Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
File: 7pzNOKXWSWiAvAlHBuaPoE-izZY.mft (raw, json)
Hash identifier: uLP7dlwTC1LlXfWaodrU5k6Ej7Jd8ZFGw1hj3V844Lo=
Subject key identifier: 2D:7F:AE:CE:38:75:69:31:B7:27:85:53:DB:EA:F4:70:ED:6E:1E:D2
Authority key identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
Certificate issuer: /CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Certificate serial: 019E1DFDE1383CCC2D53955311CE1732E1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
Manifest number: 04C2
Signing time: Tue 12 May 2026 21:00:37 +0000
Manifest this update: Tue 12 May 2026 21:00:37 +0000
Manifest next update: Wed 13 May 2026 21:00:37 +0000
Files and hashes: 1: 7pzNOKXWSWiAvAlHBuaPoE-izZY.crl (hash: dPZNBSZE/GTM0/Z8OAqhfYWM9pYMMa4/vc5PlzQffBs=)
2: KnWPKh7vBsCWw3P3QjUnnKOMfRQ.roa (hash: S6KoJEkh3kj6VhNs+5jJEnoThmoK6o74Ufogas8E/6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:e1:38:3c:cc:2d:53:95:53:11:ce:17:32:e1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Validity
Not Before: May 12 21:00:37 2026 GMT
Not After : May 13 21:00:37 2026 GMT
Subject: CN=2d7faece38756931b7278553dbeaf470ed6e1ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:02:87:0b:f9:5f:66:d0:68:d2:27:b0:e0:
f1:8b:44:b1:dd:7b:c6:fa:f1:df:7a:8e:92:a6:bb:
da:26:1c:f1:00:ad:22:ff:84:e5:fa:fe:bb:3c:91:
b9:9a:75:f2:4a:59:93:1d:46:86:eb:51:58:b9:12:
f0:55:fc:44:17:11:89:dc:d4:97:27:24:f0:f9:e1:
cc:f8:3b:1f:21:92:20:17:a0:fd:e5:bd:91:ae:2f:
64:93:df:48:5a:93:79:28:b8:29:97:48:81:8e:2c:
95:a7:bc:ea:2c:eb:c0:1d:b4:ee:2a:89:50:c6:12:
df:c6:ae:02:f7:4f:40:2c:3b:aa:e2:0f:58:20:7c:
a1:d4:d4:65:04:0f:47:9a:f3:dd:cc:d4:c0:d3:ee:
bc:62:8d:29:4c:84:ad:8f:bb:10:47:5e:c7:57:d9:
86:d0:6e:fe:47:eb:91:98:48:1c:62:2e:25:bb:19:
11:bc:d9:aa:09:3a:4c:00:6f:da:3f:34:4d:a4:47:
32:f6:0d:39:88:45:4b:2a:9a:ab:be:55:ae:08:c3:
18:ae:14:db:75:c9:8f:82:cc:c0:04:29:5d:ac:44:
63:d5:ab:90:4b:59:d5:52:6d:db:ef:4c:3b:ab:c4:
b0:6e:1a:5c:92:c6:8c:b4:15:47:62:ed:15:28:eb:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7F:AE:CE:38:75:69:31:B7:27:85:53:DB:EA:F4:70:ED:6E:1E:D2
X509v3 Authority Key Identifier:
keyid:EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b4:49:ca:e1:52:25:7a:0e:fb:0f:7d:96:15:06:46:1e:b4:
ad:4d:a1:a4:b9:c2:ea:ae:2d:11:52:41:8c:8c:46:09:36:cd:
e7:64:48:32:4c:eb:d7:c2:4d:ff:58:b8:0d:86:93:b5:ae:75:
3c:1f:79:0e:94:2c:05:60:1f:ee:50:c9:05:a2:2d:71:60:a8:
10:44:3c:ed:aa:06:ce:e9:1a:83:2e:58:18:68:76:de:72:ba:
d0:36:ea:cb:be:19:f4:5b:21:18:8f:29:3c:cc:db:1d:84:7b:
71:fa:c8:a8:38:21:00:97:d1:39:80:f5:ae:b8:48:0f:28:d9:
24:62:50:7c:3f:4f:84:af:b0:93:45:f8:5b:72:4b:88:5a:60:
85:2d:25:d2:14:e9:6a:56:84:b1:a1:27:2a:a6:c3:f2:91:e7:
9f:64:b8:2c:32:55:86:dd:93:a6:ba:47:3c:b7:09:82:91:63:
aa:28:fa:74:79:d9:6a:f7:46:36:33:41:0a:7f:a4:82:35:91:
47:7e:c3:8a:70:e5:34:a3:18:c2:0a:69:0f:e5:4f:ac:de:69:
98:de:23:3d:95:bf:47:9a:07:35:b7:ce:c1:fc:b5:9d:60:50:
00:c7:41:80:12:15:8e:0a:c1:53:fd:f1:fa:b6:b9:44:03:cb:
c0:55:2a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:59 2026 by rpki-client