Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: Wx+FFzLoWahqZyDxKIInJDcpUjuu/kW5HaX0vnhjRDU=
Subject key identifier: 80:24:68:14:80:8F:47:72:50:3B:13:AA:71:26:88:AE:27:36:E8:61
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 019D9AE35DDA1E88DDF7C2D16513E389F070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 0FA3
Signing time: Fri 17 Apr 2026 10:01:25 +0000
Manifest this update: Fri 17 Apr 2026 10:01:25 +0000
Manifest next update: Sat 18 Apr 2026 10:01:25 +0000
Files and hashes: 1: 1-kxWXv05LSEshrBJnjD59T0FQ7Q.roa (hash: rHapWpK9pigcf/GGIQp1nmEJbzSoQssokoPt9LrVksY=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: J5ouuNKY2nAYsAlS2y6g1MrEJzlG3GMkLSmpkYUku4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:5d:da:1e:88:dd:f7:c2:d1:65:13:e3:89:f0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Apr 17 10:01:25 2026 GMT
Not After : Apr 18 10:01:25 2026 GMT
Subject: CN=80246814808f4772503b13aa712688ae2736e861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:d0:86:dc:25:d0:99:0f:2f:63:fe:de:00:
48:76:40:ba:76:f8:ce:43:cc:e2:1f:f2:d3:02:c5:
62:30:42:07:5d:b9:2f:48:56:18:45:45:98:17:c8:
19:ef:aa:c2:6a:ba:d4:c8:39:ae:d5:28:78:c8:da:
12:c8:0a:17:f9:04:05:8b:3a:c6:58:85:3c:a7:a3:
4e:0a:ba:1e:80:af:90:05:ac:0f:92:c0:90:35:a1:
43:27:73:94:a6:36:7e:8c:e4:36:a5:c9:14:7e:a2:
43:37:31:a0:25:bc:3a:60:45:85:e4:eb:23:a3:ac:
76:41:53:7f:3d:3c:a4:6b:6b:f7:26:92:9d:31:75:
89:31:53:45:49:f7:71:8c:81:18:b9:b1:cb:3c:ac:
7c:52:f6:eb:f9:02:13:83:10:f6:16:ac:88:d6:13:
a6:da:05:20:0e:99:e9:67:3a:7f:67:cd:cc:d6:f8:
38:a9:a9:f1:c0:5f:35:f5:4e:56:2d:a3:ab:4a:bb:
e7:e7:7b:e3:6a:ea:b2:13:95:61:d5:9e:1b:c6:02:
7b:8d:8e:61:3a:3a:8e:a0:8c:ab:03:b6:93:d7:e8:
85:78:ca:1e:dd:1d:98:ce:48:f7:19:d0:4c:05:23:
62:94:80:41:2c:b8:52:f0:37:d7:74:22:96:9f:5a:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:24:68:14:80:8F:47:72:50:3B:13:AA:71:26:88:AE:27:36:E8:61
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:9e:2c:94:83:64:26:4f:d4:3b:c0:ca:ec:e8:2c:4e:ac:4d:
78:ee:08:96:96:47:c8:ec:21:8e:0a:5e:21:2c:16:3e:c0:77:
13:bd:5e:08:3d:7b:c3:c8:89:ea:4b:a6:fd:9c:87:19:c2:f0:
4c:be:5e:4b:10:2c:c4:03:db:f4:61:72:98:b7:f7:df:01:20:
b9:b4:8d:80:12:67:c0:90:4b:61:ec:0c:a6:6f:df:e3:ea:b8:
1a:95:4e:f4:56:24:d1:2c:d5:3a:be:07:78:26:85:47:2d:8a:
59:44:05:90:34:2f:00:81:8c:d8:3f:da:83:a7:d0:ae:85:d1:
20:1e:a8:2c:12:c2:46:ae:95:c8:54:1f:9e:83:ff:fa:dc:0e:
c8:ea:07:74:e7:f0:50:34:22:2e:f6:d7:d1:dc:63:9c:23:24:
93:eb:49:bb:66:93:da:39:af:32:70:2f:92:f4:b1:8c:b0:6b:
0f:2e:fc:1d:2d:e7:c3:67:37:e0:b3:6c:15:f6:71:fb:9a:c3:
fe:f1:f9:6c:ad:06:a7:ac:89:bf:a0:8d:42:0b:fa:d6:67:e4:
55:0a:54:01:42:a6:aa:34:f1:f2:86:d1:a9:a1:c5:3b:0e:ce:
70:40:9b:69:a8:14:af:57:ef:c9:f5:da:4a:19:b5:0b:14:f2:
ea:d5:2e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:05:45 2026 by rpki-client