Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File: 7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier: EZpcS547nfQ8Mhmzw7jQm9o8NYnFJ9LtP/PVSlQAIYI=
Subject key identifier: AF:7A:8A:52:A8:BB:9B:D3:46:04:5D:45:4C:E7:93:74:40:5C:A9:AB
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 019E1E356EF3B9682D4BA63E16B2CF2AC7E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 22:01:18 +0000
Manifest this update: Tue 12 May 2026 22:01:18 +0000
Manifest next update: Wed 13 May 2026 22:01:18 +0000
Files and hashes: 1: 0_75cziqkrd_avFDUZ9rg7qilxA.roa (hash: pSQt5ocfFcDKXdLoPRHR826k+pr8i3n1PKJhobyxS7Y=)
2: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: 1rqgy2vEwMuuVOMK5qlxxpo1FkBi++so3+rCOVi1gKI=)
3: HkkRPwqU3p5aRopaf6XmKJHJOS0.roa (hash: rwteSwkgkB56v9QAYH409kxEVNO2s78pdzGxZ9J+cBI=)
4: OLd3XQLlCLw9LdNyxml8_t8xuEg.roa (hash: CeqIhEYWVzjJk4bpmS5ELgvmNglk0SZVe+OxNRFsLsg=)
5: YFvRu6poI8Ij__cAkw9ZXzn1ELA.roa (hash: TFdZLvuT5jh6qUmHTvzmxP9xeFFqlGN1y9JFOGD2i4E=)
6: YeiOtzdwnFZaRqUumW9LmExU9wM.roa (hash: MQxdsF/k+I/4Kf6o+ulDftRoc2iIVZbE/JYfdEq0Q2c=)
7: fXNtDKuxKl9PcIOvEE_JPpC6Emk.roa (hash: d9XcOkmKMoLj3DydzQnJz/zsoCrdK+ingQkEPwtmOSU=)
8: vKDDTdeKpC38SOoCmTQDNYKcN_A.roa (hash: 1c+RNvMiXqFMlXYtXBUL17aJsh89UBFVQ2ryMtknJE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:6e:f3:b9:68:2d:4b:a6:3e:16:b2:cf:2a:c7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: May 12 22:01:18 2026 GMT
Not After : May 13 22:01:18 2026 GMT
Subject: CN=af7a8a52a8bb9bd346045d454ce79374405ca9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:da:dd:d5:89:f5:5c:ba:4f:bf:ce:99:68:
2d:27:87:fd:09:95:a5:7c:be:2f:41:95:80:88:a4:
79:50:de:33:0e:c0:8a:62:68:73:6d:68:d7:29:8c:
87:28:26:9c:b5:b1:21:bc:7b:ec:64:ba:c8:bc:37:
7f:89:e1:f7:8b:8f:b2:94:8a:c7:95:6a:cc:19:64:
2e:80:1d:79:a0:bd:66:cc:a8:df:0a:6c:41:49:5c:
a2:4d:91:c7:a2:51:8a:6e:58:32:24:f4:e3:95:e3:
24:11:fc:6e:de:56:11:6e:27:a3:5e:34:ca:b2:de:
68:77:f2:7a:75:9b:1e:bb:3b:86:c4:54:a9:b8:51:
1d:80:dd:ff:ce:e4:ae:b9:38:6f:5e:99:75:e3:1e:
df:e3:4c:c2:c7:e4:f7:64:0d:b2:d3:59:87:87:a2:
79:81:5f:f0:b7:8d:22:e5:b9:41:32:ea:b0:44:e5:
ed:eb:da:9d:1e:5c:ae:77:53:48:69:d6:3f:42:51:
f0:f6:c7:9e:b0:80:3d:ad:8b:5d:00:4f:0c:d9:8a:
0c:2a:ed:5b:aa:fe:58:1d:a1:9e:cb:5d:2c:06:27:
99:4a:b6:b2:b3:ae:0e:46:55:c4:60:63:6b:92:13:
6e:59:77:1f:1a:ca:a2:93:f2:a3:f2:00:ad:14:b9:
09:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:8A:52:A8:BB:9B:D3:46:04:5D:45:4C:E7:93:74:40:5C:A9:AB
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:60:b6:3f:10:fc:69:ca:f4:88:1f:91:e6:e4:67:78:15:e8:
5a:24:53:6e:f7:5b:31:3b:07:3e:10:c2:57:68:77:2e:66:ca:
2c:66:27:93:2f:06:7d:4c:0f:2f:58:7d:7c:35:78:9a:28:23:
8d:30:bd:f9:af:76:62:fd:f6:bb:44:da:e4:74:d5:94:43:ad:
89:19:b6:f4:e8:35:3f:06:0c:f3:57:aa:eb:5c:47:73:95:1c:
ac:d2:36:0e:50:a0:75:e4:df:06:71:1f:3f:f1:f7:71:06:90:
8f:b7:c2:ce:a7:28:84:91:3d:7b:a4:94:30:89:e7:b9:76:90:
25:4a:21:09:45:62:de:1b:9b:65:6c:bf:52:e1:ff:4a:37:47:
3e:d2:15:48:ed:c5:6c:fb:de:3b:34:1e:b6:d8:fc:25:92:59:
ca:2c:36:c1:df:27:b0:df:81:17:69:07:73:15:73:af:d0:ec:
2f:d6:6c:ca:2a:5e:89:a5:d7:55:69:97:95:92:47:9f:ff:a5:
55:d7:0e:50:0c:3b:69:25:47:84:a0:a3:6b:80:c9:cd:ff:84:
28:de:e3:2e:28:e8:f5:40:a2:f6:8a:81:37:82:e1:38:27:84:
ec:f6:1b:fa:ab:6f:2b:b2:74:b3:8e:33:fb:1a:fb:f9:27:11:
cc:f2:2c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:03 2026 by rpki-client