Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
File: 7lsNNqN0qzXENu4Awuyu-7KjVEg.mft (raw, json)
Hash identifier: cQcVSssdlOZUm98rPN//vBFu8wKebiY7z0TltEsxSa4=
Subject key identifier: 12:2F:63:E3:D4:36:A3:86:EF:1E:35:CE:06:1C:01:67:32:D9:F1:D4
Authority key identifier: EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
Certificate issuer: /CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Certificate serial: 019EC1B67C7EC1E054662443E9089FB58DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
Manifest number: 037A
Signing time: Sat 13 Jun 2026 16:00:22 +0000
Manifest this update: Sat 13 Jun 2026 16:00:22 +0000
Manifest next update: Sun 14 Jun 2026 16:00:22 +0000
Files and hashes: 1: 7lsNNqN0qzXENu4Awuyu-7KjVEg.crl (hash: BeewI1Nfc0wSwJLKPF5DkeWKEz7cs4bzFfeXGRRdSlw=)
2: fHCIkDI_tyAmmW1GOo4OCmgrWOQ.asa (hash: mjIlqPcdqEqZv1LLEdjujFp2APfTOPyNRkl6rj99vbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:7c:7e:c1:e0:54:66:24:43:e9:08:9f:b5:8d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Validity
Not Before: Jun 13 16:00:22 2026 GMT
Not After : Jun 14 16:00:22 2026 GMT
Subject: CN=122f63e3d436a386ef1e35ce061c016732d9f1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:47:91:85:cc:d1:8f:3f:5f:8f:dc:41:a8:
51:06:89:df:0b:08:4e:22:b5:9e:5b:f6:f4:07:e9:
2f:df:2e:7e:67:28:28:f5:84:7b:ba:c7:f6:20:de:
68:5a:ed:3d:34:e8:b7:cc:7f:03:0f:7a:83:cd:94:
a6:ef:ae:3d:0c:86:cb:f2:cb:e8:0e:b1:02:26:67:
d0:bd:ac:1a:0d:82:c3:68:2a:93:a1:73:6f:f6:47:
d2:0f:56:8c:3d:a3:22:f1:ce:66:98:65:80:72:95:
8c:db:6c:2d:ef:eb:fa:f2:68:45:14:b4:29:a4:d8:
fc:c7:37:a2:64:a2:b8:a2:57:dc:dc:2b:91:94:35:
1e:0c:51:2c:6d:c8:bf:d0:73:03:9b:c1:86:73:88:
49:2e:94:88:9a:43:50:aa:23:b9:b6:d0:81:94:c7:
f6:40:a4:6d:3d:90:16:5d:7d:d0:01:62:32:10:68:
b9:8f:1c:2a:e0:d9:25:f2:0c:fc:43:a5:63:3e:a2:
57:f1:08:83:4e:46:fb:0f:22:c0:d8:91:41:01:3a:
36:e1:0c:27:48:b0:34:ad:49:4e:f1:64:93:a4:8e:
b1:ad:33:06:83:cf:d4:c5:7c:0f:63:1e:8a:a0:16:
9f:1c:cf:22:eb:35:44:df:33:91:2e:8a:0b:e3:69:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2F:63:E3:D4:36:A3:86:EF:1E:35:CE:06:1C:01:67:32:D9:F1:D4
X509v3 Authority Key Identifier:
keyid:EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:55:3b:c7:19:2f:ac:95:29:16:89:5b:a4:30:9c:af:95:7a:
18:b7:47:06:97:e5:68:64:d8:a6:fc:ca:30:ca:9e:1d:d2:ec:
6b:94:f1:ab:9a:d3:b4:c4:27:a4:55:cb:a0:ff:e2:0a:88:43:
e5:4b:bd:76:25:0b:28:32:4e:cb:a1:ec:49:e0:6f:8a:da:ad:
7c:e4:34:8d:d4:fe:a7:9a:14:d5:28:88:b8:71:8e:1e:42:24:
05:78:af:07:fe:48:5a:c5:50:f4:ec:d5:22:c3:cc:2e:b2:29:
40:d0:e2:a3:90:eb:a1:bf:3c:1d:2c:10:f7:ec:ef:11:bc:53:
e8:d2:08:eb:32:2a:84:b2:e1:17:c0:40:69:bb:1a:77:34:9f:
b1:32:c4:50:e6:f9:2e:92:91:91:3b:19:c4:6a:79:6e:ab:fd:
c6:dd:31:0c:a2:26:7c:68:f8:68:20:5e:44:bd:59:85:d6:1d:
28:c5:cb:f8:e8:46:dc:a5:0a:8b:5b:a2:c4:ef:be:b9:5f:cc:
cc:83:ae:d0:49:34:1c:ad:95:ed:0f:8a:51:2d:62:73:c2:9a:
94:26:f1:6e:d3:2a:c9:65:e9:95:b4:c8:14:06:f5:00:1e:7f:
18:e4:61:ff:a0:70:a1:5d:b7:cc:8c:83:4a:da:70:b7:ff:25:
da:e2:a8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:05:06 2026 by rpki-client