Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File: 7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier: hMgXaHL+CFih+KENhdPk8RV/xT0PwV8jxY5pRmnPf7k=
Subject key identifier: DE:4B:21:D3:C6:72:E5:21:30:EC:7A:7D:CC:5F:2E:35:B4:12:26:47
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial: 019E1F7EE1BC11EA964535345C91662F7DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 04:01:09 +0000
Manifest this update: Wed 13 May 2026 04:01:09 +0000
Manifest next update: Thu 14 May 2026 04:01:09 +0000
Files and hashes: 1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: 7j+dsBkz/oMNHI7O2YWmvp5AcOVJxkROvVGUwXW2axM=)
2: dDrbN1EnOvhkFc0_xZRFXvcNr40.roa (hash: 4F6zFoAlaZyrQw6r2Sapl4Rve7y38xHZ2sxhWgQcUxI=)
3: vqQIJ63USJ6tNbfIvkmeDNaWV-8.roa (hash: OsN69G3y8PdNZsFJ8bznX8F2lLtEi2mXTwt/+VGM68k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:e1:bc:11:ea:96:45:35:34:5c:91:66:2f:7d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Validity
Not Before: May 13 04:01:09 2026 GMT
Not After : May 14 04:01:09 2026 GMT
Subject: CN=de4b21d3c672e52130ec7a7dcc5f2e35b4122647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:99:97:ea:77:ce:79:87:f4:06:31:23:ca:12:
55:01:c2:23:4e:0d:09:1f:4a:fe:36:1e:30:02:ee:
16:6f:9b:4f:74:73:80:0b:10:f2:7e:a4:23:67:ab:
1a:d8:2b:d3:12:66:05:bc:49:35:12:d4:dd:16:e5:
16:a6:05:81:b2:b7:9d:ca:7b:bd:74:c6:50:dc:e2:
fd:5f:80:16:cd:61:d4:2f:4a:ad:a2:0c:5f:bd:44:
31:e2:66:8b:f2:5c:92:fe:12:f7:d9:a2:80:9e:66:
32:8e:d8:65:d6:31:1c:9d:9f:1c:97:67:c8:38:35:
15:2f:dc:c0:27:87:80:e3:58:45:39:47:bc:59:3d:
60:b4:c4:14:18:57:da:d0:85:14:d0:57:14:e3:4a:
79:6f:90:ca:dd:d1:ee:51:c4:79:77:26:ec:6f:78:
fe:67:da:10:2c:39:63:2a:6c:c7:34:78:2e:4c:40:
ab:5f:18:84:19:09:b2:86:9d:b6:43:09:c7:50:85:
8d:d9:42:8e:4f:1d:ab:c0:1c:24:e6:9d:b1:29:3e:
e8:f3:40:50:b2:af:3e:54:da:77:ff:9c:90:a6:b1:
08:92:d6:46:f1:68:b3:38:10:6b:2c:45:47:2c:43:
de:1e:67:69:a8:fe:e3:c0:02:9e:2b:e7:d7:29:43:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4B:21:D3:C6:72:E5:21:30:EC:7A:7D:CC:5F:2E:35:B4:12:26:47
X509v3 Authority Key Identifier:
keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b9:57:5c:0c:e2:e3:e7:35:b7:7a:b4:a8:aa:81:ed:a2:0c:
d5:18:49:f9:09:36:13:c0:5b:4a:a9:d5:e5:cf:f4:d9:7f:a6:
3e:93:8c:fa:12:fe:fa:c7:ec:6d:03:94:da:23:f0:06:7e:de:
fa:a6:0f:36:0e:61:99:57:1c:40:25:8c:e5:5d:d2:79:4b:9e:
4e:d8:54:06:bf:2b:4e:95:2e:91:c1:fa:aa:51:8c:9d:75:c7:
80:b5:11:5d:43:28:8f:54:b0:c5:25:1f:83:57:47:dd:e6:d4:
46:1b:78:ad:1a:1f:7b:a7:1c:ce:18:fd:36:54:17:b8:8b:36:
b8:6c:f6:2e:e4:41:4f:0c:7e:00:2f:06:7f:89:7b:f5:11:04:
88:30:8a:2a:c0:fb:2f:c7:15:d8:24:8f:76:5d:bf:a2:20:f1:
06:99:34:c8:b0:48:50:3a:ba:bf:99:b6:a0:75:8a:c1:bd:07:
2a:80:75:ad:59:dd:cb:49:f7:74:0d:ad:9c:eb:e1:17:38:cc:
fe:9c:78:ce:be:bd:a9:1c:70:c0:31:cd:14:e2:2f:a5:b5:67:
f9:19:ca:3d:22:ff:6f:e5:47:7c:52:f7:24:a7:ba:a6:29:ef:
69:d2:27:90:eb:7c:86:bb:90:8d:9e:8f:0f:b1:e3:98:e8:c7:
29:e5:d1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:58:50 2026 by rpki-client