Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier: 8gdMHs1g6mk05C78yU03WQFPDLKteaEIYoYS9DyQPxg=
Subject key identifier: 79:E5:F9:E1:F0:6C:23:84:09:F0:4C:79:7B:1A:B3:89:4C:CC:E7:03
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 019E1C46CF60C71689F51AE085D0A0681022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number: 0CFE
Signing time: Tue 12 May 2026 13:01:03 +0000
Manifest this update: Tue 12 May 2026 13:01:03 +0000
Manifest next update: Wed 13 May 2026 13:01:03 +0000
Files and hashes: 1: 1-WOlFKgJ5fyuJ0mK_WXzxZSjJZ8.roa (hash: mA5SaPX5hOKD8NX3Hv1/uNqyTzg2PYZjKEyCT2Stnms=)
2: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: CPPg6p2o5xCPQhYShwkksbU2lHY65giey7wg2UhwB0U=)
3: qCla3aYy8lmkCd9GDBwAGdRopPY.roa (hash: yq0d/UWqcKfbvqZVTTAHu+E8rSvKS7DJ77n7pL88Lw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:cf:60:c7:16:89:f5:1a:e0:85:d0:a0:68:10:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: May 12 13:01:03 2026 GMT
Not After : May 13 13:01:03 2026 GMT
Subject: CN=79e5f9e1f06c238409f04c797b1ab3894ccce703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:9b:23:f3:35:c6:e0:ea:d9:b6:b2:df:38:
c2:79:de:77:f3:43:9c:fb:00:7b:5e:95:53:51:7a:
93:fa:7b:52:5d:18:e4:a3:e9:ec:86:4f:81:b8:63:
21:f3:d3:b7:11:90:35:4a:44:83:d0:3b:24:f2:b9:
64:92:65:38:3c:3f:7e:0b:5e:cf:45:11:12:54:c5:
89:a2:ed:2d:39:b8:38:41:43:cd:a9:4f:8b:99:26:
c0:f3:32:b5:31:b8:ae:d9:59:45:b5:04:01:e2:58:
e0:c0:b5:c6:d9:68:b0:57:6e:9f:b1:c7:02:a7:8c:
0b:92:55:63:fe:37:a5:d8:59:cb:2c:29:03:37:b1:
77:fd:cd:c3:a6:10:26:85:77:2b:5e:54:88:55:ac:
ff:61:a3:ea:46:c1:23:90:33:7f:c8:7e:52:77:c0:
11:41:49:7e:cb:e1:65:85:88:e0:aa:54:70:2a:cf:
e4:9c:97:db:fb:29:46:df:66:10:b5:84:06:76:a2:
bd:fb:d8:bd:10:76:e1:00:67:00:2c:b2:cb:f7:80:
99:9d:26:43:ef:59:17:97:e8:20:bf:16:2f:9f:ae:
6c:34:fc:14:ec:cb:8b:0b:2e:ef:b6:22:44:ff:06:
68:0f:9f:0d:83:46:7e:3f:0d:12:a4:45:5d:10:cf:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E5:F9:E1:F0:6C:23:84:09:F0:4C:79:7B:1A:B3:89:4C:CC:E7:03
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6a:63:30:59:75:b5:17:e2:c6:bf:6e:64:8a:74:09:e0:6e:
41:06:d3:cd:d7:45:8f:ff:9b:8c:9e:98:ef:f6:04:08:36:35:
4a:eb:e2:c5:ed:bf:2e:cd:d3:1c:e3:36:c4:64:a2:b5:b3:de:
e0:22:41:08:2e:5c:b7:cd:23:ed:ab:12:e6:77:63:3e:68:92:
91:02:c1:79:0d:0b:ad:06:15:a2:19:ab:c7:f5:dc:20:6d:fe:
3d:29:76:ef:b6:49:fa:b4:03:b9:bd:1a:af:6a:a9:08:16:21:
78:49:28:a2:e8:bb:1e:d0:79:82:13:5f:79:01:52:9b:99:7a:
dd:9e:ce:05:eb:91:ac:10:d8:46:17:9e:5c:5a:fc:eb:1c:4b:
45:39:7b:e6:64:41:84:1d:06:74:a4:f1:88:79:fb:ab:20:49:
a5:35:52:ac:6b:ae:db:1d:11:9e:e4:b9:7f:1f:8d:07:b8:9d:
b6:d4:c5:cd:cd:4e:a4:93:b2:0f:45:0b:7e:22:8b:09:91:36:
95:68:18:88:e3:0c:db:fa:34:a5:e4:14:54:68:c3:b8:8f:02:
a4:63:29:d7:4a:2e:9a:65:98:b1:c3:56:7e:fe:46:b6:e8:75:
42:da:eb:55:91:81:7a:2b:98:e3:6e:bd:d9:f9:79:a4:0c:49:
13:e8:01:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRs9gxxaJ9RrghdCgaBAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNTM4Y2RjYWY5ZjkyNDY0OTdkYzdhZTQ1ODQ1Mzc5ZmU2
YTcxNzQwHhcNMjYwNTEyMTMwMTAzWhcNMjYwNTEzMTMwMTAzWjAzMTEwLwYDVQQD
Eyg3OWU1ZjllMWYwNmMyMzg0MDlmMDRjNzk3YjFhYjM4OTRjY2NlNzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtambI/M1xuDq2bay3zjCed5380Oc
+wB7XpVTUXqT+ntSXRjko+nshk+BuGMh89O3EZA1SkSD0Dsk8rlkkmU4PD9+C17P
RRESVMWJou0tObg4QUPNqU+LmSbA8zK1Mbiu2VlFtQQB4ljgwLXG2WiwV26fsccC
p4wLklVj/jel2FnLLCkDN7F3/c3DphAmhXcrXlSIVaz/YaPqRsEjkDN/yH5Sd8AR
QUl+y+FlhYjgqlRwKs/knJfb+ylG32YQtYQGdqK9+9i9EHbhAGcALLLL94CZnSZD
71kXl+ggvxYvn65sNPwU7MuLCy7vtiJE/wZoD58Ng0Z+Pw0SpEVdEM8/SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnl+eHwbCOECfBMeXsas4lMzOcDMB8GA1UdIwQY
MBaAFOxTjNyvn5JGSX3HrkWEU3n+anF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83ZDY0ZjgtZGRlMi00YTdmLTk1MWEt
YzA2YzYyYWY5ZGE1LzEvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS83ZDY0ZjgtZGRlMi00YTdmLTk1MWEtYzA2YzYyYWY5ZGE1
LzEvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGpjMFl1
tRfixr9uZIp0CeBuQQbTzddFj/+bjJ6Y7/YECDY1Suvixe2/Ls3THOM2xGSitbPe
4CJBCC5ct80j7asS5ndjPmiSkQLBeQ0LrQYVohmrx/XcIG3+PSl277ZJ+rQDub0a
r2qpCBYheEkooui7HtB5ghNfeQFSm5l63Z7OBeuRrBDYRheeXFr86xxLRTl75mRB
hB0GdKTxiHn7qyBJpTVSrGuu2x0RnuS5fx+NB7idttTFzc1OpJOyD0ULfiKLCZE2
lWgYiOMM2/o0peQUVGjDuI8CpGMp10oummWYscNWfv5Gtuh1QtrrVZGBeiuY4269
2fl5pAxJE+gBSQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:51:51 2026 by rpki-client