Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier: rLbMYjLQ2JkoehnaErmjWhaqd9OlO0mcCL3BQVgTXPc=
Subject key identifier: 2B:19:9E:5F:E2:FD:DD:3A:E9:D3:AE:BD:45:A0:91:BB:B4:19:CD:CF
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial: 019EBE47C4F7749F5FCCA4211FE9F9463857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 00:00:34 +0000
Manifest this update: Sat 13 Jun 2026 00:00:34 +0000
Manifest next update: Sun 14 Jun 2026 00:00:34 +0000
Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: YNnfVtqgW3Mrs4UIbfeIxErAQo0NWv/dnzeL7W6zQz8=)
2: 955C7AtZAhtfMCkNkF_V4r29zNs.roa (hash: BzjiJ1i4x8f0IF+YLTcXKg5V1DmhNLRMYe5guMs7CHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:c4:f7:74:9f:5f:cc:a4:21:1f:e9:f9:46:38:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Validity
Not Before: Jun 13 00:00:34 2026 GMT
Not After : Jun 14 00:00:34 2026 GMT
Subject: CN=2b199e5fe2fddd3ae9d3aebd45a091bbb419cdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:35:3d:41:b3:cb:b4:e1:e0:2d:64:1c:1d:
73:1a:2a:59:bc:bc:54:3e:a3:da:6c:47:46:6b:66:
8e:08:7d:bc:cd:0e:c7:eb:c8:37:e8:83:ad:8c:c8:
fe:e3:da:c3:08:5e:19:41:69:fe:b1:5d:88:38:17:
53:b9:08:84:1d:fd:09:a6:dd:3c:3f:a5:9d:46:c3:
9a:76:2d:9d:f4:60:fe:97:e3:db:56:b8:ca:2f:26:
5c:c5:ff:67:28:74:bc:04:ad:89:fc:d8:a5:ee:a4:
51:94:47:da:04:2c:b8:a0:1b:cf:1a:a0:d3:c1:b9:
ca:5b:eb:cd:cd:1f:96:be:b9:3f:e2:6f:72:d5:7d:
f9:bc:c3:b7:8d:31:85:2e:b1:7f:75:6f:e4:91:a9:
9f:40:4b:0f:e8:9b:e4:18:9e:a0:dc:5e:c1:4e:e5:
9f:41:76:5d:05:52:4a:03:fa:8d:8a:ac:49:c8:e7:
7e:8b:e2:bd:4c:f7:e9:bb:be:b2:18:4c:ec:83:3a:
e9:41:5a:d4:94:d4:f3:02:2c:a0:fc:15:4e:35:38:
10:48:83:f5:99:d8:ce:eb:1a:1d:af:ce:46:c5:4d:
2d:80:5e:d5:a7:1e:a0:51:51:da:19:6a:65:be:70:
e2:ae:4b:4a:4f:4d:d3:1a:a1:80:fc:68:9c:26:66:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:19:9E:5F:E2:FD:DD:3A:E9:D3:AE:BD:45:A0:91:BB:B4:19:CD:CF
X509v3 Authority Key Identifier:
keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ed:86:69:c3:cc:31:0d:81:7f:4c:9f:f6:28:5b:f9:97:d5:
c0:ef:9f:e2:78:a0:c8:25:e9:1f:64:b5:b6:c8:d3:8d:56:5f:
30:d2:64:51:63:10:38:2a:d8:25:22:70:94:75:e4:4d:03:e7:
b3:50:71:ea:2f:b0:f5:1a:29:2a:8e:46:ad:6b:08:7a:a2:9a:
6f:d6:42:57:e3:2c:7d:bc:53:93:66:b0:d4:3f:b6:b5:8f:0e:
11:bf:b7:b8:c6:3c:39:38:5f:66:97:88:43:ea:6d:26:8b:b4:
47:af:ac:64:1a:c2:99:93:ce:4f:92:77:86:64:62:54:d2:b5:
d2:e1:38:90:6c:80:fd:7f:4c:6e:49:62:f2:0b:85:97:5a:14:
a0:3e:cb:70:3f:34:fb:7e:16:65:c3:73:4f:54:41:73:1b:6f:
28:32:c0:32:a5:80:0e:7b:41:68:3f:6e:ff:fb:cc:7f:2e:b5:
f5:f6:c6:41:c6:a8:ab:9d:5b:8e:e9:f5:02:75:6e:a8:89:63:
0f:40:77:77:63:97:93:0e:9c:2d:32:e9:94:ef:5f:70:f3:ec:
aa:93:e6:e0:aa:1f:7a:4f:84:f6:77:12:e0:ff:db:e1:aa:aa:
74:97:f7:de:39:f7:7e:b4:3b:de:ce:59:6e:1f:2c:1f:2e:84:
30:90:fd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:39 2026 by rpki-client