Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier: wKMeALraQHKr3xbH8brESaxHZNwC3S3QhmaoIeVhJGs=
Subject key identifier: 09:50:A3:38:14:99:8A:B4:50:19:27:4A:BB:C5:B6:49:20:81:3B:E4
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 019EBE10B1547D9696A6E34AA1CC9F3DD072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number: 04CD
Signing time: Fri 12 Jun 2026 23:00:25 +0000
Manifest this update: Fri 12 Jun 2026 23:00:25 +0000
Manifest next update: Sat 13 Jun 2026 23:00:25 +0000
Files and hashes: 1: 6_ZblNm9ZRmYGkapxWHWsVXv62A.roa (hash: l1m5QGoRdp/fQXdkGDAgYT7UXYr7yNDfK4bT6u+JkJo=)
2: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: pYjJWuOitg+rK1noFBLbKrQxxQd3K92jnFxJjETlcDQ=)
3: nnVHZXt9DivgToJiSfHRWDPCX58.asa (hash: /8k8/1a46VaQnelGrFv4w1ybQa3EbefqWYHF9uEGkc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:b1:54:7d:96:96:a6:e3:4a:a1:cc:9f:3d:d0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Jun 12 23:00:25 2026 GMT
Not After : Jun 13 23:00:25 2026 GMT
Subject: CN=0950a33814998ab45019274abbc5b64920813be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:9d:90:22:0a:c5:83:41:7c:71:37:8c:9f:
6c:07:61:b0:4c:10:4e:46:a9:0d:15:e6:6c:b9:bf:
e2:50:a3:4b:57:50:ac:20:28:98:2e:3b:3b:0b:cb:
8c:8f:78:10:72:ea:68:04:8b:7f:14:75:dc:2e:f5:
52:2e:52:78:07:de:81:b4:cd:cc:a5:f5:8e:70:6e:
6b:c7:e0:15:ae:89:77:5c:58:5f:a4:f7:7c:1a:e0:
32:7d:cb:0a:bd:34:21:80:49:cd:9a:88:56:bd:67:
74:47:a3:29:49:d2:aa:2d:c3:e8:26:de:f9:83:e5:
9f:0f:60:e7:ec:1d:d0:84:3e:ea:61:9f:99:30:d4:
24:62:fb:ac:80:0d:c2:47:1d:67:f8:f5:08:1a:1b:
2e:1a:38:78:ab:8c:ac:9c:c7:4c:21:bf:7e:57:a5:
b7:d8:d2:7b:85:46:f6:28:a3:81:f8:72:9d:5c:a8:
89:b8:1c:b3:af:f6:01:8d:b8:3a:d8:05:f8:42:b1:
a3:7a:6b:e9:88:4b:8d:8f:b7:47:e8:32:25:d9:02:
a0:78:e7:aa:76:04:69:1c:e0:c4:ff:74:14:22:aa:
e6:52:bd:d2:1b:1f:d4:de:10:83:83:c9:cc:b7:91:
11:de:4f:8b:73:b4:f0:7e:13:b1:ff:1b:0b:29:83:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:50:A3:38:14:99:8A:B4:50:19:27:4A:BB:C5:B6:49:20:81:3B:E4
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ef:85:d6:20:ff:c9:cb:5b:ee:41:12:0b:89:50:44:7e:38:
90:bb:c8:7a:93:a4:51:75:04:3b:b6:41:51:7f:3b:57:8b:17:
10:fd:20:c9:f9:fc:7b:d6:72:f7:ae:b1:c8:20:8e:e9:9d:4f:
34:fb:37:bb:06:37:ed:98:96:5c:a1:e9:15:4d:1d:7c:4b:5f:
13:3f:a8:21:27:e9:d8:7a:5a:fb:a9:7e:4d:d1:8d:ae:bc:94:
04:fa:e4:c7:bd:13:01:7d:44:2f:f0:74:a0:c1:df:d2:da:f0:
3d:8b:bf:38:5d:2b:10:c7:ff:81:35:4e:c5:cb:11:04:44:6e:
ab:45:c4:b3:75:2c:ce:42:78:7d:97:8c:44:ac:a0:f7:e2:4c:
be:29:2d:2d:54:b7:91:8c:5e:69:b6:6b:2a:37:91:68:0a:0a:
ee:60:a1:19:95:f4:15:de:48:b7:42:c6:d0:64:03:67:ff:3b:
20:9e:22:99:a6:af:4e:5b:50:da:06:e7:d0:b4:fb:45:98:34:
1e:bf:4d:a7:50:91:1d:c9:0e:59:00:0f:dd:19:d7:91:d3:44:
95:8d:24:f2:92:c9:44:a7:57:20:34:6c:5d:ea:cc:2b:84:32:
eb:08:af:17:c3:03:69:e7:35:8a:83:8b:75:de:c5:24:67:aa:
b7:2e:10:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:05:54 2026 by rpki-client