Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File: 7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier: alAIdLA+uAbps+UwOlDDfdPyX5qEGfgPMiOhvkB3NVw=
Subject key identifier: 08:9A:F0:50:45:CF:97:19:DB:8A:11:31:76:BE:09:E6:B5:24:DC:16
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 019E1BD94003136A0E6A36E8F1A0A606A475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number: 07C2
Signing time: Tue 12 May 2026 11:01:22 +0000
Manifest this update: Tue 12 May 2026 11:01:22 +0000
Manifest next update: Wed 13 May 2026 11:01:22 +0000
Files and hashes: 1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: ST56FJ0lqRgQIZ6lNZqc+0OSDQTaWu/g0sa33j81Kok=)
2: wx6fgP8IcpV9Wa7rD9wqYgF6OOw.roa (hash: 7jyVllqQZoltPjiOZEmXnLkJG64ntD8hgU4CrmVx4p4=)
3: xZpVsdR8byrDOhtkihXsBj7ahyw.roa (hash: gEVFGzQUdZIHZpLD7UNkmD2vDPUL0zRMrJ6Jin9iB4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:40:03:13:6a:0e:6a:36:e8:f1:a0:a6:06:a4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: May 12 11:01:22 2026 GMT
Not After : May 13 11:01:22 2026 GMT
Subject: CN=089af05045cf9719db8a113176be09e6b524dc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:c6:c3:5b:3d:b4:75:a4:0a:45:a5:b1:58:
fd:c0:e0:b1:72:51:0d:54:89:ca:9a:52:6c:71:d1:
74:5b:c1:58:be:83:60:fa:bd:10:95:09:e3:fd:f0:
91:a3:41:1b:87:fb:51:d3:a2:02:40:54:2c:02:0b:
39:eb:21:13:94:d3:83:b1:92:91:49:8c:c1:28:fc:
82:70:2e:78:9c:a7:e6:f5:0f:ab:fa:05:11:42:16:
90:1a:e3:17:a4:7a:0d:f9:fc:aa:7d:08:52:88:94:
c2:90:d7:a9:6e:e6:4d:80:fa:1e:4b:86:f7:d6:a4:
dd:0c:c5:62:48:ce:f9:2d:7c:82:b2:28:73:4d:fb:
da:7b:04:76:cc:94:0c:1a:0b:05:56:ca:3a:58:f7:
19:66:c2:63:90:c1:63:13:da:b6:8a:b4:14:bc:e6:
d5:1d:cc:c1:99:39:26:18:a4:fc:22:a2:01:d7:a2:
c6:f0:4b:8b:9f:75:8d:42:2f:15:54:ce:d5:6d:02:
e0:06:22:cd:32:d0:87:d2:8b:d2:a7:b2:19:98:d1:
f2:e5:53:a8:ea:47:d1:00:cc:5b:4a:87:42:62:6c:
a4:58:c1:33:da:d9:c8:66:fc:6d:55:63:52:40:97:
e6:13:16:32:09:fd:96:01:bf:73:e1:2e:1e:b5:5c:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9A:F0:50:45:CF:97:19:DB:8A:11:31:76:BE:09:E6:B5:24:DC:16
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:00:af:2f:1c:7c:32:bd:d9:b5:40:96:84:48:68:20:32:6d:
5d:33:a2:43:77:cf:a0:61:24:6b:1c:4b:6d:53:e2:15:df:31:
16:2d:30:9f:40:7c:17:d8:b0:49:74:00:b3:49:70:c0:46:35:
93:e5:57:69:81:fb:2d:4d:9b:3f:42:40:e3:09:ea:84:4b:88:
87:0f:62:db:af:73:2a:17:64:e4:cb:9a:95:2d:fa:85:4d:a1:
dc:33:84:03:5b:db:ce:b0:e8:65:f9:ca:de:5c:00:31:04:57:
1b:78:f0:e4:0e:4a:12:ac:65:2e:e6:42:b9:98:6b:d3:2e:36:
4a:10:c7:b9:88:95:c9:aa:ef:ae:11:b2:a9:fa:8c:c1:30:95:
7c:14:92:b4:d8:96:9b:86:98:1b:87:c4:ee:6a:de:34:f7:25:
04:6b:e5:94:59:9a:5c:d8:fd:de:ed:53:90:d0:53:e2:63:9c:
96:5e:ef:aa:40:99:af:e0:57:ac:2d:70:c4:61:14:2d:e7:f5:
87:be:e6:f8:5e:fc:69:74:b3:5c:ba:2f:fb:d9:f8:ea:7d:cb:
c2:55:57:78:33:17:fd:91:4f:0e:c9:ab:e5:19:39:24:f6:15:
00:83:c0:4d:80:e5:52:d8:d7:cb:e1:3d:1a:2d:06:8c:e6:19:
c8:e8:10:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2UADE2oOajbo8aCmBqR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmZmYjNjNjYxZTJmNzhhNTc4NWJlOTU5MTYwNDRiMDZh
ZjUxZDIwHhcNMjYwNTEyMTEwMTIyWhcNMjYwNTEzMTEwMTIyWjAzMTEwLwYDVQQD
EygwODlhZjA1MDQ1Y2Y5NzE5ZGI4YTExMzE3NmJlMDllNmI1MjRkYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqXGw1s9tHWkCkWlsVj9wOCxclEN
VInKmlJscdF0W8FYvoNg+r0QlQnj/fCRo0Ebh/tR06ICQFQsAgs56yETlNODsZKR
SYzBKPyCcC54nKfm9Q+r+gURQhaQGuMXpHoN+fyqfQhSiJTCkNepbuZNgPoeS4b3
1qTdDMViSM75LXyCsihzTfvaewR2zJQMGgsFVso6WPcZZsJjkMFjE9q2irQUvObV
HczBmTkmGKT8IqIB16LG8EuLn3WNQi8VVM7VbQLgBiLNMtCH0ovSp7IZmNHy5VOo
6kfRAMxbSodCYmykWMEz2tnIZvxtVWNSQJfmExYyCf2WAb9z4S4etVzq/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAia8FBFz5cZ24oRMXa+Cea1JNwWMB8GA1UdIwQY
MBaAFO3/+zxmHi94pXhb6VkWBEsGr1HSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYt
YTk4OTM1NDVjM2M1LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYtYTk4OTM1NDVjM2M1
LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgCvLxx8
Mr3ZtUCWhEhoIDJtXTOiQ3fPoGEkaxxLbVPiFd8xFi0wn0B8F9iwSXQAs0lwwEY1
k+VXaYH7LU2bP0JA4wnqhEuIhw9i269zKhdk5MualS36hU2h3DOEA1vbzrDoZfnK
3lwAMQRXG3jw5A5KEqxlLuZCuZhr0y42ShDHuYiVyarvrhGyqfqMwTCVfBSStNiW
m4aYG4fE7mreNPclBGvllFmaXNj93u1TkNBT4mOcll7vqkCZr+BXrC1wxGEULef1
h77m+F78aXSzXLov+9n46n3LwlVXeDMX/ZFPDsmr5Rk5JPYVAIPATYDlUtjXy+E9
Gi0GjOYZyOgQyg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:25:40 2026 by rpki-client