Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
File: 7O2DGd7RXV8LarRBAJ3hmxnRUps.mft (raw, json)
Hash identifier: MeHFymr7IvmGx1ZcDbPlOGHQrV7wWTWFvUtO8xUjW50=
Subject key identifier: C2:6B:5A:67:AF:20:17:4C:EE:52:59:68:65:13:3A:0B:0A:42:40:91
Authority key identifier: EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
Certificate issuer: /CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Certificate serial: 019E1CEBAD4A90D3D4B04AFD68E764B2CFA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
Manifest number: 090A
Signing time: Tue 12 May 2026 16:01:07 +0000
Manifest this update: Tue 12 May 2026 16:01:07 +0000
Manifest next update: Wed 13 May 2026 16:01:07 +0000
Files and hashes: 1: 7O2DGd7RXV8LarRBAJ3hmxnRUps.crl (hash: NWuJ93qztzk65rXJw4a8MqpXEbkeNS43J4lo5U1uqbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:ad:4a:90:d3:d4:b0:4a:fd:68:e7:64:b2:cf:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Validity
Not Before: May 12 16:01:07 2026 GMT
Not After : May 13 16:01:07 2026 GMT
Subject: CN=c26b5a67af20174cee52596865133a0b0a424091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:8e:f0:90:4d:cf:18:73:43:26:9b:9f:dc:
ea:36:42:4e:68:6c:57:99:0c:32:b7:b2:41:34:d2:
dc:6b:f0:75:9e:4a:7c:9c:82:cf:80:d3:ca:7c:0b:
48:d6:cd:e7:b2:0b:56:3e:a0:9f:3c:38:55:2a:4c:
bc:6e:6e:13:de:2c:10:1b:c0:58:4a:98:e2:7f:e3:
b7:1d:dc:2d:7d:74:59:f8:ff:de:10:e5:2e:3a:c8:
c4:1f:4c:01:27:ba:26:84:ba:a9:f1:b0:50:23:c1:
70:5c:57:d3:9e:e5:42:2b:62:af:c2:07:42:b5:9e:
fa:e0:fd:89:13:ff:9d:48:1a:22:e2:44:e8:ea:49:
10:a8:98:46:45:04:40:07:8a:6f:cc:63:cc:71:7a:
ad:7c:09:a0:55:41:08:11:ee:f9:87:c1:67:45:22:
08:1d:ce:71:b2:17:68:aa:64:64:89:dd:05:dc:b4:
d8:d6:80:fc:52:48:c9:eb:ee:f8:9d:2f:a6:8f:62:
a7:2c:3a:cb:2a:aa:d1:b4:05:f2:66:99:cd:f9:78:
04:e7:4b:d0:fb:10:9c:88:c6:c6:69:28:38:01:96:
90:13:22:88:11:f8:de:ce:72:f2:8e:fc:da:8e:34:
e5:ff:23:6a:2a:27:a9:2a:3c:3c:e2:cc:b4:69:22:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6B:5A:67:AF:20:17:4C:EE:52:59:68:65:13:3A:0B:0A:42:40:91
X509v3 Authority Key Identifier:
keyid:EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:87:ca:1f:d7:96:bf:e4:6c:d7:7a:6b:e6:3f:17:f4:b5:2e:
38:2e:d0:fb:19:0f:dc:3d:a6:d9:89:25:98:31:2b:bb:41:2e:
bf:42:05:46:60:07:c5:98:c1:fd:4c:58:65:d8:cc:b7:f3:f5:
65:61:00:6a:3b:6d:79:30:2c:8a:53:17:11:f0:17:23:9d:1e:
43:57:c8:08:d2:c9:fb:93:12:65:e3:7e:00:42:44:f3:3c:37:
5c:75:30:44:0e:bd:7a:76:17:25:ee:7f:32:6c:1e:6f:61:de:
f3:03:c6:0a:b8:87:1a:47:09:c9:43:ec:f7:7c:08:f2:db:6d:
92:a9:3f:ef:f5:6e:db:66:36:bf:03:e6:7e:c3:95:0e:5f:86:
3a:7c:14:a2:9a:dc:82:bf:e8:d0:34:24:db:80:10:34:73:18:
67:7f:f3:e3:bc:07:a3:61:6e:24:3d:d5:51:2d:08:7f:55:eb:
89:ca:72:a9:39:1a:d5:44:91:cb:ac:17:94:53:9a:99:f7:c8:
59:fc:cc:70:e7:98:49:2f:db:90:16:c4:02:06:42:25:3f:19:
19:3c:c5:1f:9b:62:22:3a:85:c4:af:8d:8c:13:65:d2:51:d6:
24:25:96:c3:e8:d4:4a:4f:f5:41:aa:fd:f4:d0:dc:9f:44:bf:
d0:a0:2d:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c661KkNPUsEr9aOdkss+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZWQ4MzE5ZGVkMTVkNWYwYjZhYjQ0MTAwOWRlMTliMTlk
MTUyOWIwHhcNMjYwNTEyMTYwMTA3WhcNMjYwNTEzMTYwMTA3WjAzMTEwLwYDVQQD
EyhjMjZiNWE2N2FmMjAxNzRjZWU1MjU5Njg2NTEzM2EwYjBhNDI0MDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBGO8JBNzxhzQyabn9zqNkJOaGxX
mQwyt7JBNNLca/B1nkp8nILPgNPKfAtI1s3nsgtWPqCfPDhVKky8bm4T3iwQG8BY
Spjif+O3HdwtfXRZ+P/eEOUuOsjEH0wBJ7omhLqp8bBQI8FwXFfTnuVCK2KvwgdC
tZ764P2JE/+dSBoi4kTo6kkQqJhGRQRAB4pvzGPMcXqtfAmgVUEIEe75h8FnRSII
Hc5xshdoqmRkid0F3LTY1oD8UkjJ6+74nS+mj2KnLDrLKqrRtAXyZpnN+XgE50vQ
+xCciMbGaSg4AZaQEyKIEfjeznLyjvzajjTl/yNqKiepKjw84sy0aSI5jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJrWmevIBdM7lJZaGUTOgsKQkCRMB8GA1UdIwQY
MBaAFOztgxne0V1fC2q0QQCd4ZsZ0VKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN08yREdkN1JYVjhMYXJSQkFKM2hteG5SVXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xZjZlZDItNTBjYS00ZDNjLWJiNTct
NzA2OWY0MzgyY2FiLzEvN08yREdkN1JYVjhMYXJSQkFKM2hteG5SVXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xZjZlZDItNTBjYS00ZDNjLWJiNTctNzA2OWY0MzgyY2Fi
LzEvN08yREdkN1JYVjhMYXJSQkFKM2hteG5SVXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIfKH9eW
v+Rs13pr5j8X9LUuOC7Q+xkP3D2m2YklmDEru0Euv0IFRmAHxZjB/UxYZdjMt/P1
ZWEAajtteTAsilMXEfAXI50eQ1fICNLJ+5MSZeN+AEJE8zw3XHUwRA69enYXJe5/
Mmweb2He8wPGCriHGkcJyUPs93wI8tttkqk/7/Vu22Y2vwPmfsOVDl+GOnwUoprc
gr/o0DQk24AQNHMYZ3/z47wHo2FuJD3VUS0If1XricpyqTka1USRy6wXlFOamffI
WfzMcOeYSS/bkBbEAgZCJT8ZGTzFH5tiIjqFxK+NjBNl0lHWJCWWw+jUSk/1Qar9
9NDcn0S/0KAtUg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:27 2026 by rpki-client