Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: DI/53g21jnp/COGWX4iUwySrB38hplJdxy3wZSKvdHk=
Subject key identifier: A2:B6:95:03:11:84:2B:3A:24:C7:C7:93:05:9E:C1:5A:EC:4C:D8:15
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 019E1DC78E0144D2D5FDD333354D5128B7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 10DB
Signing time: Tue 12 May 2026 20:01:17 +0000
Manifest this update: Tue 12 May 2026 20:01:17 +0000
Manifest next update: Wed 13 May 2026 20:01:17 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: gZNk8VdewrZiP1HKEeR0XIhlZIGTd2r1K0S2Ay2ecwY=)
2: rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa (hash: reSEL9M69wAKbL5gRtqeNyqy/DyxKPTT8rPI7JNy6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:8e:01:44:d2:d5:fd:d3:33:35:4d:51:28:b7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: May 12 20:01:17 2026 GMT
Not After : May 13 20:01:17 2026 GMT
Subject: CN=a2b6950311842b3a24c7c793059ec15aec4cd815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:a2:92:9a:db:b6:ea:44:d1:c5:9e:13:30:
e8:94:e8:97:ab:6b:6e:6e:f8:fe:02:53:62:4d:b0:
6c:7c:30:18:20:40:02:ff:5b:c4:84:c0:b4:fe:c8:
6e:75:5b:60:3b:7e:90:26:93:74:28:5c:a3:85:93:
2c:2b:20:60:e7:a8:7d:ab:d5:b6:8f:88:95:f7:1c:
f5:ff:bc:88:0a:ed:13:15:e3:ea:bc:ff:34:68:90:
33:3a:ea:ad:14:b2:c5:b4:4e:d7:73:8a:b6:e0:69:
73:38:86:d4:1f:dd:c9:c4:91:bf:8c:ad:bb:3f:4a:
b7:7f:b7:37:6a:4d:8e:f9:ce:0e:46:d2:cf:f1:a7:
aa:23:9a:1d:e1:48:98:41:21:44:f4:40:7d:bd:bc:
b6:35:3d:7a:80:7d:f5:0c:8a:4f:ff:24:ea:a0:bc:
e7:15:33:c2:68:51:9f:88:3c:97:03:0f:9b:53:55:
49:08:9d:61:5e:48:7d:fe:88:9f:6d:a1:93:72:9f:
48:d4:03:18:65:ad:f9:1f:9e:99:cc:22:b9:ca:88:
a4:0d:b7:95:1f:3c:1e:c1:f1:62:f8:ab:50:3c:71:
e5:65:15:c8:fa:06:ce:2d:4d:a7:b1:48:d8:6d:57:
4f:9b:db:b2:f4:b2:19:5e:40:52:5f:0f:5c:31:99:
66:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B6:95:03:11:84:2B:3A:24:C7:C7:93:05:9E:C1:5A:EC:4C:D8:15
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:73:b2:d1:c9:9a:c6:d3:e1:33:b2:55:66:48:3e:6a:bb:16:
c1:70:d5:31:ef:1f:d5:a9:41:d4:0f:95:82:1e:f4:3b:1e:22:
d7:70:04:86:69:e1:52:e3:fa:41:58:64:5c:8c:2d:31:08:d9:
29:2c:ad:c2:5d:07:01:ff:ec:b7:ba:89:52:a6:3e:f5:86:14:
07:91:f2:25:71:57:39:7b:bc:b1:c0:30:69:e2:03:d3:f0:43:
e5:e8:13:d5:25:13:8e:26:12:ab:6c:e1:8c:d0:91:bb:0c:d3:
39:f7:bf:7a:14:81:20:a0:76:aa:9a:cb:4a:47:c7:b3:e3:11:
a3:f3:05:44:fc:77:fb:67:38:71:5c:1e:68:e2:a9:3e:5b:46:
de:67:f9:dc:d8:c4:21:7e:fc:2a:69:66:36:95:02:a6:72:9d:
4b:70:a7:07:77:26:d2:c6:8d:a7:ec:33:e1:84:1d:4a:c8:93:
f1:ec:a2:92:f9:8f:55:e4:21:2b:d0:08:be:b7:ed:59:1f:82:
db:72:17:0e:13:64:48:e8:03:e8:1c:4a:89:72:07:8d:0d:cd:
6a:ea:3c:19:aa:f3:b6:eb:8a:20:c4:dc:aa:f6:4a:1d:59:59:
25:04:ff:8e:5b:f1:01:a9:ee:f1:f3:6d:10:6f:84:8c:5c:c8:
d6:7c:80:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:51 2026 by rpki-client