Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
File: 7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft (raw, json)
Hash identifier: DMvVjSWKPekljwWGhjJ/kvw1DO+nKMbKMQOWnYMg5oo=
Subject key identifier: 02:17:C9:88:87:38:FB:6D:5F:46:F1:88:0A:16:45:89:04:12:67:D6
Authority key identifier: EC:E1:B7:BD:C9:F5:70:EC:58:35:99:95:DE:A4:F7:39:FC:FC:06:52
Certificate issuer: /CN=ece1b7bdc9f570ec58359995dea4f739fcfc0652
Certificate serial: 019E1D22F3C6EF1B6291E9EEB3D5C0C96B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
Manifest number: 35
Signing time: Tue 12 May 2026 17:01:30 +0000
Manifest this update: Tue 12 May 2026 17:01:30 +0000
Manifest next update: Wed 13 May 2026 17:01:30 +0000
Files and hashes: 1: 7OG3vcn1cOxYNZmV3qT3Ofz8BlI.crl (hash: kWeTXSuntCsfYoDLA1dk5JFpfkTvpSoALZYcSwmBKHM=)
2: PaSCSViEAOmnkxIlKs2oejLqNDc.roa (hash: C95nSsqwtFhFODAGdM0T/xTl1c5zR83Twu0Y8s23u5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:f3:c6:ef:1b:62:91:e9:ee:b3:d5:c0:c9:6b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece1b7bdc9f570ec58359995dea4f739fcfc0652
Validity
Not Before: May 12 17:01:30 2026 GMT
Not After : May 13 17:01:30 2026 GMT
Subject: CN=0217c9888738fb6d5f46f1880a164589041267d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:7c:bb:90:ab:b9:a1:f6:a1:6c:ee:dc:c5:
a6:b6:aa:51:94:0e:15:dd:06:3e:3e:d6:a0:82:32:
e1:f8:33:7b:ad:f4:8d:be:d2:03:9b:a6:76:c4:94:
e4:55:8a:31:19:f5:bb:1c:8b:91:dd:eb:6c:1a:28:
71:20:4d:81:9e:64:ad:37:64:9e:9a:72:5a:e1:89:
c5:a0:75:ad:68:7a:51:ae:8a:ea:ff:2f:80:80:2a:
3b:3c:87:35:23:99:87:9c:87:7b:e4:b0:67:e0:3c:
90:ef:14:10:4b:da:0a:aa:60:51:63:1d:31:91:80:
03:bb:e1:fa:ad:d4:c2:87:55:b1:cc:ea:d4:20:18:
5a:73:59:d0:8e:d2:29:40:fa:bb:a0:ec:a5:e7:d3:
9c:56:2a:2e:9f:ba:b6:1c:13:34:48:ce:22:5d:4f:
e3:05:db:d3:e5:55:b7:a2:3d:0c:0a:d4:94:21:50:
30:1f:80:40:0b:93:ac:1f:5b:6e:80:c3:e2:0d:f0:
f2:da:0a:2f:0a:ed:07:a2:5c:f6:f9:0d:22:05:91:
55:a7:3e:8a:31:f4:08:df:dd:cf:92:1d:30:1e:80:
a6:b2:0c:1f:01:65:92:8b:e8:73:74:b9:ef:2b:7f:
25:88:36:02:06:23:fe:0e:37:b5:99:f4:09:ed:ea:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:17:C9:88:87:38:FB:6D:5F:46:F1:88:0A:16:45:89:04:12:67:D6
X509v3 Authority Key Identifier:
keyid:EC:E1:B7:BD:C9:F5:70:EC:58:35:99:95:DE:A4:F7:39:FC:FC:06:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:02:7f:e8:27:fd:8c:41:c0:f5:09:39:e4:55:64:a9:92:95:
ed:d7:d7:08:35:b2:68:f7:75:60:52:a1:56:68:e4:9e:e9:70:
cc:f7:2c:f5:a8:ef:9e:15:b5:3c:16:7e:a5:50:a6:4e:91:e4:
0f:f7:b2:c9:37:15:56:0f:66:9c:9a:52:63:c6:2f:22:2f:71:
c9:e8:ce:97:7b:f1:34:7b:fc:0e:0e:48:8c:03:a5:6d:90:5b:
b2:7c:5f:c1:fe:bf:22:62:41:04:62:87:fa:27:60:0a:b8:71:
f1:8e:0e:9a:18:65:41:95:e0:55:07:8f:bd:0c:cb:4b:1d:ea:
89:fb:26:06:2e:93:65:1f:4f:eb:26:e8:27:dd:87:86:f9:4e:
3a:57:4b:f5:4d:04:7a:92:55:c2:eb:69:a7:c3:e6:ca:14:64:
14:76:d1:41:6c:06:20:e0:1d:f2:53:fa:d7:a1:5a:ec:0b:79:
66:33:6d:e0:e0:ca:b2:4a:c8:40:5b:32:17:15:61:d5:8c:a8:
06:7e:e7:9e:e0:69:2c:2e:ec:5a:e4:55:c2:15:81:53:ca:2f:
2f:86:76:20:54:95:3f:9e:fa:65:49:59:07:96:82:f2:a7:3f:
69:09:31:b1:01:dd:b0:cc:61:63:fa:b2:dc:b2:ec:c4:d3:c5:
28:79:50:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:26 2026 by rpki-client