Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
File: 7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json)
Hash identifier: vBZxWVvIk7zZksa/PFNJltQQV1y7MN7ZIas4bGa8qwc=
Subject key identifier: 3D:33:42:62:D5:D4:68:23:04:52:34:DB:D7:D5:98:E6:5A:B4:F3:34
Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
Certificate issuer: /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Certificate serial: 019E1D59A8C9547953A4F9F0446A52540D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
Manifest number: 0BD2
Signing time: Tue 12 May 2026 18:01:15 +0000
Manifest this update: Tue 12 May 2026 18:01:15 +0000
Manifest next update: Wed 13 May 2026 18:01:15 +0000
Files and hashes: 1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: YdPFGKcfYzcE12Vg5oTAMmTQb3xChDi0v2M74u647BE=)
2: smfmsIUF9u9g8NgIU5ofNUq_OII.roa (hash: 4JsRlal2vIPYDa8QmogXl60LTzkl5mPgzweZiKuoNtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:a8:c9:54:79:53:a4:f9:f0:44:6a:52:54:0d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Validity
Not Before: May 12 18:01:15 2026 GMT
Not After : May 13 18:01:15 2026 GMT
Subject: CN=3d334262d5d46823045234dbd7d598e65ab4f334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:1a:74:52:d4:d0:0e:89:30:5f:5d:96:7d:
bb:8b:c5:b4:f0:32:c1:79:09:27:8e:8d:e7:bd:aa:
22:e5:2b:b2:60:1e:c3:a2:ee:64:3e:25:8f:33:01:
66:e6:00:79:eb:de:60:e0:e0:58:71:4d:29:c4:60:
8d:3f:c9:5e:2f:b0:1c:82:e6:72:dc:c1:e6:6c:e4:
dc:80:89:81:60:72:28:bd:50:d0:4b:45:e7:a3:ce:
39:b8:27:f2:76:0a:c6:49:2c:10:7d:3d:62:e9:5d:
68:3c:a2:f1:41:17:f6:0d:d9:ca:db:d2:2d:fd:3d:
99:b7:13:28:0d:d9:3c:36:39:36:93:3a:b7:bf:57:
72:65:19:8b:06:de:5e:81:0f:f4:d0:21:db:11:e8:
2d:08:a9:96:7b:05:30:30:6a:0a:9b:5e:c7:84:37:
d8:06:69:4e:9a:e1:cf:e7:01:1a:a1:cb:bc:11:2c:
b6:ca:36:e5:dd:96:dc:b9:b0:e1:58:b6:56:b7:7d:
e9:2e:eb:84:80:91:b8:90:a8:6c:b1:f5:55:d6:ac:
fb:e8:97:6d:57:f4:d0:5e:bd:c9:a2:50:0e:fd:f9:
df:ef:40:8d:9c:87:db:7a:d1:bf:ac:da:41:04:0f:
99:0e:13:df:96:23:b5:2f:21:af:f5:dd:9e:2a:81:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:42:62:D5:D4:68:23:04:52:34:DB:D7:D5:98:E6:5A:B4:F3:34
X509v3 Authority Key Identifier:
keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:76:fd:f9:6d:f7:0f:cb:70:22:69:e6:94:0c:d3:70:16:5a:
a3:6c:2e:03:41:6c:8a:6a:61:f7:1d:0f:55:5a:2c:47:41:88:
75:88:a1:c5:b6:17:60:32:38:7a:7e:62:c6:72:2d:f8:3f:1d:
3f:cc:c2:2b:27:ba:ff:8d:9b:a9:41:c3:2a:71:eb:83:f8:3d:
6e:af:e3:4d:2c:31:fa:0c:ba:d2:da:ed:59:3f:61:d5:fc:ac:
76:30:e2:78:8b:39:0a:e1:06:c6:b7:50:b6:e9:5b:12:7e:1f:
a8:5a:e7:5a:a8:60:c4:98:c4:eb:a2:dd:98:b7:62:e0:8a:d5:
cd:e9:4e:93:3d:69:d2:4f:4a:09:00:59:0f:cc:ff:a9:e4:d3:
34:59:31:cc:fa:b7:9a:30:17:3c:f4:41:35:d0:2c:82:7a:86:
9b:58:64:6f:ce:49:c7:6e:f8:1d:11:5a:8b:d3:2d:b0:ba:9f:
19:5d:0a:a3:da:f8:2c:c4:e5:b4:80:47:51:9d:30:bf:40:0b:
3d:a6:50:b2:11:93:8a:10:45:04:5c:60:af:a0:cb:74:84:6e:
65:db:8f:54:d2:3b:b5:54:ac:0b:98:0b:3e:61:fe:ab:e4:bb:
9c:10:5f:cc:95:a1:07:1c:19:d3:d9:a1:2c:82:d0:d5:d3:ba:
86:d1:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:15 2026 by rpki-client