Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
File: 7onRezmnaEppVLl7iw-6x9SJVMo.mft (raw, json)
Hash identifier: Dhf4juUCPSxhInmirUfzcZTlNx1cyhXrrF9qaOWopvU=
Subject key identifier: 46:FB:C2:24:0A:FE:EC:60:21:E7:36:56:6D:21:BB:7C:BD:66:69:67
Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
Certificate issuer: /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Certificate serial: 019E1DC766C9AB0AF3BCE515427FEA7EEDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 20:01:07 +0000
Manifest this update: Tue 12 May 2026 20:01:07 +0000
Manifest next update: Wed 13 May 2026 20:01:07 +0000
Files and hashes: 1: 266U8v32AIwFxpg_FZxsUC2Aiq0.roa (hash: pX+SOE6s9KPyp5jmWUGDvGzaItPjX+1uMV/qoRqubBk=)
2: 7onRezmnaEppVLl7iw-6x9SJVMo.crl (hash: 9Jnqu2JIrHAJQDx6EG0KBWCFSqhrINrMHiS/h7nLRns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:66:c9:ab:0a:f3:bc:e5:15:42:7f:ea:7e:ed:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Validity
Not Before: May 12 20:01:07 2026 GMT
Not After : May 13 20:01:07 2026 GMT
Subject: CN=46fbc2240afeec6021e736566d21bb7cbd666967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:6f:be:f4:8c:d8:53:31:03:f3:2d:f7:7a:
4a:3f:b1:f8:35:90:37:38:42:46:01:de:8d:84:81:
9d:d3:24:73:d9:2e:4e:67:b8:b7:9e:7f:fd:3e:bc:
d5:42:d1:c0:eb:2d:d0:8a:58:a0:87:05:9d:4c:87:
8a:62:61:7e:06:b7:1e:39:40:64:43:68:01:be:7e:
f8:ab:43:0f:d7:2f:a1:1f:6c:7a:3b:4d:b9:08:0f:
3b:8a:b1:7c:52:91:7e:a5:09:cf:56:17:a5:ad:eb:
03:5e:99:ca:bb:5b:70:d0:07:a2:3a:83:9c:27:7e:
9a:4b:c0:bb:6c:af:0d:36:16:d6:08:12:b7:6b:cb:
82:b2:1f:5d:49:76:00:cd:7a:bc:01:5d:89:15:c9:
0b:b9:a0:27:ea:e4:5b:fd:b6:80:ba:ab:62:f9:b4:
13:c7:b9:9c:a0:3c:2f:10:cb:9c:6d:84:c7:1f:a1:
79:42:78:c2:7d:6e:13:20:c6:4e:46:70:ff:64:52:
aa:63:cb:2d:66:11:67:55:44:84:fb:86:9a:f3:bf:
34:01:ed:ae:ce:24:a3:3d:6e:cf:4a:fc:0e:0e:1a:
ed:ab:ae:c8:bb:74:cf:f3:09:cc:8f:d8:ef:f2:1b:
98:52:21:ad:a6:b3:cd:cf:76:90:4c:82:1f:a1:64:
36:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FB:C2:24:0A:FE:EC:60:21:E7:36:56:6D:21:BB:7C:BD:66:69:67
X509v3 Authority Key Identifier:
keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e0:13:d9:2d:64:57:7c:41:f7:54:36:42:d2:fa:c9:70:1a:
d8:de:c8:76:27:63:68:39:bc:dd:0a:92:d0:6a:c7:fe:3e:ce:
49:78:07:4c:3a:c6:69:f6:40:8c:ad:08:9d:3a:7f:a1:a4:bd:
00:51:51:9b:9d:c7:b7:01:14:43:9a:cc:fc:10:47:02:92:d5:
2f:48:dc:a4:bf:ac:f5:63:2e:70:05:02:f2:39:76:44:3b:01:
53:47:bf:41:de:5f:53:e0:75:92:b4:e6:0c:cb:63:0c:62:6e:
c0:1b:5a:18:17:a8:a6:f8:98:79:4d:29:cd:35:99:35:32:81:
8b:1c:fa:dd:a6:86:d0:e8:97:4e:ab:1b:79:ae:d9:2c:79:b5:
6d:5d:c0:81:6e:b2:7d:c7:aa:ed:5c:05:f4:a1:10:05:9b:c0:
f0:22:7d:75:88:02:4d:3e:b9:99:75:88:d5:cc:b6:fb:a1:3e:
33:7f:35:e8:08:21:b2:aa:59:79:25:b6:08:46:ba:4c:3f:77:
98:9f:cb:5a:c5:a7:b4:2a:08:b4:2d:f8:65:af:89:2e:37:43:
75:cf:91:99:57:16:06:b4:21:50:2e:69:32:64:f1:0a:b4:e1:
b0:4e:95:5a:df:74:23:27:34:c9:8f:c8:90:aa:bc:01:d6:c0:
30:5f:e1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:33 2026 by rpki-client