Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File: 7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier: ndhW81dC0sQCJRMtso7A+TS0hteiI/wAO0Nf8Z8UmZ0=
Subject key identifier: 01:7B:3A:26:CB:08:D7:1B:1A:12:17:EE:10:B2:50:22:7E:39:4C:6A
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 019E1C7D8F4B507E06238244F2BFD8E06432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 14:00:51 +0000
Manifest this update: Tue 12 May 2026 14:00:51 +0000
Manifest next update: Wed 13 May 2026 14:00:51 +0000
Files and hashes: 1: 6ukkUq47_d2FjDn2mGzCVotpwug.roa (hash: BSpIOmqaO5YAgsvsZQqH6+DD7MhtSJv4k++NTBFYMhA=)
2: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: 3kuURgCQDnvAOS/N0uPYC7jrCsjzEynM4K/rf2ksXLY=)
3: lOdlGRTCbIpEqR9qatoRPkmZsSo.roa (hash: puduhtYoMCBO2MogdQIQ/qqMbhZcm/6N0DD1bqrK4NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:8f:4b:50:7e:06:23:82:44:f2:bf:d8:e0:64:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: May 12 14:00:51 2026 GMT
Not After : May 13 14:00:51 2026 GMT
Subject: CN=017b3a26cb08d71b1a1217ee10b250227e394c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:b4:38:dc:f7:09:63:b3:0a:74:dd:9f:86:
b6:7b:0f:35:55:1e:af:20:e4:35:ca:15:b0:3b:56:
72:a6:fe:c8:55:28:61:4d:41:32:b6:d1:43:04:68:
d2:f3:ab:de:98:19:f4:b6:ac:cf:56:98:a3:70:4a:
e7:c4:d4:1e:94:50:74:0c:b8:03:1f:ab:3e:0b:e9:
d3:8a:38:a5:67:1a:1b:4e:15:66:56:2a:4d:f8:6d:
0e:67:17:4a:c4:a1:ee:0b:15:b6:19:29:3f:1a:5d:
01:f4:4e:9d:5b:65:7d:88:a6:8d:be:d0:d8:f4:ac:
8a:b1:53:56:c6:f8:db:6b:29:94:5b:df:cb:a3:6f:
c0:08:12:cc:02:a3:74:11:42:32:31:68:80:26:59:
bc:cf:a4:1e:52:62:54:d3:56:89:4b:92:bd:22:ab:
e0:21:c4:8a:65:e3:d1:da:c7:10:55:aa:cf:48:2b:
09:21:e8:7e:3a:5c:ed:5c:95:7b:86:78:7b:d9:ec:
f5:af:17:33:a2:e0:70:63:04:70:6a:9f:b5:59:9b:
96:a0:e8:c1:4d:1e:f6:29:6a:cb:32:9e:00:a7:23:
7e:98:30:f3:ab:5b:68:79:bb:3c:6b:97:2c:1e:22:
c9:d2:db:3e:dc:8f:37:c6:2a:95:ba:3f:c4:33:85:
a9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7B:3A:26:CB:08:D7:1B:1A:12:17:EE:10:B2:50:22:7E:39:4C:6A
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:25:d7:92:3b:ed:e9:46:66:d1:09:07:b5:50:ef:5d:eb:39:
2e:63:51:3a:74:1c:8d:6f:14:63:98:f1:3c:7b:c6:72:18:00:
64:a0:3f:c3:86:70:16:10:2e:89:c9:b0:22:ff:cf:4c:45:72:
d5:27:54:93:97:6e:94:da:88:df:c6:28:9e:5a:f8:40:c8:af:
84:c4:18:1b:52:47:06:a0:d5:17:bb:48:d1:1b:db:1f:75:3e:
d6:04:22:63:29:f1:09:f1:72:96:3c:81:10:ba:87:e1:62:ad:
c4:b5:b4:4d:04:81:b2:b6:a4:22:ee:b2:0b:8f:d4:a1:81:33:
73:b1:57:90:2b:e2:d6:a5:a7:87:02:e1:20:df:9b:a2:83:05:
74:07:51:75:1c:dc:e1:3d:91:46:48:99:b9:48:3a:69:d4:5f:
72:7c:2b:f5:1e:0c:56:9f:c4:3a:97:5e:43:16:fa:a5:d4:f0:
4f:49:9b:2f:53:a1:3b:84:d2:ef:92:95:7e:c9:9a:28:13:53:
39:0c:e7:2a:3c:52:b0:e1:18:44:d5:cc:db:44:41:69:1f:81:
eb:fe:4f:36:7b:b8:7e:62:45:f0:39:4f:d7:5e:bb:4c:b3:2a:
af:0a:a1:31:b5:1d:1b:9e:05:5d:e9:85:a3:6d:02:de:13:02:
d8:c4:e4:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfY9LUH4GI4JE8r/Y4GQyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWIwODk5ZTM4YTk2YjU0ZmM0Y2JjZDEwZWY1MzljNTRl
ZDRkMzgwHhcNMjYwNTEyMTQwMDUxWhcNMjYwNTEzMTQwMDUxWjAzMTEwLwYDVQQD
EygwMTdiM2EyNmNiMDhkNzFiMWExMjE3ZWUxMGIyNTAyMjdlMzk0YzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWm0ONz3CWOzCnTdn4a2ew81VR6v
IOQ1yhWwO1Zypv7IVShhTUEyttFDBGjS86vemBn0tqzPVpijcErnxNQelFB0DLgD
H6s+C+nTijilZxobThVmVipN+G0OZxdKxKHuCxW2GSk/Gl0B9E6dW2V9iKaNvtDY
9KyKsVNWxvjbaymUW9/Lo2/ACBLMAqN0EUIyMWiAJlm8z6QeUmJU01aJS5K9Iqvg
IcSKZePR2scQVarPSCsJIeh+OlztXJV7hnh72ez1rxczouBwYwRwap+1WZuWoOjB
TR72KWrLMp4ApyN+mDDzq1toebs8a5csHiLJ0ts+3I83xiqVuj/EM4WppwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAF7OibLCNcbGhIX7hCyUCJ+OUxqMB8GA1UdIwQY
MBaAFO4bCJnjipa1T8TLzRDvU5xU7U04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjVhNDMtODE3Yi00NDliLWJjZmMt
YWRmNmRhYjg4Yzg0LzEvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mYjVhNDMtODE3Yi00NDliLWJjZmMtYWRmNmRhYjg4Yzg0
LzEvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByXXkjvt
6UZm0QkHtVDvXes5LmNROnQcjW8UY5jxPHvGchgAZKA/w4ZwFhAuicmwIv/PTEVy
1SdUk5dulNqI38Yonlr4QMivhMQYG1JHBqDVF7tI0RvbH3U+1gQiYynxCfFyljyB
ELqH4WKtxLW0TQSBsrakIu6yC4/UoYEzc7FXkCvi1qWnhwLhIN+booMFdAdRdRzc
4T2RRkiZuUg6adRfcnwr9R4MVp/EOpdeQxb6pdTwT0mbL1OhO4TS75KVfsmaKBNT
OQznKjxSsOEYRNXM20RBaR+B6/5PNnu4fmJF8DlP1167TLMqrwqhMbUdG54FXemF
o20C3hMC2MTk1w==
-----END CERTIFICATE-----
Generated at Wed May 13 01:43:48 2026 by rpki-client