Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: mc+4sQ3f1hIa/bh9iNkSrKrPI7yjN7uRheOScGkDKng=
Subject key identifier: AF:5E:53:07:D8:43:13:73:B3:7A:6C:D1:6E:99:39:72:E6:2D:28:82
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 019E1F10FEAC106D8D4460DE1EEA424FB6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 02:01:07 +0000
Manifest this update: Wed 13 May 2026 02:01:07 +0000
Manifest next update: Thu 14 May 2026 02:01:07 +0000
Files and hashes: 1: 0HZFumgyvQaDDTRTrqWFDMHfuo8.roa (hash: 99s+y069IP+8cLI0Fct7Tuh7Nr9yOVSbyI/w/nS1ohM=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: jSpr93vpCAkKX69DAPIma4VsmQkEQftL+q+ld40FJbI=)
3: JfyoN48fk_c9ic3qKJlpVrYlm4U.roa (hash: YO7Xai4MFWdK4ki2bUDwA4JpC3JpucBc+HE0rjiH0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:fe:ac:10:6d:8d:44:60:de:1e:ea:42:4f:b6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: May 13 02:01:07 2026 GMT
Not After : May 14 02:01:07 2026 GMT
Subject: CN=af5e5307d8431373b37a6cd16e993972e62d2882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:ae:a8:9d:ac:4e:32:eb:0e:2e:14:d8:a7:
53:85:a9:e1:98:29:83:3c:96:4f:45:25:73:38:45:
94:e1:fa:20:cb:4e:68:34:ae:a8:5a:8b:bd:a1:75:
b7:97:b6:a9:37:46:25:c2:64:87:3b:22:d2:e7:c3:
51:70:5c:83:7d:53:f5:db:41:97:f9:f8:bd:73:17:
79:98:c9:49:a8:23:4a:63:d2:e1:f8:dc:41:6d:b7:
2f:5d:1b:c1:33:54:b3:33:e5:a1:9b:d9:5a:96:03:
78:8d:c9:50:50:11:ac:01:1f:6c:a8:d5:4a:87:3e:
48:63:29:b8:2c:2f:a8:73:8b:2a:07:72:b6:0d:e5:
27:e0:00:43:e8:d6:38:b3:54:34:63:c3:d3:c5:d3:
c0:ee:b9:d7:50:d3:61:d2:b6:1a:1f:b9:9d:3a:f2:
d3:36:5c:3b:09:ff:42:b2:b6:2a:fa:d8:9d:10:1d:
7d:12:86:f1:fd:c3:7d:75:55:8e:09:95:bd:19:e1:
8c:74:cd:96:4b:20:72:45:54:76:df:60:60:d1:22:
15:93:4f:2b:32:d1:27:1e:c8:bc:f6:d2:0f:63:7b:
d0:11:0a:ac:db:c1:15:7a:ec:e7:2b:04:22:2e:16:
70:ce:27:77:ae:3b:b6:d7:95:9a:92:dc:17:e3:c8:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5E:53:07:D8:43:13:73:B3:7A:6C:D1:6E:99:39:72:E6:2D:28:82
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:33:c2:27:1b:1e:50:c7:b7:ca:67:dd:6d:f1:51:ab:41:b6:
d0:67:76:a0:48:4c:9e:4b:a4:08:98:11:17:b0:f7:db:9b:74:
9a:7d:99:0a:63:a2:00:ed:d8:6c:27:06:f3:89:0d:16:10:16:
b8:47:d3:a8:04:b6:3f:30:4d:e3:a0:24:6d:c2:43:d7:15:d2:
df:01:94:d2:73:50:da:68:2a:17:d8:c1:f9:68:2e:e8:1c:fc:
2a:19:2c:85:9e:cc:6c:e8:b5:3d:85:ee:54:3f:a2:07:84:03:
6e:b5:f4:52:b3:c2:70:6c:82:e3:55:9b:02:be:99:f7:49:e4:
89:c4:39:f8:54:cd:58:0c:25:f7:90:1b:29:5b:cb:ac:fc:2f:
a5:63:39:c5:0c:1d:4d:33:f6:10:34:0a:66:02:60:07:9c:79:
bc:40:46:31:3a:df:53:51:b2:27:6a:68:4e:08:00:dd:08:7b:
2c:af:73:5e:a6:e5:4e:40:e8:35:91:88:27:43:6a:a5:2d:43:
31:52:2b:7a:d2:83:3e:3a:d2:f3:45:60:a9:02:f3:35:06:d8:
1a:44:fe:75:24:23:93:8a:58:b3:55:42:80:ce:72:37:f6:56:
8d:5f:51:c2:6f:03:16:15:38:25:1b:50:d2:b4:8b:49:58:29:
ec:9c:e4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:51:32 2026 by rpki-client