Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
File: 7HDF2GfeIA8BSGsaiAqUuEldciA.mft (raw, json)
Hash identifier: qQjPsonEa5U6vRQsRg8lMkRnaVqSCx4tTltrouHkr/Y=
Subject key identifier: 43:29:BC:2E:B6:BC:1A:52:CE:77:7C:EF:10:8C:86:47:9E:B6:8D:2E
Authority key identifier: EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
Certificate issuer: /CN=ec70c5d867de200f01486b1a880a94b8495d7220
Certificate serial: 019E1C476C0FBAC29A1807ACF932BE59D336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
Manifest number: 11C7
Signing time: Tue 12 May 2026 13:01:43 +0000
Manifest this update: Tue 12 May 2026 13:01:43 +0000
Manifest next update: Wed 13 May 2026 13:01:43 +0000
Files and hashes: 1: 7HDF2GfeIA8BSGsaiAqUuEldciA.crl (hash: O0Zq1tDfezRK5cfwUiV7oAcgNTVGWVuFHMv42ErGUGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:6c:0f:ba:c2:9a:18:07:ac:f9:32:be:59:d3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70c5d867de200f01486b1a880a94b8495d7220
Validity
Not Before: May 12 13:01:43 2026 GMT
Not After : May 13 13:01:43 2026 GMT
Subject: CN=4329bc2eb6bc1a52ce777cef108c86479eb68d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:96:0d:1c:22:3d:60:3b:53:2e:e9:6c:0e:
da:93:b2:97:ae:72:be:2d:65:b1:5a:3f:a4:41:61:
da:6d:6b:db:23:1c:3d:50:ff:1e:43:55:1a:f1:17:
e0:af:7c:8a:62:60:05:0a:69:63:47:44:da:62:f1:
f7:0a:86:2f:dd:fc:36:43:a1:9e:8d:56:d2:d9:e7:
90:3d:ce:e5:c7:dd:c7:40:0a:9d:41:57:21:7e:52:
69:af:af:ab:81:60:72:92:bb:83:bc:4c:09:de:84:
49:75:26:f4:90:de:bb:92:b7:a4:eb:5f:7c:70:97:
cc:7f:60:46:74:12:9b:12:60:7f:bf:53:a1:0c:8c:
b5:dc:c1:a1:a7:b5:06:30:c2:3f:f6:6a:61:46:90:
c3:a2:a6:e4:f6:15:73:8e:12:e0:bc:22:6c:08:4d:
ba:a0:79:17:f5:10:94:f3:90:ec:55:ba:69:12:4a:
3d:db:67:cf:23:d6:5a:6d:4d:e1:81:93:25:13:36:
97:9d:87:71:f0:3e:10:2a:d6:af:17:07:79:dc:bb:
71:c6:04:6b:9a:09:f1:e2:4c:19:44:c1:e3:0b:ea:
c9:6c:a2:7d:05:0e:f9:f2:83:19:24:d5:fd:58:f7:
9a:27:68:5c:08:6a:19:c6:75:fa:a0:c2:71:19:2a:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:29:BC:2E:B6:BC:1A:52:CE:77:7C:EF:10:8C:86:47:9E:B6:8D:2E
X509v3 Authority Key Identifier:
keyid:EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a5:ec:19:ee:dd:c8:fe:2d:a3:7f:0b:21:e5:16:fa:a0:51:
1c:7e:e7:e6:c3:d9:ac:01:86:40:fa:cc:22:f0:0b:e0:51:5c:
53:45:1d:fb:6b:70:91:56:57:55:bc:32:b9:5f:cb:7a:bd:5d:
91:66:30:bc:b2:c3:d6:18:8f:38:c8:ff:5c:25:9f:3a:80:ab:
57:cb:0b:c3:7e:25:df:ab:42:e8:11:45:dc:f4:26:8c:d3:ad:
ab:8d:7c:dd:9f:be:99:6d:fb:f7:51:6c:b3:f6:58:28:f7:f3:
3e:d0:c3:67:ee:52:5e:2c:39:ae:2c:cc:51:a8:b4:da:a9:a7:
c5:83:89:fc:23:ef:b7:ff:e1:a0:77:a0:94:97:2a:17:b1:6a:
22:22:48:0c:19:16:37:83:95:28:32:e1:0a:1b:5e:87:f4:ca:
c9:fe:fd:82:46:b0:85:46:e0:46:92:8b:be:d5:e3:b2:95:56:
00:df:79:ce:dc:bf:91:04:b1:b8:d7:e2:69:c2:e3:75:03:eb:
5a:e0:d9:c8:31:a0:d5:da:e8:a4:f9:8d:8a:d0:6c:71:83:6e:
4c:61:f6:b8:5c:a4:b8:94:0e:ac:6b:15:04:1e:f1:dc:ab:1a:
e0:3e:07:3e:5f:3d:2d:44:74:42:0d:69:74:2c:98:3c:d1:30:
a5:58:32:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cR2wPusKaGAes+TK+WdM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzBjNWQ4NjdkZTIwMGYwMTQ4NmIxYTg4MGE5NGI4NDk1
ZDcyMjAwHhcNMjYwNTEyMTMwMTQzWhcNMjYwNTEzMTMwMTQzWjAzMTEwLwYDVQQD
Eyg0MzI5YmMyZWI2YmMxYTUyY2U3NzdjZWYxMDhjODY0NzllYjY4ZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvWWDRwiPWA7Uy7pbA7ak7KXrnK+
LWWxWj+kQWHabWvbIxw9UP8eQ1Ua8Rfgr3yKYmAFCmljR0TaYvH3CoYv3fw2Q6Ge
jVbS2eeQPc7lx93HQAqdQVchflJpr6+rgWBykruDvEwJ3oRJdSb0kN67krek6198
cJfMf2BGdBKbEmB/v1OhDIy13MGhp7UGMMI/9mphRpDDoqbk9hVzjhLgvCJsCE26
oHkX9RCU85DsVbppEko922fPI9ZabU3hgZMlEzaXnYdx8D4QKtavFwd53LtxxgRr
mgnx4kwZRMHjC+rJbKJ9BQ758oMZJNX9WPeaJ2hcCGoZxnX6oMJxGSoegwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMpvC62vBpSznd87xCMhkeeto0uMB8GA1UdIwQY
MBaAFOxwxdhn3iAPAUhrGogKlLhJXXIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZWY1NGMtYjAzNC00OWU2LThkYTQt
YzVhZDE1M2MyZDQ2LzEvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZWY1NGMtYjAzNC00OWU2LThkYTQtYzVhZDE1M2MyZDQ2
LzEvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaXsGe7d
yP4to38LIeUW+qBRHH7n5sPZrAGGQPrMIvAL4FFcU0Ud+2twkVZXVbwyuV/Ler1d
kWYwvLLD1hiPOMj/XCWfOoCrV8sLw34l36tC6BFF3PQmjNOtq4183Z++mW3791Fs
s/ZYKPfzPtDDZ+5SXiw5rizMUai02qmnxYOJ/CPvt//hoHeglJcqF7FqIiJIDBkW
N4OVKDLhChteh/TKyf79gkawhUbgRpKLvtXjspVWAN95zty/kQSxuNfiacLjdQPr
WuDZyDGg1dropPmNitBscYNuTGH2uFykuJQOrGsVBB7x3Ksa4D4HPl89LUR0Qg1p
dCyYPNEwpVgygQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:25:33 2026 by rpki-client