Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: b+WFDSx9dYt+t34h5qNyHSMn7yYvycq6y5/bxQwvD28=
Subject key identifier: 63:73:17:53:2D:16:35:2E:20:78:01:F0:4C:48:2F:66:5F:B0:9C:2C
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 019D9B87D8F9C71F67DD6DCDA3BB6F01EBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 0B35
Signing time: Fri 17 Apr 2026 13:01:04 +0000
Manifest this update: Fri 17 Apr 2026 13:01:04 +0000
Manifest next update: Sat 18 Apr 2026 13:01:04 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: PQSK/vx+E1GhQZDgjR6fbeiGVsmvXK9XQE07qiU7kWA=)
2: aO8SV7r8aRmaMsrCVn54MAITseY.roa (hash: UBYs9t/xpmJLmkQIIYwuZf57SETqiU4zYplqSc9D++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:d8:f9:c7:1f:67:dd:6d:cd:a3:bb:6f:01:eb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Apr 17 13:01:04 2026 GMT
Not After : Apr 18 13:01:04 2026 GMT
Subject: CN=637317532d16352e207801f04c482f665fb09c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:49:b5:dd:fb:45:57:1e:df:62:f9:5d:42:
d8:1d:b1:7a:a5:67:3e:c4:23:8d:0b:a0:e8:08:8e:
80:91:37:2f:a9:4c:71:47:7c:b5:ba:55:db:d8:20:
8c:cc:43:cb:13:3a:52:a3:04:ec:ba:f9:60:6e:76:
43:8a:80:8e:34:a2:00:6a:b6:9a:75:2e:cd:27:28:
65:e4:b1:8f:5e:ea:b1:b3:ed:c0:69:04:65:fd:e4:
0f:f4:0b:a7:67:2c:d0:b2:b1:18:f3:63:b0:dd:d2:
0d:56:db:aa:54:f7:0c:af:f8:d8:8c:d6:7c:eb:ed:
e1:26:f6:f0:93:95:ea:e5:28:3e:2a:35:b9:3c:ea:
99:6a:b9:ec:ce:41:c5:7d:2e:dc:21:76:71:bc:1b:
b7:cb:7d:2e:87:0e:37:bf:e8:62:2b:62:61:1f:60:
be:e6:31:4d:51:75:45:76:3b:fa:87:ae:29:e6:a2:
5b:75:aa:68:b1:cc:2a:41:cf:be:85:0c:7f:eb:8f:
67:0f:05:c5:ea:ee:69:f2:d9:10:78:89:4f:15:f2:
5b:8c:ea:bd:fd:5e:d3:d3:2e:87:05:80:cd:5e:7d:
c1:0a:20:e3:7e:d0:ec:ab:ec:33:73:d3:fd:a6:7c:
5b:fa:f4:62:85:e2:c3:a8:cf:25:63:64:5d:25:e8:
1a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:73:17:53:2D:16:35:2E:20:78:01:F0:4C:48:2F:66:5F:B0:9C:2C
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4d:53:54:3e:05:c3:37:99:c9:20:09:36:69:77:f5:a9:10:
c0:7a:bb:f8:25:d9:34:61:8f:49:21:c6:54:eb:7d:b2:ef:a2:
e1:48:11:9a:70:56:ab:b7:c7:62:82:90:88:54:73:34:e4:81:
dd:4d:b7:1c:93:e2:90:18:5f:d6:4b:78:ed:98:98:8a:8c:c7:
a0:88:59:26:1e:67:0f:c2:81:a0:f8:20:9f:d5:d3:f5:e1:74:
33:e5:b8:a5:74:d3:ff:50:30:ac:fe:e1:88:d5:61:3b:42:ed:
d3:95:c5:54:1c:c1:70:66:0b:59:33:82:ea:02:c7:56:64:a9:
e2:34:78:2b:a2:cc:09:bd:21:51:97:f7:52:49:6c:ae:e4:d5:
ce:06:6b:f0:29:64:1d:23:c4:0e:69:2e:98:0b:4a:0d:55:04:
d0:01:c5:66:73:6e:98:3c:70:58:05:25:66:2d:8c:fa:b5:74:
89:ab:b8:53:5b:86:2d:3e:22:15:94:16:d4:8e:ae:3f:90:95:
ef:c2:cb:a7:5f:9c:6e:f8:bc:71:15:bd:95:b8:5d:ec:d2:05:
fe:b1:45:a2:85:d5:8c:9e:64:c0:79:b0:5a:89:c5:36:27:7d:
ba:df:89:d6:fb:d7:f5:10:e2:48:11:c6:ec:8f:42:fa:3a:66:
54:17:e6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:58 2026 by rpki-client