Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: l8/95/Z5j+vk4GwRvKXXrX+KTJbPmgmrJIssaeAdAQE=
Subject key identifier: E8:68:5D:60:B3:D6:B4:A6:4C:4D:EC:11:82:F3:89:3B:69:BB:36:57
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 019E1BD9182414AF18887A1A178771E98CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 170C
Signing time: Tue 12 May 2026 11:01:12 +0000
Manifest this update: Tue 12 May 2026 11:01:12 +0000
Manifest next update: Wed 13 May 2026 11:01:12 +0000
Files and hashes: 1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: sSwdHDXae8vJ8yqYTNGoaVuxLiLm5QYU5GYQRfUH2sI=)
2: CM5yTRt39UsRzQIWzuT7HO7bzSE.roa (hash: RH4eRmyLdVDmBQ+RCsFz+zVNIdYG+Aj2Xj1CkOhS/oI=)
3: LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa (hash: bMz5HXK6775JKPVW+G1i9ymi7O9XK+msuKRHy3NE0Qk=)
4: psWOMQeMbdYZeEJwNKNEAJmZbBU.roa (hash: Kwf/BATNuOaMCMQQKCC+7fI7j3/5LLVOOW7HAw/+s1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:18:24:14:af:18:88:7a:1a:17:87:71:e9:8c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: May 12 11:01:12 2026 GMT
Not After : May 13 11:01:12 2026 GMT
Subject: CN=e8685d60b3d6b4a64c4dec1182f3893b69bb3657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:c6:0a:0c:a2:58:3d:68:73:db:63:37:a0:
ae:78:c1:61:1c:46:5d:b5:ce:7a:2e:93:81:c6:8e:
1c:96:af:42:c9:4a:24:ac:93:f6:1b:1d:1a:0c:66:
38:bb:82:75:eb:62:77:ca:f0:be:0e:2a:a5:9f:c5:
97:38:0a:47:bc:81:88:8e:7d:cc:49:9a:aa:c0:7e:
1f:bf:db:3a:ed:27:7c:08:d3:09:9c:fd:ec:a9:f3:
3f:78:a9:77:3c:88:ff:5a:0e:8c:e1:70:12:fb:86:
cd:fd:3d:fb:af:c8:7f:0b:f6:7a:07:7f:7e:72:7e:
e7:24:7b:38:a7:d0:4f:cd:d0:d4:4b:24:3b:54:6c:
57:05:2a:00:e1:47:e8:e6:48:c5:a8:f1:24:f4:05:
c2:28:b2:61:74:f2:86:f4:20:26:15:7e:66:b4:53:
99:17:de:e0:73:27:45:94:c0:b8:c7:c6:b9:0f:68:
63:3d:c8:6b:0a:29:43:9c:f1:ea:92:70:6e:67:c1:
fd:59:f0:d7:27:95:a5:ef:c4:0d:66:25:db:50:1b:
2d:a1:d2:9c:c2:fc:b4:ad:86:5f:05:f8:e8:16:4d:
fc:20:9f:e9:7e:56:16:b9:26:04:cd:af:d6:ee:04:
a1:0a:fd:86:42:48:c7:f9:1f:ae:01:b8:88:c6:df:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:68:5D:60:B3:D6:B4:A6:4C:4D:EC:11:82:F3:89:3B:69:BB:36:57
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:09:ea:73:65:c2:4a:0a:c6:e9:05:15:97:28:da:26:91:ba:
f9:f6:95:5f:5b:c0:67:d7:41:78:23:f3:f8:e8:f9:5d:83:44:
cf:78:36:c1:d6:3d:a8:3d:e4:97:01:c3:00:05:5d:cf:bf:72:
b0:df:a3:c0:5b:c6:91:b9:3a:c6:32:6c:2a:5b:99:62:ba:47:
e9:73:3a:9a:60:82:8c:c2:4b:8d:e3:2f:01:c9:58:dc:69:6f:
33:76:01:25:a3:4b:63:3f:b3:7e:89:10:24:d4:e8:33:ad:c5:
bd:08:23:cb:d8:2d:84:df:bb:b8:8c:f6:29:cd:5f:c2:29:27:
ac:86:d6:ee:05:c3:3c:1b:82:95:8d:e2:71:83:2b:3a:ba:c6:
74:a6:62:da:3b:53:23:70:f5:9f:67:58:43:ac:ec:03:f8:f9:
32:b9:8a:66:33:37:3c:20:5a:0b:bb:d2:85:8d:60:f9:bb:28:
51:9a:64:5c:e1:b9:ec:67:50:b6:01:3c:52:c2:7b:00:63:36:
21:1e:9c:a4:1b:2e:72:c8:94:44:2f:d4:2d:53:78:39:c4:8a:
23:78:bc:71:ab:ee:29:dd:09:a3:af:5d:24:a3:e8:e6:93:62:
14:4b:06:c5:07:d8:b4:4d:1e:12:d7:15:f6:ad:40:04:67:77:
6b:fb:86:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:09 2026 by rpki-client