Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File: 7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier: OSXZfP76Qb6MLdgNDYAE5KR46G3rsfGuXMX3+Gczajo=
Subject key identifier: 32:28:65:1B:06:65:3F:C9:6B:36:FF:A4:9E:11:1C:EE:79:5E:1B:AB
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial: 019E1CB4735C1420914CE5971B223F560A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number: 0FD2
Signing time: Tue 12 May 2026 15:00:48 +0000
Manifest this update: Tue 12 May 2026 15:00:48 +0000
Manifest next update: Wed 13 May 2026 15:00:48 +0000
Files and hashes: 1: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: 0dWkbqUyP7xpSZrlqJL6IAyFE25Bq/H55Uf9kV+JJo0=)
2: rkOQVmNrUrdY7_BGJo06hjnXKUQ.roa (hash: KQFoNA+jPIAj7lXy7/IWWZc0S9NISU/38W2iXUYI9HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:73:5c:14:20:91:4c:e5:97:1b:22:3f:56:0a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Validity
Not Before: May 12 15:00:48 2026 GMT
Not After : May 13 15:00:48 2026 GMT
Subject: CN=3228651b06653fc96b36ffa49e111cee795e1bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:72:4f:67:4a:9f:c1:18:f4:63:97:cf:60:42:
f9:16:b3:50:f7:da:b4:82:12:55:84:2b:31:01:09:
ce:12:fb:a5:db:34:51:07:be:19:db:72:d3:10:eb:
57:63:b2:e7:59:c6:62:b6:1f:5d:1b:87:12:e9:aa:
ca:28:3c:a7:5d:04:f9:5f:36:73:49:30:ae:e7:d3:
e4:01:95:a0:3d:94:2d:2d:09:26:52:09:60:99:df:
04:b6:89:67:0d:91:50:c5:95:1c:10:88:82:26:4b:
55:e2:70:0e:4c:2a:6b:62:5f:47:4f:bc:e9:21:51:
e1:b0:96:f2:0e:13:a2:66:c3:54:e0:66:ec:bc:94:
f1:81:3f:f0:d1:53:2a:db:ca:bf:d1:83:61:03:e6:
65:85:03:e9:be:c8:48:1d:83:6b:62:30:ab:63:32:
1e:2d:14:51:de:96:d9:5d:e3:c5:5e:51:29:ca:12:
44:23:09:d9:89:b7:f8:77:5a:dd:6e:4f:0e:cc:9c:
46:b3:0c:b1:1e:c6:e9:ee:90:74:6c:f2:fe:4f:69:
e5:fb:d4:e4:3d:e4:ee:55:03:be:e4:17:53:ed:cc:
69:65:95:16:a3:b6:dc:05:ae:90:60:1d:26:ca:5f:
85:79:d9:07:26:aa:49:85:4a:09:e6:d5:ab:c2:5d:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:28:65:1B:06:65:3F:C9:6B:36:FF:A4:9E:11:1C:EE:79:5E:1B:AB
X509v3 Authority Key Identifier:
keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b9:a3:20:05:b5:1b:f6:fb:cd:a3:14:17:4a:8a:b6:74:1d:
7e:c2:b7:52:fd:b5:62:00:8f:ec:0f:ed:4c:21:ba:0f:1f:f9:
b3:d0:dc:15:56:0d:70:6c:a6:dc:fa:e3:98:ac:9c:af:78:9c:
d9:74:3c:13:97:e2:1b:a4:0c:0a:fa:0f:31:74:60:8f:8f:5f:
ed:5e:f1:ac:c9:cf:f4:9a:3a:dc:70:d6:06:66:88:e5:c9:9c:
06:2d:5e:38:c3:ae:0b:c4:b8:fc:3c:25:13:68:e8:ff:2c:9f:
73:ed:1e:11:00:58:04:5e:cd:26:21:cf:25:d2:a5:03:46:6e:
ff:0c:27:a2:03:00:79:ec:d4:bb:7c:e6:56:60:9c:69:fd:ee:
1e:b7:44:2f:7b:09:f2:da:79:83:e7:b9:71:99:99:c2:c3:b2:
96:63:f9:cc:4a:70:f7:a5:21:a8:81:bf:8f:21:4b:37:e7:d5:
65:3f:83:2a:8b:4c:bb:9d:a8:e0:c4:20:46:b3:21:80:a7:42:
7e:76:f7:27:b4:c1:79:52:97:38:f2:90:42:72:f3:d6:28:ed:
5f:66:86:5f:f3:fc:d1:79:04:9e:3d:22:49:12:fd:88:c9:b1:
c2:48:4c:29:76:8f:63:25:f4:80:39:4f:58:f0:8a:39:aa:a1:
fd:b5:32:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:54 2026 by rpki-client