Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: cN8LTK3hWGSPJNvsJHn1hEeQ65Ac89NqBOUq+FoMYMw=
Subject key identifier: E4:9E:CF:6E:F2:50:EB:BF:35:1B:16:B1:16:D4:B2:CD:46:2D:5C:18
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 019E1D90C48DEEF817F5F6CC1D58F750D215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 16D0
Signing time: Tue 12 May 2026 19:01:27 +0000
Manifest this update: Tue 12 May 2026 19:01:27 +0000
Manifest next update: Wed 13 May 2026 19:01:27 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: 37CngrRgrZzZbgPM7ld6BDrSLNgiUKrGHg119sZi9uY=)
2: 85hHBUSy8Y2Mc7vYU29WfYNmQrs.roa (hash: hECfZ/fS6sGLnY/Td9cShCJ8J6B4XtgL9wvigKz0Uo8=)
3: LBH8ztFntHz17Sq_yk4WOvpZIOI.roa (hash: tYe43lNMSz/FpD84gMI0wKiTsaNLmmzOrcD2RhXlgfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:c4:8d:ee:f8:17:f5:f6:cc:1d:58:f7:50:d2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: May 12 19:01:27 2026 GMT
Not After : May 13 19:01:27 2026 GMT
Subject: CN=e49ecf6ef250ebbf351b16b116d4b2cd462d5c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d8:09:00:77:cf:73:68:b1:9c:f8:11:a2:e8:
82:aa:f0:fa:a1:b6:3b:61:c8:68:a0:84:12:fa:b3:
19:3f:77:dd:41:4e:75:8a:fa:f2:55:f3:12:5f:9f:
d4:f3:35:80:42:4a:75:b1:59:1e:15:fd:47:4b:a6:
5a:f2:7b:a5:f0:21:de:9c:16:d6:77:c2:c1:75:68:
ea:1c:bc:8e:7e:93:2e:24:8c:5b:ea:6b:2b:f8:ba:
87:5d:2f:8d:ab:ee:54:6e:9c:42:62:a5:8d:2e:71:
1c:cb:e3:51:6f:bf:f2:93:01:cb:a3:33:91:67:c5:
06:80:34:5b:f5:e4:55:67:f0:2c:3d:2f:67:3b:22:
6c:90:b0:db:ae:a9:0c:f5:e3:43:86:85:11:ee:ad:
81:c2:dc:b0:17:14:5a:41:f3:fb:4a:df:2f:c3:34:
1b:5e:61:ff:19:23:21:db:73:12:84:3c:61:0e:e9:
a0:fe:15:19:71:4a:33:d3:34:6e:fc:e1:8d:e8:14:
39:f5:d0:eb:04:b8:13:6a:ee:85:99:94:b6:96:6f:
0a:a7:5a:14:63:2c:dd:c9:63:6e:b4:e4:ce:6d:a8:
57:36:40:d3:21:20:93:14:8b:c7:83:da:2a:ec:74:
6f:01:11:5f:4c:e7:27:b2:fb:4b:be:d8:fc:fd:49:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9E:CF:6E:F2:50:EB:BF:35:1B:16:B1:16:D4:B2:CD:46:2D:5C:18
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:92:fe:51:e6:8a:39:ff:43:84:c0:20:7e:0c:64:e2:91:10:
99:c1:b5:b7:58:f2:2b:11:47:4b:89:84:e1:6c:13:77:3e:3e:
40:a5:47:f6:31:d6:46:b6:c6:c8:33:17:db:91:c4:4e:c2:19:
42:50:1e:c1:e5:6b:5b:01:06:d4:41:58:32:d5:c8:af:04:b1:
59:e9:a3:e7:a6:59:61:e1:2a:d0:4a:30:c9:96:2f:93:c5:2f:
0d:a7:b9:2c:ba:6b:f6:e8:9e:7a:bc:1d:f3:32:f8:38:a6:f5:
52:6b:c4:04:23:22:27:82:5b:d0:7f:8f:34:65:81:e9:26:1c:
50:a3:22:ea:a2:be:44:34:36:9c:e5:5c:9d:76:b2:7f:1d:a8:
f4:aa:ff:4e:d1:e3:22:cf:77:1e:60:f7:d9:49:79:28:63:22:
65:3d:4e:b5:3c:f5:29:73:d8:6e:58:bb:03:50:e8:5e:ca:f1:
47:f9:83:30:d2:9c:a4:79:9d:00:09:42:ce:bd:8e:e4:75:e8:
e2:13:04:d1:3d:47:f4:24:98:22:91:18:79:40:b7:20:62:fa:
b7:96:7b:51:3d:51:c3:0f:d6:55:1c:0b:7b:d3:a0:73:b4:3e:
05:4b:36:13:de:f6:b7:19:b3:72:e2:55:b7:5e:c7:cf:e4:76:
69:e9:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:13 2026 by rpki-client