmoy1LBKZV9fN+Gw8U/2bJgic1+EKNtQdrDg3XFDqmcbz/fxNjrn5Vvw5R
HVNyjaP57DNUCA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:49:20 2026 by rpki-client