Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
File: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft (raw, json)
Hash identifier: 9sICAlr3i11OiE8HRbYA74Na9SNUjNd9uLvuiTT6JUg=
Subject key identifier: 7D:10:96:E2:F7:61:41:DD:3A:31:8A:F4:31:BF:34:87:FC:81:43:D0
Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
Certificate issuer: /CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Certificate serial: 019E1DC7742B0FA4F1AFCD00C23CB45C5F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
Manifest number: 0F72
Signing time: Tue 12 May 2026 20:01:11 +0000
Manifest this update: Tue 12 May 2026 20:01:11 +0000
Manifest next update: Wed 13 May 2026 20:01:11 +0000
Files and hashes: 1: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl (hash: qpmJf+fbY1NN2n3Vn/a+ZLAutxZn+gGkgyog3aigMTw=)
2: 9oOBFeGSrwdju604vrWfdCoTauM.roa (hash: pd4ZMcD0zoZVQx34tpixPFz8KnUMJc8/XoRGbitBdPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:74:2b:0f:a4:f1:af:cd:00:c2:3c:b4:5c:5f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Validity
Not Before: May 12 20:01:11 2026 GMT
Not After : May 13 20:01:11 2026 GMT
Subject: CN=7d1096e2f76141dd3a318af431bf3487fc8143d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:47:49:52:bc:53:7f:c3:46:49:9f:34:82:
8c:79:cb:a4:ad:db:29:ad:1c:aa:23:dc:78:31:5f:
a9:c9:68:af:7c:5e:cf:c1:26:ce:b9:50:9c:cc:3a:
ad:58:30:b7:d5:8c:2b:f6:0b:86:3c:59:49:b7:72:
b5:1c:7b:60:a1:22:37:be:36:2c:5d:a7:8d:e9:f1:
d3:38:c0:f8:56:a4:7d:35:8d:99:c8:c6:c8:9e:50:
f8:db:3b:a9:fb:49:39:8c:58:42:c4:7d:e1:db:2a:
4c:58:aa:0f:e5:da:41:59:69:da:fc:50:4f:7f:e7:
68:8e:5b:82:35:d2:54:7a:77:a1:7c:49:b5:91:41:
5e:97:a0:bc:80:7b:50:3e:04:3d:8d:68:97:21:90:
a0:de:ea:72:00:f0:60:8b:19:60:fb:26:e2:54:31:
8b:04:73:7f:d1:37:ac:e2:a8:38:47:b4:65:e1:94:
3d:ae:56:28:df:63:19:2c:c5:1e:49:fd:ce:45:12:
f9:70:0a:a7:06:c9:7d:ec:e5:83:e6:f1:0f:d6:90:
78:4f:23:fd:b4:a0:22:dc:5d:13:8c:9a:f1:ad:66:
42:6d:47:95:d1:a3:48:5d:fd:73:cc:39:a0:f4:01:
2f:cd:89:7a:2d:b3:03:c4:fa:44:8e:ad:aa:43:89:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:10:96:E2:F7:61:41:DD:3A:31:8A:F4:31:BF:34:87:FC:81:43:D0
X509v3 Authority Key Identifier:
keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:aa:4c:6d:0b:4c:4e:23:b7:25:29:3e:20:8b:26:92:af:b8:
b5:6a:7a:c5:5d:ed:6d:22:70:f5:ac:06:3a:68:18:e7:fd:43:
53:6a:4e:77:a8:f4:f1:d7:c9:73:e6:7a:0c:ae:da:6a:ee:55:
e9:89:75:ac:43:80:4a:a4:04:1a:62:b3:ea:20:11:a6:48:42:
cb:5c:b5:e2:82:75:de:63:c3:33:e8:c4:13:a5:62:02:b6:f9:
51:59:f5:06:3a:6b:f3:59:ce:1b:b1:6e:de:1f:7d:d3:1a:65:
6d:0b:56:3d:9e:99:59:08:e4:dc:83:d7:83:2e:4b:91:1b:ff:
1a:e1:f6:93:8b:36:46:22:98:46:2a:4a:54:40:24:e3:86:fd:
a8:3f:bd:1b:44:2d:5c:4e:b0:e5:58:c0:88:96:dd:45:d9:10:
79:4e:eb:59:b5:bd:6d:df:dd:33:31:6f:66:ca:de:f1:80:03:
a3:97:93:27:44:8e:79:06:6a:d3:3e:53:0f:15:e7:cc:22:e8:
4e:d9:09:b8:52:7a:7e:4c:63:6e:f2:63:90:58:44:bb:0e:20:
60:9c:a4:a7:a5:25:c3:2c:53:c1:ef:d0:cc:85:18:b1:cc:98:
eb:a1:2f:bd:91:81:48:a7:9f:ef:7b:33:29:0d:c7:c1:3e:97:
29:fa:eb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:50 2026 by rpki-client