Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
File: _7ml8yjMMGUnzExHS9xLE6dGoag.mft (raw, json)
Hash identifier: inn4W/biJyBO+aQ6/haK962azK9UEMJ7Ww3Hkg2bEew=
Subject key identifier: 88:19:D9:07:FE:F4:8F:9A:6D:1D:60:72:84:EB:3E:6B:56:2F:B0:BE
Authority key identifier: FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
Certificate issuer: /CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Certificate serial: 019E2023751C762AE232836D387451BC3C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
Manifest number: 010C
Signing time: Wed 13 May 2026 07:00:55 +0000
Manifest this update: Wed 13 May 2026 07:00:55 +0000
Manifest next update: Thu 14 May 2026 07:00:55 +0000
Files and hashes: 1: TjUAHrNX6D8KKFwZiePYTV0m3bk.roa (hash: 61/mGPF5yOHT2ppU4Jvr6b/vuT6FmCh4sw4OsDecTfo=)
2: _7ml8yjMMGUnzExHS9xLE6dGoag.crl (hash: r5wwyBHfddIhi9LkkNJA7idGgHrswyHUkG+aJ5sGz/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:75:1c:76:2a:e2:32:83:6d:38:74:51:bc:3c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Validity
Not Before: May 13 07:00:55 2026 GMT
Not After : May 14 07:00:55 2026 GMT
Subject: CN=8819d907fef48f9a6d1d607284eb3e6b562fb0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:0b:62:ab:47:d5:7b:a6:f9:5a:ac:29:8a:
f3:38:d0:47:06:4c:2e:d6:4f:68:b1:31:ef:9e:7d:
15:61:9d:bf:95:b2:f7:68:82:bc:b0:7c:b6:8f:67:
de:92:03:7f:0e:18:e5:c7:fc:a7:a5:4e:ee:ca:fd:
76:d2:c2:cd:de:94:81:67:e5:f3:c3:06:85:c4:75:
bc:22:3a:dc:78:7d:9b:28:fa:b8:9f:29:02:e0:54:
09:56:72:45:65:d6:8c:64:41:45:34:4e:b8:33:25:
99:eb:34:98:30:03:65:39:38:59:35:be:7d:cb:b7:
0f:89:84:e0:1f:bf:73:8c:68:c3:c2:2d:dc:b4:ad:
b7:a0:b5:b3:7e:6e:57:58:38:55:69:d9:de:00:e7:
03:88:90:60:00:b1:5e:36:96:78:be:a9:2b:67:68:
e4:c6:8c:00:74:37:ee:c4:29:2a:fa:19:da:06:22:
c2:fd:fc:09:ca:4e:18:ed:a0:51:b0:b4:31:22:2f:
c6:7d:0a:d4:fb:bb:9e:b3:22:15:ff:a4:0e:78:bf:
1f:fb:4f:81:ed:db:1d:21:16:d6:33:54:ff:6b:c3:
d1:d0:c6:fb:3d:c6:99:ac:3c:08:e4:15:2c:5c:d7:
ac:6b:1c:32:49:98:26:ce:6c:31:16:be:cc:85:07:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:19:D9:07:FE:F4:8F:9A:6D:1D:60:72:84:EB:3E:6B:56:2F:B0:BE
X509v3 Authority Key Identifier:
keyid:FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:b7:6a:c9:dd:a0:e4:79:8f:88:39:14:5d:71:6a:fd:c9:99:
c0:36:eb:ab:b1:20:47:c8:20:86:89:ce:c9:0a:d4:cb:c1:5c:
99:5d:4f:b1:d2:9e:e7:f1:4a:d4:3f:f3:b0:fa:78:c9:16:11:
c9:26:3a:c0:32:86:24:a1:4c:2c:3c:de:f3:e8:e2:1c:74:05:
d2:61:21:eb:c4:ca:9c:a8:4f:18:6e:17:fc:b1:48:87:7a:1b:
b9:3e:1a:1d:48:a1:ed:01:c6:6c:a6:16:8c:51:38:2f:c1:4f:
50:4e:96:c1:6c:8b:61:ef:77:75:0a:85:e0:25:23:a3:b6:df:
d1:d4:13:87:0e:15:71:30:5e:ca:2d:7b:d8:59:e6:fd:34:26:
c5:17:8e:0e:b2:c0:58:1b:e9:e4:b4:23:a6:39:a3:ca:e4:69:
57:42:3a:fa:f5:c0:33:1e:a3:f1:24:97:1e:30:f8:b7:4e:de:
1e:ac:bf:50:2f:5d:bf:60:6a:2f:c6:97:55:b7:8f:e9:02:8d:
99:7e:c7:1b:18:1e:ed:14:9e:1f:f7:88:45:0d:fd:4f:33:25:
65:3e:5a:07:a5:f9:ba:e1:b9:bb:f0:10:4c:5f:80:f1:57:d9:
2a:2e:4c:f8:ea:3b:b7:a2:2d:8c:b7:d6:61:5c:73:94:b9:f2:
8d:01:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:40:45 2026 by rpki-client