Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: EB+3qRtLkGDTqPJkcy3YVLSUQcl8G5V6uxIqC/TWdDE=
Subject key identifier: 93:5C:07:BA:68:BF:4C:C2:97:43:BF:6A:0A:A4:A5:53:FD:C8:59:53
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 019E1DFDFF965372D32EBBCAC5BC63F2FEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: 04E3
Signing time: Tue 12 May 2026 21:00:45 +0000
Manifest this update: Tue 12 May 2026 21:00:45 +0000
Manifest next update: Wed 13 May 2026 21:00:45 +0000
Files and hashes: 1: 200hGiiiZsPIFyhRS3fgiw7TDL0.roa (hash: RXdmnfglVdphnX74nph9B1kezoQQBk9ZlsO2RYNXwvo=)
2: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: jAmOp/GDGYfpvkTxQuFd1b5CkgjwikUErmPgYGoOjBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:ff:96:53:72:d3:2e:bb:ca:c5:bc:63:f2:fe:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: May 12 21:00:45 2026 GMT
Not After : May 13 21:00:45 2026 GMT
Subject: CN=935c07ba68bf4cc29743bf6a0aa4a553fdc85953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:f7:49:40:c2:0e:7b:5f:bc:91:45:52:84:
71:9f:0a:de:f2:36:40:13:44:9b:d1:9a:ff:ea:af:
7b:b6:2a:a5:81:f4:23:1b:f2:8a:5f:a5:09:f7:2e:
11:62:25:1f:b7:fa:6c:0f:af:7a:b5:9d:7c:e9:ac:
e9:89:6a:56:a9:ec:72:32:7b:84:b4:6d:a5:59:fe:
27:e1:81:ea:2d:07:23:df:ed:00:dc:39:d3:aa:de:
cc:a4:14:70:3c:91:25:48:28:b6:d1:6f:9b:ac:3e:
09:d0:b9:e6:92:20:54:bf:3c:70:72:1a:d6:21:27:
6f:fc:e8:59:47:74:96:77:fc:00:72:98:b2:16:34:
31:bd:3e:12:79:56:96:d6:cd:4c:db:5e:98:d4:c5:
54:53:83:de:3d:fc:8b:f4:7f:bd:9f:bf:0e:08:ae:
17:68:81:4b:66:54:b7:ec:d9:ff:f3:82:9d:05:e8:
17:5d:3a:d7:c6:07:63:0c:0e:19:fc:a4:ca:05:0d:
13:be:c5:6d:f0:05:66:86:6b:99:ee:fc:5c:27:8b:
76:fd:39:2d:f6:d3:44:b0:09:9d:55:54:15:e1:53:
48:2c:15:e0:6c:a9:20:5a:ff:d9:8d:f6:29:07:fd:
55:a1:32:63:5b:f8:47:57:c0:18:8d:6b:c2:12:88:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5C:07:BA:68:BF:4C:C2:97:43:BF:6A:0A:A4:A5:53:FD:C8:59:53
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e0:a1:b1:e1:fb:49:99:95:0f:d0:e6:f7:25:75:5c:45:96:
ea:24:8b:ea:3b:7a:c7:06:8e:fe:c3:b8:a7:de:67:2d:c8:c1:
93:b8:e3:08:e4:cf:11:57:cd:90:b4:9e:15:5c:87:2e:72:00:
40:2b:d1:0f:2b:ed:7a:68:16:dd:b2:d2:7d:42:69:cb:ec:8a:
ac:65:f0:ba:e4:97:b9:c6:3e:3f:76:5c:b2:28:97:b8:25:7e:
4d:11:1a:05:51:c0:a0:2f:94:c1:11:21:fe:dd:0d:70:05:75:
e3:8b:7a:05:a6:18:73:ba:51:7f:a2:d6:e6:38:46:b2:8a:25:
03:19:87:7b:c9:25:4d:0a:50:f1:69:24:69:13:c1:57:74:1f:
cb:45:f9:9c:26:f9:aa:06:58:b8:1c:0c:3d:ef:1e:87:32:2c:
55:de:5a:14:92:a6:20:a1:4d:9d:0a:68:31:ca:26:45:e0:37:
d6:3b:f9:ca:d8:08:fa:62:f4:25:4e:0a:b4:1c:dd:60:c5:1f:
be:fb:b5:d7:a5:b9:a5:f4:54:9a:bf:ed:1f:37:8a:c0:72:13:
d5:7c:79:1a:05:a5:8e:78:fd:c5:6d:dd:75:c6:54:77:16:ba:
22:58:aa:4e:24:b0:d9:cc:92:17:d3:01:9d:20:9f:e0:50:9c:
f8:44:7c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:07 2026 by rpki-client