
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File: t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier: SU4Zf5G+B/mLGVuCRx8+INhwqbtIeruiJbHQXmrgDxU=
Subject key identifier: 7D:49:0E:6A:D5:81:48:D3:C8:DC:B0:CF:35:F5:B5:9C:5B:2E:09:B7
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial: 019E1D22A2ADA8B47827CD8430C5476F9D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number: 0664
Signing time: Tue 12 May 2026 17:01:09 +0000
Manifest this update: Tue 12 May 2026 17:01:09 +0000
Manifest next update: Wed 13 May 2026 17:01:09 +0000
Files and hashes: 1: RhYPlB5kqIX-dmV0ZFbkO4F9FQA.roa (hash: B4giMGx1nCtQi2hJ6Q8i5DGTsStHwrUH2rtSDwaQt6Q=)
2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: zp6S9t8l9BW+TPgbcHJnSsbIYSzUN1xEvP33CsghqIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:a2:ad:a8:b4:78:27:cd:84:30:c5:47:6f:9d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Validity
Not Before: May 12 17:01:09 2026 GMT
Not After : May 13 17:01:09 2026 GMT
Subject: CN=7d490e6ad58148d3c8dcb0cf35f5b59c5b2e09b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:f4:41:c7:41:ba:d2:51:e1:c2:8e:46:fd:
0a:d9:df:52:c6:10:d9:15:37:45:e7:3b:5b:d5:68:
4d:f1:d7:16:47:74:db:93:85:99:a5:d3:f5:51:10:
e2:a5:a9:87:4b:ed:a3:76:7c:e1:bd:43:aa:90:56:
3d:cd:c3:a0:da:e6:8a:ba:9b:a0:a6:0a:f1:71:e4:
99:07:2f:6d:0d:7d:39:df:82:b4:db:dc:b4:7e:10:
c5:f0:b3:3e:39:9f:13:41:e7:44:ac:7d:2a:4e:fa:
81:db:97:8d:57:aa:8c:7f:20:b8:e4:d7:bc:ce:ef:
48:e2:49:34:f3:4d:16:c8:fd:ad:6a:bd:db:89:cb:
82:a3:f1:80:38:32:83:9a:0d:29:f0:83:9d:79:79:
b0:ec:5d:11:45:f5:01:1f:19:2c:e0:25:de:57:4e:
63:2e:a2:97:a2:5d:7b:0d:af:4c:b7:1c:2a:56:d6:
94:8f:f5:72:e1:62:13:99:4c:18:d3:ca:44:65:0d:
e9:f5:01:f8:54:1a:63:ef:b5:cc:44:48:94:84:f0:
7c:c6:13:36:da:76:7e:90:d1:09:15:0a:5e:0d:cf:
e0:fe:71:4e:ec:23:07:71:d3:6c:fa:a0:21:12:93:
c7:5e:08:8a:bc:47:e8:fc:b7:1b:a7:c4:48:ce:45:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:49:0E:6A:D5:81:48:D3:C8:DC:B0:CF:35:F5:B5:9C:5B:2E:09:B7
X509v3 Authority Key Identifier:
keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d5:78:ea:c3:4f:1b:0c:3e:08:da:51:7d:47:50:4f:10:06:
35:39:f7:65:f5:eb:9a:0d:b9:53:12:09:50:5d:d6:e6:b1:37:
51:64:46:f3:9f:fc:a1:a1:1c:d5:9f:1b:9c:50:f3:33:a8:f5:
74:d3:90:5e:02:15:bb:cc:62:d4:11:5e:17:b1:e5:7e:89:96:
0c:7f:32:bb:80:75:29:7f:07:d7:76:bf:14:f5:ce:8e:3b:24:
88:69:cf:a9:66:98:b4:50:66:54:99:13:75:f4:13:41:a0:97:
9f:8e:4f:24:8e:11:d9:94:0e:d2:10:c4:33:73:fb:da:b5:c1:
3b:b9:48:3e:18:93:99:af:c2:0c:f9:c4:9a:a0:a7:62:29:0a:
b4:a8:7f:06:75:c8:d8:5f:b3:fb:d2:ac:5e:66:c4:9b:1b:e9:
0e:98:1d:b9:f6:a2:b6:bf:00:fd:52:a4:0f:92:cc:3a:5f:4e:
1c:21:d5:09:5f:88:8e:23:b2:b3:d6:e1:02:95:e4:9a:26:81:
a4:8a:b6:40:85:ce:20:8b:6c:4c:28:1c:f9:57:4f:8b:24:43:
c2:b8:36:26:db:ea:7a:dd:8c:19:57:7b:d5:50:42:aa:52:e1:
71:0f:71:8d:87:41:ac:08:8d:04:8d:cd:b7:90:7d:bd:0c:26:
7f:6e:c3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:07 2026 by rpki-client