Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier: 9a25sIdF01o30P9i+8cclegs3TdUC0mFtEFRPiHUH8U=
Subject key identifier: 10:DB:80:8E:FC:B5:47:74:E4:AA:81:EC:52:89:9A:9E:F0:EC:FF:A8
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial: 019E1EDA3A45C19AF8AF5581052B9BD96A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number: 068A
Signing time: Wed 13 May 2026 01:01:18 +0000
Manifest this update: Wed 13 May 2026 01:01:18 +0000
Manifest next update: Thu 14 May 2026 01:01:18 +0000
Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: y2sbXuhYyOV6O6a8hknf896/PEJYt1t7YxE8NQImFzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:3a:45:c1:9a:f8:af:55:81:05:2b:9b:d9:6a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Validity
Not Before: May 13 01:01:18 2026 GMT
Not After : May 14 01:01:18 2026 GMT
Subject: CN=10db808efcb54774e4aa81ec52899a9ef0ecffa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:f9:84:af:a6:21:93:71:b4:01:94:c3:22:
a9:51:9b:36:79:d2:89:b1:55:d1:24:eb:08:b5:09:
18:d7:dc:a9:61:cb:a5:8c:80:83:5f:36:4a:4e:34:
57:20:bc:1d:b9:19:30:60:df:cc:cb:70:76:60:10:
b8:db:0e:7e:fe:c8:0a:b1:f1:6c:f4:81:b9:ec:87:
4b:9e:87:63:41:3a:b9:4b:61:48:c2:d7:48:04:0b:
f1:be:c3:da:8f:8c:a5:4e:69:8b:62:4a:41:40:ff:
f7:93:7e:85:dc:c6:97:61:bb:35:ee:c8:76:2c:f6:
8f:fe:ac:7c:1a:e8:e9:45:87:51:7d:ba:eb:53:4c:
44:b9:73:17:03:6c:25:fa:d7:5e:8d:df:49:5b:36:
b4:38:3e:24:33:8a:01:77:56:a4:6e:19:57:9a:b5:
31:1d:8d:b3:b5:60:a9:47:bb:bb:20:46:d8:34:b0:
7d:33:f4:df:77:c2:96:0f:82:8c:36:fb:18:62:78:
04:4b:c2:51:dd:ee:03:9c:9e:20:e1:bd:fa:ab:f6:
2b:20:b0:2f:82:7d:c1:a2:50:9d:94:cb:e8:a7:90:
a7:31:77:27:1a:01:18:92:16:50:23:2f:97:55:d7:
19:a3:14:07:65:2c:1c:4e:f3:73:95:cb:0f:9d:91:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DB:80:8E:FC:B5:47:74:E4:AA:81:EC:52:89:9A:9E:F0:EC:FF:A8
X509v3 Authority Key Identifier:
keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a8:1a:26:87:72:22:01:80:f6:13:40:b2:6c:00:46:72:1a:
eb:0d:40:1c:a1:4a:df:22:cb:31:8e:6d:7f:c1:8b:58:dc:3c:
28:09:7c:c4:e7:31:77:ac:ad:2a:9e:f3:1f:e4:ae:18:ab:f9:
3b:ce:d4:6e:12:1f:c9:72:df:f1:b5:9f:b6:f5:41:ad:d0:47:
6f:53:02:db:53:45:ad:c3:09:ec:30:26:21:73:52:1d:0e:71:
04:aa:ac:97:5d:d8:17:5b:ab:6f:09:59:a2:9f:13:97:a2:2a:
a1:1f:9a:53:b3:17:2c:57:93:12:30:71:a5:a3:e2:ed:eb:9e:
77:75:19:97:b3:28:83:1e:12:0e:8f:ab:35:d7:3c:5b:64:ef:
24:18:ed:76:61:e4:18:db:47:54:e4:1e:48:b4:95:17:0d:79:
e7:f8:1c:4d:b9:9c:c8:8e:68:c3:7a:83:08:fe:d5:f1:d3:7e:
88:f3:19:50:e9:f3:12:fc:fb:2e:9b:b3:e9:8a:f5:f8:cb:47:
7c:52:4b:b2:2e:ae:ea:8c:57:56:a7:55:f7:64:ef:23:c3:8f:
cc:68:38:e1:f3:c6:36:b7:a0:fc:86:ca:01:ac:73:e0:19:ce:
c8:a9:bd:f7:42:d1:3d:71:44:31:29:5c:0b:ff:5e:67:21:e5:
ee:63:75:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:17 2026 by rpki-client