Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
File: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft (raw, json)
Hash identifier: HwGC34gttr5TLD4Wz6bmQ3022s8LSFjwI0+uPh4fSuE=
Subject key identifier: 01:1C:51:C5:34:09:CE:A8:73:6F:87:44:27:80:F0:A4:6C:F7:C8:B2
Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Certificate issuer: /CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Certificate serial: 019D999971FE5DE99826A45FDFB356CD51CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
Manifest number: 1665
Signing time: Fri 17 Apr 2026 04:01:03 +0000
Manifest this update: Fri 17 Apr 2026 04:01:03 +0000
Manifest next update: Sat 18 Apr 2026 04:01:03 +0000
Files and hashes: 1: 2tKSrvE8w4OPUMtHHmn4NBgdIN0.roa (hash: xtQTDappKS+L7HJWwmh8B32VXucrBAKNvYHP3fwsAXE=)
2: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl (hash: bVVqOhUZieKLxKjyfAb5W3nOP5j2UY3zaux3yG7/Wxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:71:fe:5d:e9:98:26:a4:5f:df:b3:56:cd:51:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Validity
Not Before: Apr 17 04:01:03 2026 GMT
Not After : Apr 18 04:01:03 2026 GMT
Subject: CN=011c51c53409cea8736f87442780f0a46cf7c8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:c7:25:a8:98:d9:34:e4:38:3b:4d:ba:39:
82:e0:e5:cf:56:dc:38:ae:da:fa:91:98:54:49:29:
64:c3:ff:05:b9:e1:c2:01:0f:4c:55:e7:5b:32:9e:
a1:ff:f7:8c:3a:e9:33:41:ec:db:0b:32:90:2d:7a:
fc:3b:4e:8c:3f:ea:0b:ad:d2:e6:41:42:9c:74:00:
2a:f4:67:2d:db:d7:63:c5:eb:69:e2:5a:2c:f1:dc:
42:e4:72:73:ad:81:c9:f5:0b:17:1a:b3:6d:4a:a9:
c5:62:3c:b6:85:5d:46:3d:f3:12:0a:7c:60:25:f9:
6e:44:d4:a5:aa:fd:19:b5:c6:6c:7f:5c:80:4f:57:
32:7f:57:65:76:db:dd:05:c1:d0:ad:f9:85:16:81:
2a:16:8e:af:48:d2:03:5d:d6:30:c7:da:a3:33:20:
68:d3:d0:f9:c5:8f:2a:57:20:1a:14:9a:fc:51:00:
48:1e:46:2b:4d:1b:1d:84:3c:6d:af:f2:a6:67:df:
08:c5:86:f5:a1:6b:58:60:21:27:ef:68:78:f5:32:
83:87:b2:3e:c4:7c:83:da:f3:aa:3c:68:e6:4b:5f:
8e:c8:41:54:21:a5:84:5f:f9:c2:0f:79:4b:f1:f6:
4f:94:7c:3e:ca:b3:6a:35:be:9c:67:ea:97:7f:41:
04:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1C:51:C5:34:09:CE:A8:73:6F:87:44:27:80:F0:A4:6C:F7:C8:B2
X509v3 Authority Key Identifier:
keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e6:a0:1e:c3:5c:36:71:2a:ca:21:be:bf:65:9e:2f:b3:83:
c6:d2:f9:68:cd:c0:97:ec:3b:f5:6a:f0:30:68:b0:52:b1:f4:
73:71:98:7c:3e:18:4d:75:66:a4:41:0a:56:91:93:ad:a8:23:
27:a9:c0:e2:2f:c1:87:35:bd:0a:c9:7f:28:d6:87:8a:76:c9:
64:3c:35:27:e5:0a:1e:a3:95:9d:42:e2:ab:a2:78:ad:32:43:
df:9d:f4:f4:2a:7c:3c:c2:10:cc:38:9e:3e:be:4a:f6:aa:26:
2a:18:ba:8e:37:d7:35:76:ab:08:77:0b:32:37:b3:f8:15:99:
76:af:e9:b7:5a:f4:bd:12:b4:af:6d:86:a9:9f:a2:dc:31:d0:
45:17:53:48:b1:b5:7b:af:64:fd:a9:98:be:e1:bf:0c:0b:e6:
25:8d:da:2c:44:8a:0e:5f:d6:3a:26:66:de:3f:bc:8e:1a:71:
12:05:18:91:0f:c1:7e:57:20:4d:24:ca:1f:61:2f:ea:d4:97:
d8:bd:47:9e:be:35:31:d2:b6:9f:a2:15:3a:d9:cb:c6:94:24:
79:4c:7b:98:2d:7f:4b:69:a8:e8:c4:f1:67:4d:54:f7:3c:34:
ab:10:3e:80:a8:e3:4f:94:8a:0f:37:b0:a7:a0:55:c7:4a:f1:
bd:d6:49:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:18 2026 by rpki-client