Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
File: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json)
Hash identifier: d++XO33uIeas/0vC6U/znJU26b5j4CHHhk4Aj6NNyRg=
Subject key identifier: 46:57:BB:C0:76:69:64:B7:30:20:39:66:2E:B5:8A:D1:DD:00:87:A6
Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
Certificate issuer: /CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Certificate serial: 019E1E34EE101F4CA015FA1FCA5684496CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
Manifest number: 15B8
Signing time: Tue 12 May 2026 22:00:45 +0000
Manifest this update: Tue 12 May 2026 22:00:45 +0000
Manifest next update: Wed 13 May 2026 22:00:45 +0000
Files and hashes: 1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: CplyuTMj4powxRFGjcI44pDarw4IhCIpDlirrZ3jIV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:ee:10:1f:4c:a0:15:fa:1f:ca:56:84:49:6c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Validity
Not Before: May 12 22:00:45 2026 GMT
Not After : May 13 22:00:45 2026 GMT
Subject: CN=4657bbc0766964b7302039662eb58ad1dd0087a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:68:98:af:8d:ff:54:89:50:13:86:33:87:
42:2e:16:99:1e:7b:93:c4:52:13:73:6f:27:4f:cb:
38:89:ef:d4:d9:40:82:a6:0a:6f:cc:85:ab:cc:52:
02:70:34:a2:05:24:d1:da:62:11:10:e5:30:9e:dc:
e1:be:88:cd:0a:9a:61:0d:68:ed:c8:60:24:11:03:
34:39:25:10:10:51:e9:09:df:10:b6:0b:83:b1:6c:
28:46:ec:8f:7d:d3:e2:71:60:89:4d:30:0d:be:92:
57:30:eb:56:c5:21:3a:94:02:80:13:f5:01:86:4b:
56:39:b5:54:f9:2c:ca:37:01:96:f5:62:ad:11:a9:
ac:52:ba:e2:d2:0e:77:15:6a:ca:4c:8d:b5:e0:39:
8a:6f:b2:49:12:c9:85:2e:83:82:10:f1:53:ef:df:
5b:d9:6a:64:1c:0f:b6:23:cf:23:f9:3a:1d:02:ba:
c0:f8:b4:aa:30:71:3b:f9:05:f6:f8:43:c2:06:83:
13:0b:ec:06:63:d4:2e:19:62:69:40:ec:6b:55:5e:
70:1d:82:21:77:b3:da:23:24:cd:9a:0b:0b:5f:38:
6c:aa:ca:7b:42:dd:db:88:c0:04:3d:88:80:ed:bb:
99:67:d1:23:6b:d2:d4:35:16:56:e3:50:3b:91:ea:
50:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:57:BB:C0:76:69:64:B7:30:20:39:66:2E:B5:8A:D1:DD:00:87:A6
X509v3 Authority Key Identifier:
keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:54:4a:20:be:74:67:e5:32:3a:c0:f6:72:2b:88:76:09:25:
79:73:81:bd:02:7b:f9:9e:6c:d5:1d:fd:ed:0c:c4:a9:ea:53:
fd:c2:e0:9c:b0:ce:08:7c:bb:0b:de:28:08:bb:28:a6:82:05:
29:70:19:c9:85:05:1e:fd:e9:58:4d:c3:50:75:ae:a0:b2:ff:
82:83:4f:47:4c:1a:d4:bb:30:f8:e3:b9:89:7f:5e:a4:44:d1:
05:2b:35:24:b1:30:f9:e6:fe:38:f1:b4:c9:0e:fc:a7:cb:6a:
d9:7c:89:79:35:99:6c:6d:c5:3f:61:67:07:49:1f:06:00:65:
eb:62:90:3a:2b:de:7f:66:bf:2e:7f:3b:30:e4:57:59:9c:bd:
f2:e3:d0:cf:fa:a5:f5:29:b6:3b:ff:e6:be:61:bc:62:1b:1a:
87:d1:7b:f4:ef:a4:9c:19:ff:da:e7:58:df:3c:3b:ae:10:4c:
2d:87:17:27:46:8e:54:ca:5a:b0:36:1c:82:62:11:3c:b0:3c:
2a:dd:84:4f:1a:a1:fb:a9:83:93:9f:3a:59:e6:9b:bc:33:f5:
2e:03:75:2f:17:4d:ba:c9:65:93:3a:62:5e:b9:16:5f:4f:1b:
85:b5:48:6c:ae:0e:72:fd:bd:44:c1:2e:91:f5:e4:3e:57:f1:
48:71:76:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNO4QH0ygFfofylaESWz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjVkNTEyZjkxMDQ0Yjc4NmExNTU4OWE2MjRhOGQ4Y2I5
MjllNDgwHhcNMjYwNTEyMjIwMDQ1WhcNMjYwNTEzMjIwMDQ1WjAzMTEwLwYDVQQD
Eyg0NjU3YmJjMDc2Njk2NGI3MzAyMDM5NjYyZWI1OGFkMWRkMDA4N2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslRomK+N/1SJUBOGM4dCLhaZHnuT
xFITc28nT8s4ie/U2UCCpgpvzIWrzFICcDSiBSTR2mIREOUwntzhvojNCpphDWjt
yGAkEQM0OSUQEFHpCd8QtguDsWwoRuyPfdPicWCJTTANvpJXMOtWxSE6lAKAE/UB
hktWObVU+SzKNwGW9WKtEamsUrri0g53FWrKTI214DmKb7JJEsmFLoOCEPFT799b
2WpkHA+2I88j+TodArrA+LSqMHE7+QX2+EPCBoMTC+wGY9QuGWJpQOxrVV5wHYIh
d7PaIyTNmgsLXzhsqsp7Qt3biMAEPYiA7buZZ9Eja9LUNRZW41A7kepQ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZXu8B2aWS3MCA5Zi61itHdAIemMB8GA1UdIwQY
MBaAFOz11RL5EES3hqFViaYkqNjLkp5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BYVkV2a1FSTGVHb1ZXSnBpU28yTXVTbmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zZDRkZmEtZmU0YS00NTYzLThjYmUt
YzE0ODFkZjdkYTQxLzEvN1BYVkV2a1FSTGVHb1ZXSnBpU28yTXVTbmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zZDRkZmEtZmU0YS00NTYzLThjYmUtYzE0ODFkZjdkYTQx
LzEvN1BYVkV2a1FSTGVHb1ZXSnBpU28yTXVTbmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlRKIL50
Z+UyOsD2ciuIdgkleXOBvQJ7+Z5s1R397QzEqepT/cLgnLDOCHy7C94oCLsopoIF
KXAZyYUFHv3pWE3DUHWuoLL/goNPR0wa1Lsw+OO5iX9epETRBSs1JLEw+eb+OPG0
yQ78p8tq2XyJeTWZbG3FP2FnB0kfBgBl62KQOivef2a/Ln87MORXWZy98uPQz/ql
9Sm2O//mvmG8Yhsah9F79O+knBn/2udY3zw7rhBMLYcXJ0aOVMpasDYcgmIRPLA8
Kt2ETxqh+6mDk586WeabvDP1LgN1LxdNusllkzpiXrkWX08bhbVIbK4Ocv29RMEu
kfXkPlfxSHF2Bw==
-----END CERTIFICATE-----
Generated at Wed May 13 00:42:08 2026 by rpki-client