Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: N5m9q4Ca935Vu7UHfiis/Km//T6Cs2CDjTopgl4AZX8=
Subject key identifier: 72:7F:CB:22:8C:23:F6:0C:71:BA:83:92:F1:8E:15:72:8C:3C:A4:B9
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 019EBF235E0A4A385A541AA45E06726FD9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 04:00:26 +0000
Manifest this update: Sat 13 Jun 2026 04:00:26 +0000
Manifest next update: Sun 14 Jun 2026 04:00:26 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: /J1EeIUypzBUgsvuo2Amh6bngz2Hgk5W1MC9Il6MOTA=)
2: Y1SgnZdGMmo9fGpuJl7wUQaxlkc.roa (hash: c5a6z6fFSi3Ksmn1qg/vCHzequVOvVzrYowSPYYXoZY=)
3: zgjOZSAzojMMAhNOHNiG97-1lKs.roa (hash: 9AqyfTSVIr04hBsXGR4iW4XjBoNFR8P2652xVPdhD0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:5e:0a:4a:38:5a:54:1a:a4:5e:06:72:6f:d9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Jun 13 04:00:26 2026 GMT
Not After : Jun 14 04:00:26 2026 GMT
Subject: CN=727fcb228c23f60c71ba8392f18e15728c3ca4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:35:55:8e:ef:ac:56:50:4f:c5:d7:24:54:
bf:0d:51:19:35:5d:2c:50:3e:7f:62:ff:e7:8b:bd:
6b:d2:57:e3:72:ad:2b:25:a7:fd:e5:71:9c:eb:d3:
66:44:c6:d7:09:53:1b:c3:67:80:46:f4:58:f8:1f:
a2:b6:1f:4a:bf:9e:1c:2d:c0:04:a5:a9:e7:49:7c:
62:da:a7:ce:91:37:c9:bf:5e:f2:cb:3d:be:c8:03:
13:e3:6f:ee:18:ab:98:85:13:7a:74:ec:37:d6:ab:
93:bf:a5:9e:90:41:00:a0:32:89:9c:fd:cc:a8:22:
f4:94:52:ce:06:4d:e4:37:42:b5:58:a3:76:a9:9f:
43:27:fb:12:3a:92:14:b5:76:53:fb:27:d2:e7:50:
aa:77:90:c3:c1:48:34:70:11:cf:8c:8f:92:f7:a2:
db:dd:77:b0:b5:b1:6b:32:29:9e:47:7e:b4:a2:75:
54:8a:e6:85:bc:6d:3c:d7:0a:fb:fe:f1:3f:6f:83:
08:73:ed:a8:3b:25:1e:7a:f9:4c:4b:15:7e:b5:2d:
88:f0:20:89:17:12:08:1a:de:81:99:41:45:c4:df:
90:2d:ca:69:18:7d:b3:25:a3:ba:52:8f:82:84:6d:
be:83:85:e5:d5:6a:59:3d:e8:69:e6:6a:fb:19:37:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7F:CB:22:8C:23:F6:0C:71:BA:83:92:F1:8E:15:72:8C:3C:A4:B9
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a2:84:ea:2e:3d:71:c7:02:e8:ef:29:48:1e:1b:68:3a:ae:
41:d2:e7:09:29:e3:53:04:93:cc:a1:c3:ec:32:80:e0:a4:a0:
ea:a9:85:d1:ef:00:b7:71:1c:08:b8:80:88:3a:16:df:f5:4a:
d0:52:5a:dd:9d:d2:b2:93:4d:a8:99:37:72:10:86:1e:74:89:
c9:b9:1b:e8:13:b7:ba:db:00:40:fa:bc:63:f5:f8:99:d1:96:
10:40:d1:63:fb:18:a1:29:e8:8a:75:b9:8b:a0:ba:6f:03:d1:
09:a4:fe:c9:57:b4:a2:e3:06:49:b8:c7:03:95:78:88:db:09:
cf:a5:90:1d:42:54:c4:9a:a1:ab:36:d5:b6:c7:cd:ed:39:ae:
d7:7a:10:26:6c:50:ed:e5:a7:78:64:4f:76:ce:c5:70:9d:c0:
e5:09:b8:9e:e2:2a:d4:52:74:f6:c1:d3:f4:68:65:64:4e:8d:
60:07:c7:ef:8b:ec:7e:15:a9:56:2f:2a:ef:8c:ac:57:11:7b:
83:b6:30:3a:a4:d2:75:68:42:3f:35:6d:79:68:e3:e3:85:0f:
fc:0e:0a:8f:e7:22:f0:d4:b1:c7:7f:19:10:be:9b:12:6f:77:
5a:23:46:2b:ce:96:a5:3c:a6:be:14:ab:2f:a1:2c:a3:20:14:
07:35:75:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I14KSjhaVBqkXgZyb9nFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjFlYTVhMTA1MGE4MjkyMjRlYTQ4NmMwZTIyZWJmYzc1
ZDY0MGMwHhcNMjYwNjEzMDQwMDI2WhcNMjYwNjE0MDQwMDI2WjAzMTEwLwYDVQQD
Eyg3MjdmY2IyMjhjMjNmNjBjNzFiYTgzOTJmMThlMTU3MjhjM2NhNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7Y1VY7vrFZQT8XXJFS/DVEZNV0s
UD5/Yv/ni71r0lfjcq0rJaf95XGc69NmRMbXCVMbw2eARvRY+B+ith9Kv54cLcAE
pannSXxi2qfOkTfJv17yyz2+yAMT42/uGKuYhRN6dOw31quTv6WekEEAoDKJnP3M
qCL0lFLOBk3kN0K1WKN2qZ9DJ/sSOpIUtXZT+yfS51Cqd5DDwUg0cBHPjI+S96Lb
3XewtbFrMimeR360onVUiuaFvG081wr7/vE/b4MIc+2oOyUeevlMSxV+tS2I8CCJ
FxIIGt6BmUFFxN+QLcppGH2zJaO6Uo+ChG2+g4Xl1WpZPehp5mr7GTfzZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJ/yyKMI/YMcbqDkvGOFXKMPKS5MB8GA1UdIwQY
MBaAFOyx6loQUKgpIk6khsDiLr/HXWQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2Ut
MDJmZmNlZmYxYWNjLzEvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2UtMDJmZmNlZmYxYWNj
LzEvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaKE6i49
cccC6O8pSB4baDquQdLnCSnjUwSTzKHD7DKA4KSg6qmF0e8At3EcCLiAiDoW3/VK
0FJa3Z3SspNNqJk3chCGHnSJybkb6BO3utsAQPq8Y/X4mdGWEEDRY/sYoSnoinW5
i6C6bwPRCaT+yVe0ouMGSbjHA5V4iNsJz6WQHUJUxJqhqzbVtsfN7Tmu13oQJmxQ
7eWneGRPds7FcJ3A5Qm4nuIq1FJ09sHT9GhlZE6NYAfH74vsfhWpVi8q74ysVxF7
g7YwOqTSdWhCPzVteWjj44UP/A4Kj+ci8NSxx38ZEL6bEm93WiNGK86WpTymvhSr
L6EsoyAUBzV1SQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:33 2026 by rpki-client