
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft
File: 7zAIudH6IIoVT1hcruy7UsGyXOQ.mft (raw, json)
Hash identifier: OvzJX2v+XV3SUnCT8iQBWXw3C2XUkrVZUXGNZNnB2Q8=
Subject key identifier: 49:03:49:2B:3F:B9:0D:39:63:50:8F:7F:65:AE:91:7A:B1:94:93:C5
Authority key identifier: EF:30:08:B9:D1:FA:20:8A:15:4F:58:5C:AE:EC:BB:52:C1:B2:5C:E4
Certificate issuer: /CN=ef3008b9d1fa208a154f585caeecbb52c1b25ce4
Certificate serial: 019E1BD8FB4A394EF270859038996F5C2B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zAIudH6IIoVT1hcruy7UsGyXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft
Manifest number: B6
Signing time: Tue 12 May 2026 11:01:05 +0000
Manifest this update: Tue 12 May 2026 11:01:05 +0000
Manifest next update: Wed 13 May 2026 11:01:05 +0000
Files and hashes: 1: 7zAIudH6IIoVT1hcruy7UsGyXOQ.crl (hash: RmyqJqHV2F1PATwqAD0FS5eK8LcOsbZWUQRFOtbp+f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zAIudH6IIoVT1hcruy7UsGyXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:fb:4a:39:4e:f2:70:85:90:38:99:6f:5c:2b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3008b9d1fa208a154f585caeecbb52c1b25ce4
Validity
Not Before: May 12 11:01:05 2026 GMT
Not After : May 13 11:01:05 2026 GMT
Subject: CN=4903492b3fb90d3963508f7f65ae917ab19493c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:64:a5:e0:de:b5:7c:ad:26:ef:93:e4:c6:
1c:7c:e0:37:75:5c:c9:58:f3:9f:4e:30:9d:36:ac:
02:79:1a:50:d6:3d:dc:ba:bc:9a:0f:72:2b:ae:39:
d7:e0:5f:62:96:88:ea:6f:56:26:c3:dd:64:83:d6:
1d:b4:0d:77:56:a3:eb:f7:09:c8:8c:32:80:72:66:
53:9d:a0:56:65:32:b4:53:4d:b2:ff:36:eb:75:8b:
aa:3d:d5:9d:d4:33:6a:78:1b:cf:ab:5c:3a:39:4c:
91:b6:98:45:65:2c:3f:47:ba:0b:c2:52:aa:d9:bb:
dd:c7:23:81:43:74:e8:10:26:9c:fd:d0:f1:e2:78:
82:89:4c:5f:3d:c9:da:6e:dd:d1:ec:1c:e8:e2:43:
3d:6b:4e:48:32:70:d8:af:9f:c3:90:85:2b:4f:a8:
37:20:89:a6:80:67:e0:c5:2b:de:30:11:cd:34:18:
ff:b5:f4:08:52:3a:f5:8a:39:57:62:7c:5b:b5:8c:
4b:a0:fc:aa:48:31:0c:7e:e3:d2:7f:8e:3c:cb:62:
2f:7b:7e:f2:5e:9c:1b:d5:25:17:5b:c9:4b:eb:22:
fe:f2:2b:72:b9:00:0b:9c:05:9f:e3:a0:9d:ae:dc:
0d:b0:6c:30:c9:7a:1a:33:81:73:0e:89:47:ab:d1:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:03:49:2B:3F:B9:0D:39:63:50:8F:7F:65:AE:91:7A:B1:94:93:C5
X509v3 Authority Key Identifier:
keyid:EF:30:08:B9:D1:FA:20:8A:15:4F:58:5C:AE:EC:BB:52:C1:B2:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zAIudH6IIoVT1hcruy7UsGyXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e2:5a:7d:06:ce:44:b7:86:a2:ca:79:22:04:ce:d3:62:04:
20:fd:15:cd:cd:4f:31:f9:48:df:db:80:88:ed:53:08:8b:4d:
ee:50:ca:e3:80:b0:79:e8:ae:ed:1d:f9:c6:4f:c6:b6:7b:a9:
9a:8e:db:52:66:dd:2d:49:f8:35:84:23:83:d7:24:b6:e5:a7:
34:d9:e3:8d:31:6c:6d:fd:99:13:22:96:fd:b5:96:12:0e:81:
dc:15:0e:32:17:58:76:b5:e4:e8:8c:d1:0e:8d:00:e2:1e:fd:
1e:0b:c5:d7:4d:b6:73:aa:c9:e4:e7:07:6a:07:ca:94:4a:22:
23:53:34:47:c5:0e:61:f2:67:cf:66:d2:f9:67:4d:32:6f:33:
b7:35:f3:4e:d4:6a:cb:51:75:23:0c:9e:a9:7e:1d:b8:60:dd:
4a:01:01:3c:d9:59:51:eb:d6:68:d0:0d:56:d7:b0:83:24:35:
1d:0d:a0:fd:43:87:41:63:8c:d2:fc:98:4d:38:fd:22:66:71:
a9:03:b7:e9:1c:b4:a5:04:3b:22:ee:f7:8c:dd:ff:80:c6:eb:
a3:58:ea:98:6b:77:08:1d:87:a8:03:1c:fc:c3:56:8e:1e:67:
a0:1f:b8:f3:ae:72:de:2b:6b:84:b0:74:15:28:6d:56:8b:70:
f7:1a:60:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:21 2026 by rpki-client