Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier: ojVsQCPE9sENqFVxGiuq2V/8Gd1gu7BA1OLiuhoKAco=
Subject key identifier: 26:A6:4B:9A:1D:4C:A9:4B:C8:06:B2:C6:C0:37:E2:AA:C8:CB:9D:A1
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial: 019E1CEB91D890A57331181144064C9E58F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number: 0D14
Signing time: Tue 12 May 2026 16:01:00 +0000
Manifest this update: Tue 12 May 2026 16:01:00 +0000
Manifest next update: Wed 13 May 2026 16:01:00 +0000
Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: fPDLYHyudtyhbMtUaPJCo9CrPDfoMj1Ez1yFz1Ww0mg=)
2: BLLh5nNCz1s5if2pHYByIfYWqoE.roa (hash: EPJ+RLaqu85xGvwiEKDRnHSjYD9ruTYxv3tR7VjbDJs=)
3: E7Yzs4RQ5PAWanrzJaRetL_vIW4.roa (hash: ZfDaAmo4Ze/Cj58O8IkcEHyg6puoaRdc7XWQV2TfV6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:91:d8:90:a5:73:31:18:11:44:06:4c:9e:58:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Validity
Not Before: May 12 16:01:00 2026 GMT
Not After : May 13 16:01:00 2026 GMT
Subject: CN=26a64b9a1d4ca94bc806b2c6c037e2aac8cb9da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:d2:bf:e3:38:7c:ec:d2:f6:d1:73:fb:f1:
1c:a0:3b:23:f1:cb:50:9f:c5:e5:84:5f:6d:13:9d:
9a:ae:2e:4c:1d:ff:b4:c0:6b:76:6f:7f:d8:08:1d:
f2:6e:05:ba:37:fd:6d:85:6a:83:66:8f:15:f7:79:
c2:59:12:be:ca:3b:19:de:7d:3f:e5:96:c2:01:80:
f1:2a:ed:86:44:2e:46:ab:ae:99:8c:84:72:5c:83:
c5:b6:e3:23:2f:da:62:21:7d:54:a7:fe:d7:be:c5:
cb:98:d9:15:d5:a8:24:11:e0:01:e0:e0:41:e0:50:
b4:17:77:fa:e8:aa:5c:92:40:94:03:f0:b7:63:6e:
b1:b8:e5:a0:28:3d:d6:76:64:9d:85:57:67:83:15:
82:86:08:ae:c6:9e:76:69:7d:57:da:31:6c:38:7b:
89:1c:46:f9:06:b5:89:78:13:cc:93:62:41:1b:8a:
51:8e:05:fa:33:13:36:0f:85:fa:4c:f1:fb:a1:d4:
76:a8:21:d7:be:3b:9c:77:a7:12:94:c7:06:71:ba:
18:f1:63:06:6a:ae:28:50:7f:b2:b4:2c:c0:53:cf:
15:5e:29:7b:22:cf:e1:54:b5:42:ad:1a:ba:b4:73:
76:a2:e1:fb:82:3a:3f:9b:59:3b:03:10:b2:23:33:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A6:4B:9A:1D:4C:A9:4B:C8:06:B2:C6:C0:37:E2:AA:C8:CB:9D:A1
X509v3 Authority Key Identifier:
keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3a:35:19:fb:3d:df:52:fe:67:07:10:54:09:14:82:12:ce:
a9:84:fd:7b:cd:ab:a1:18:00:1e:65:67:67:4b:22:4d:e1:c1:
66:14:10:67:b0:22:06:10:36:89:7d:9f:a9:2f:7e:e4:b4:90:
e1:4b:37:44:06:9f:3c:70:8f:4b:f6:58:a7:a6:f3:d9:6e:e0:
a8:f2:ff:0d:db:b6:01:14:c9:fa:9c:76:4e:6f:52:7f:f4:a8:
ff:99:12:2a:6d:ce:91:ff:81:91:d2:65:ee:6c:b0:73:a7:b8:
74:fb:21:f2:46:b5:9f:35:f7:fc:d0:85:2f:66:af:e7:67:2c:
d7:13:7b:5a:e4:8f:28:07:49:d5:7b:a1:b2:36:a5:eb:16:cb:
4d:8c:8c:3f:d9:76:2a:f5:08:f1:de:43:52:0c:7d:cf:02:d0:
3d:b3:da:1e:e6:5f:83:02:4b:37:e0:72:2b:af:e4:53:d7:07:
0a:f8:6b:74:19:6b:a3:6e:a9:bf:98:0e:47:6a:70:60:27:c5:
63:a8:80:db:5b:d5:2f:51:aa:c9:88:78:a1:57:bc:d2:93:39:
bf:4b:16:80:f8:21:b2:21:58:b6:64:cc:a2:29:f4:ba:34:9f:
41:98:fc:e6:58:c1:26:8f:fd:39:5e:b4:c3:ec:ea:57:fd:8f:
cf:ef:ff:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:25 2026 by rpki-client