Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.mft
File: 7RK18zX7kujDKXDERhbgHq8jmrA.mft (raw, json)
Hash identifier: MjqZb0swIXZck9/481m53eKcjbbunPFtZe2KwRtaPOA=
Subject key identifier: 5B:83:8D:A7:E8:B9:E3:B0:BA:26:24:6A:A9:28:20:3F:EF:72:73:1E
Authority key identifier: ED:12:B5:F3:35:FB:92:E8:C3:29:70:C4:46:16:E0:1E:AF:23:9A:B0
Certificate issuer: /CN=ed12b5f335fb92e8c32970c44616e01eaf239ab0
Certificate serial: 019E1D22E32B46035D09C1EB3A0928B9A902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.mft
Manifest number: 6C
Signing time: Tue 12 May 2026 17:01:26 +0000
Manifest this update: Tue 12 May 2026 17:01:26 +0000
Manifest next update: Wed 13 May 2026 17:01:26 +0000
Files and hashes: 1: 7RK18zX7kujDKXDERhbgHq8jmrA.crl (hash: b2/BECvRbhJe5Y6vv7IM5892b5+1twjsroZ51NCE3Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:e3:2b:46:03:5d:09:c1:eb:3a:09:28:b9:a9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed12b5f335fb92e8c32970c44616e01eaf239ab0
Validity
Not Before: May 12 17:01:26 2026 GMT
Not After : May 13 17:01:26 2026 GMT
Subject: CN=5b838da7e8b9e3b0ba26246aa928203fef72731e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:92:19:54:b0:50:f1:b5:60:49:fb:58:ab:
fa:c6:61:18:7a:c2:10:b4:c3:1d:fc:66:5d:88:eb:
c8:69:4a:81:62:17:83:3b:f4:0a:9d:62:f7:6a:8c:
18:fb:a1:ee:a6:53:c4:0a:50:10:12:ad:c8:d4:cc:
b5:3e:2f:f9:51:d0:e0:70:45:3d:47:ef:0d:02:ec:
60:05:40:cb:e9:11:1a:5f:33:71:e6:d4:75:eb:68:
da:19:6c:c3:24:50:07:a8:c9:ab:39:bf:87:58:3b:
68:bf:65:0a:c8:d2:23:2b:7e:f4:17:74:9f:d1:47:
da:50:a8:01:4a:99:90:00:6e:36:d6:11:ce:66:a8:
96:fc:2b:dc:8a:18:76:24:45:04:1b:24:ef:d4:a1:
17:b3:29:48:3d:1b:fc:e0:9e:98:21:b7:9b:0c:da:
a7:6d:61:4f:b5:58:d8:67:d8:26:50:97:f1:f2:17:
35:d2:83:31:8a:ad:d0:ae:2b:5a:c4:2a:1d:d0:dd:
9b:e7:26:55:cd:ab:0e:b4:ed:be:4c:46:7d:61:9b:
b4:1f:8d:fa:02:bd:c3:84:9d:67:ab:29:16:64:26:
bb:dc:ec:fb:0b:56:c6:41:b5:e3:52:24:b4:64:d6:
a2:2e:db:9b:39:1d:16:e9:54:fd:a6:76:39:0f:ea:
c8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:83:8D:A7:E8:B9:E3:B0:BA:26:24:6A:A9:28:20:3F:EF:72:73:1E
X509v3 Authority Key Identifier:
keyid:ED:12:B5:F3:35:FB:92:E8:C3:29:70:C4:46:16:E0:1E:AF:23:9A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:96:80:70:3a:1c:30:55:db:51:2f:c4:3a:1c:25:79:23:ab:
de:9d:d7:cb:9a:3e:e4:a5:ec:46:a8:c3:20:5a:a0:21:6a:a8:
38:91:20:26:65:79:4a:31:b9:a7:65:4b:a5:5c:00:f2:d2:cb:
74:50:3d:74:a1:de:f9:bb:f6:70:e6:47:d1:92:0e:e6:8d:40:
34:06:b6:72:42:df:c1:dd:0b:e6:48:9e:36:36:60:4e:83:6e:
f9:e7:e0:1a:8e:58:30:0e:33:e1:13:7a:b3:eb:78:9f:b9:a9:
23:42:7e:8f:87:96:fd:5d:7b:c2:db:76:5e:8f:6d:05:14:4e:
22:84:ab:64:71:88:a3:85:2b:e5:ce:21:a4:1b:03:11:4d:2b:
a7:70:03:39:57:b8:95:e4:0a:81:02:0f:8f:6a:4b:bb:77:99:
27:19:68:c2:c8:a3:05:66:aa:1c:0d:8e:f2:40:e1:7e:fd:cd:
ec:65:02:11:68:13:69:00:c2:b4:b6:e7:d9:66:36:1e:ad:47:
4d:9f:91:9f:00:1c:56:16:97:40:08:08:69:71:32:dc:5f:e6:
c0:2d:5b:ab:e3:10:48:7d:40:b3:11:b4:64:16:bb:13:50:0b:
1a:d6:95:73:d0:f2:8f:75:80:59:14:52:9f:63:3b:a1:0d:ff:
8e:6a:5f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:00 2026 by rpki-client