Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier: T1we+QZgTt4HilbnKYEnAd68gYhtlu8n1p78MsxnVRk=
Subject key identifier: D7:D5:3F:F3:1C:9F:29:B5:9A:77:BF:30:B1:16:A8:63:97:90:00:AF
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial: 019EC0369CC7C2E1EAE6608B9CD1AFCD93FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number: 0E0D
Signing time: Sat 13 Jun 2026 09:01:04 +0000
Manifest this update: Sat 13 Jun 2026 09:01:04 +0000
Manifest next update: Sun 14 Jun 2026 09:01:04 +0000
Files and hashes: 1: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: bGxbCxDsC1a+08k4Hx96WtEcwK/0j4tIkmGxqoy18z8=)
2: s7ALXCsQ6iydnmcMndLJwyBEVrA.roa (hash: 2KKTFrZRTTsfpxmpCTn5aGO1P1QcLn41Vrt2Tl7hzrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:9c:c7:c2:e1:ea:e6:60:8b:9c:d1:af:cd:93:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Validity
Not Before: Jun 13 09:01:04 2026 GMT
Not After : Jun 14 09:01:04 2026 GMT
Subject: CN=d7d53ff31c9f29b59a77bf30b116a863979000af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:88:91:63:8f:c5:88:c8:79:5f:54:de:6e:
0c:5d:52:0f:12:aa:e6:47:78:f8:cf:60:81:22:a9:
1f:0a:83:ef:70:27:3a:f8:f7:7a:c8:5d:08:ca:27:
ae:82:81:bd:5f:a8:b9:80:e4:de:14:84:e5:4a:6d:
0b:df:d0:21:f5:dd:1f:34:3d:bb:d9:73:f3:cd:3e:
c2:a4:45:4b:df:5c:cc:4a:0f:7a:98:30:5a:ea:51:
2c:13:69:0c:21:69:87:f3:1a:af:62:7d:7a:a5:a7:
ff:da:d5:e8:6f:29:26:80:34:55:59:23:ee:1f:27:
2a:1c:61:b4:56:1e:53:4c:5b:b3:66:56:0c:be:f5:
7d:a7:77:60:f8:3a:8f:06:ce:32:af:77:d6:9c:7d:
78:6b:23:12:4b:85:36:3f:71:56:9e:10:a2:89:01:
9a:85:f2:f8:1f:58:75:83:c0:f5:82:97:f8:e1:ab:
a0:20:54:b4:92:04:d9:be:fb:30:c3:14:45:dc:8b:
57:5f:d8:b7:47:b9:e6:7d:71:dd:a3:7a:4b:a2:68:
e4:75:b0:90:20:28:9c:23:08:73:80:b2:56:13:7b:
86:a2:d8:ce:03:fd:8a:a7:9a:b9:da:bb:c0:dd:77:
81:d2:00:65:fa:eb:19:44:35:b1:af:b1:fc:76:12:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D5:3F:F3:1C:9F:29:B5:9A:77:BF:30:B1:16:A8:63:97:90:00:AF
X509v3 Authority Key Identifier:
keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:70:a9:ff:27:9b:bb:bd:08:a6:44:ee:c4:80:5c:0a:e3:6c:
bd:8f:20:59:0d:86:b4:c6:a4:a9:38:b7:8f:9d:96:5b:26:b4:
9b:5f:fe:c1:9f:4b:75:12:da:b3:40:c3:30:48:1f:14:46:79:
c2:df:76:d1:bc:51:3a:d5:79:58:fb:67:22:98:de:1b:b2:42:
bf:ed:93:b4:18:72:71:4f:d0:62:4c:b2:ea:67:3c:e8:da:28:
85:5f:00:85:32:85:0c:6d:dd:fe:4c:b4:5c:79:f7:08:9c:a3:
13:11:14:9b:dd:49:a9:9d:72:ad:ee:15:0b:d9:62:dc:55:89:
59:67:a7:9d:bd:52:ac:08:59:fb:10:5c:b5:ae:25:a5:a6:da:
52:1b:04:4b:d3:7e:99:a2:27:b6:94:df:48:ef:d4:0d:ab:e3:
1f:02:97:80:ca:d5:97:ce:b1:c5:da:6c:5e:76:99:19:15:85:
35:24:8b:79:0a:01:99:9d:e0:20:0c:83:15:68:ba:53:4e:7b:
8b:3b:c7:b3:a8:f9:68:02:d5:45:d8:82:35:cb:a0:ec:59:5f:
dd:e2:c0:89:77:1b:60:c9:4f:17:3a:5c:79:4d:35:60:1a:da:
39:8f:bb:c1:a7:48:57:e8:aa:70:6a:a1:f8:13:5e:b7:17:e7:
c2:67:87:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:54:22 2026 by rpki-client