Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier: kAi1eIQ+VZia+M/CRFTZZXqFqaaz/cwHsNOivaMyvGI=
Subject key identifier: 7E:A5:A0:4D:DD:ED:D7:BA:50:F3:44:92:9F:25:4E:63:BB:BC:B6:5D
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 019D9C63484A1CF79D97D1155D9A685912A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number: 0437
Signing time: Fri 17 Apr 2026 17:00:45 +0000
Manifest this update: Fri 17 Apr 2026 17:00:45 +0000
Manifest next update: Sat 18 Apr 2026 17:00:45 +0000
Files and hashes: 1: 6_ZblNm9ZRmYGkapxWHWsVXv62A.roa (hash: l1m5QGoRdp/fQXdkGDAgYT7UXYr7yNDfK4bT6u+JkJo=)
2: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: DvukhcJCEAuEvmV5D92HJ44JjKuJ5itOhbai7uhNsds=)
3: nnVHZXt9DivgToJiSfHRWDPCX58.asa (hash: /8k8/1a46VaQnelGrFv4w1ybQa3EbefqWYHF9uEGkc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:48:4a:1c:f7:9d:97:d1:15:5d:9a:68:59:12:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Apr 17 17:00:45 2026 GMT
Not After : Apr 18 17:00:45 2026 GMT
Subject: CN=7ea5a04dddedd7ba50f344929f254e63bbbcb65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:0c:80:5e:65:2a:b4:0a:cb:13:ef:a2:1e:
8e:39:99:64:20:4a:5d:3c:28:43:b8:f6:bb:b3:13:
6a:cc:31:8e:4e:b2:1f:24:eb:84:d7:cb:ba:21:a5:
c3:1a:32:5d:ce:6e:6b:74:3c:8f:2a:c8:ac:d8:ab:
ec:b1:1b:78:e9:e9:ae:a5:5b:53:41:ba:ac:00:ad:
8c:63:ac:aa:d7:6a:14:05:f1:0d:7a:79:44:55:c6:
6e:2d:0f:3d:4a:b8:a8:05:5b:c5:a1:96:8d:a8:fd:
27:9a:f2:77:e7:19:6b:52:4b:f4:62:05:f8:8d:b2:
87:a9:ce:3a:4d:99:69:47:ad:8d:1e:53:36:df:e7:
1d:75:f6:ae:63:13:7f:12:b8:33:54:8d:28:49:a2:
b6:f6:94:00:48:54:a7:ff:96:26:0c:82:f8:97:85:
48:99:dc:a7:1f:47:c2:b6:ca:f3:9c:f5:6e:44:3b:
f9:54:4b:36:d4:f0:45:94:e8:52:fe:b2:f2:2c:1f:
43:7b:9c:55:f2:19:a1:85:16:21:24:4b:4b:f4:f0:
d3:c0:a8:8b:f0:cf:17:73:d9:4d:8a:f9:47:32:06:
2c:08:c5:ca:f2:5c:b5:84:2a:e1:6f:69:f6:3f:f8:
ec:17:4e:3f:0a:f5:b5:9d:69:47:c7:0e:9a:c6:6a:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A5:A0:4D:DD:ED:D7:BA:50:F3:44:92:9F:25:4E:63:BB:BC:B6:5D
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:75:12:98:5a:03:eb:2f:d5:a1:55:58:e5:44:a2:da:f7:d3:
ac:7a:32:b7:89:4f:20:3b:95:ea:04:a1:3f:65:39:0a:c9:6d:
57:28:90:d8:15:03:70:5b:ef:0f:b6:4e:e3:ad:8a:1d:16:5c:
33:70:72:bd:d7:48:62:fc:08:d9:d7:1f:3f:cc:20:8b:3d:c3:
c4:02:ad:a8:6d:a6:66:f0:b6:ce:ea:60:2b:bd:d4:1b:23:4c:
c8:48:00:70:37:c0:52:4b:85:9b:52:e0:7f:c1:3a:6d:1c:3b:
cb:32:70:3c:32:97:0c:65:01:f9:f3:b2:04:ad:ec:57:88:5a:
ba:96:54:9f:d2:44:de:4e:49:fd:e3:33:c1:b1:85:ae:8b:7a:
36:81:88:71:b5:a5:b4:e5:af:f0:ec:ce:12:81:a4:42:81:ea:
db:09:13:46:d8:a7:cb:5b:34:c4:74:1a:2c:8c:76:0a:69:f6:
12:e7:ed:6b:73:fa:04:65:46:d4:c6:30:ef:af:20:ac:b3:0d:
59:f4:4a:ac:0c:2c:b1:4d:53:cb:4f:76:61:9b:c9:6c:71:22:
a0:a7:19:28:68:7c:8f:56:fc:62:64:46:b6:6f:c4:55:37:d2:
36:4d:78:2a:6b:3a:75:7f:c8:23:17:28:15:98:97:0e:a1:9f:
10:c4:68:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:43:21 2026 by rpki-client