Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: qAvWuirkKTNm1Wls8Ifhxmlw9kegr3WMyN4Yqi0kMHg=
Subject key identifier: BA:6D:D1:CE:10:7A:C3:D3:D8:20:31:28:6C:64:D4:22:01:09:FC:FA
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 019EC149807FF200E9AA2101FA0128BC0196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 14:01:20 +0000
Manifest this update: Sat 13 Jun 2026 14:01:20 +0000
Manifest next update: Sun 14 Jun 2026 14:01:20 +0000
Files and hashes: 1: 0HZFumgyvQaDDTRTrqWFDMHfuo8.roa (hash: 99s+y069IP+8cLI0Fct7Tuh7Nr9yOVSbyI/w/nS1ohM=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: cD11eyvaRLMUrQkZ2Lw9UlXgFkBY19djxFNbpaRjUoA=)
3: JfyoN48fk_c9ic3qKJlpVrYlm4U.roa (hash: YO7Xai4MFWdK4ki2bUDwA4JpC3JpucBc+HE0rjiH0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:80:7f:f2:00:e9:aa:21:01:fa:01:28:bc:01:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Jun 13 14:01:20 2026 GMT
Not After : Jun 14 14:01:20 2026 GMT
Subject: CN=ba6dd1ce107ac3d3d82031286c64d4220109fcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:cf:b1:c7:a5:f7:c4:ce:e9:d3:20:f1:0d:
25:ee:ac:d6:03:ae:6c:08:04:bb:60:2b:b1:68:d1:
cf:d4:0a:9c:51:98:1b:50:8c:bc:10:1d:a7:76:d6:
b5:02:bb:71:43:76:ce:c2:36:f1:f1:ea:c9:43:aa:
94:5d:2d:5a:e3:8e:2b:21:ed:53:68:71:2c:10:d2:
c7:dc:6e:b3:42:8f:26:d5:ef:10:02:8b:b2:7c:37:
40:be:7d:2a:58:1a:ad:6e:7a:be:cc:86:54:5f:33:
8a:c4:88:3f:cd:a4:24:72:f2:76:71:c3:06:53:47:
20:17:68:8a:40:12:56:24:26:83:ea:8f:c5:4b:b2:
84:5b:bd:64:c4:6f:e2:ff:00:93:68:5a:f5:98:d2:
83:49:fa:09:64:4f:73:ad:6f:f9:a1:1c:ca:67:a4:
52:08:c8:08:c9:f8:45:15:d3:03:60:05:97:f2:dc:
c5:97:9e:37:03:e4:ff:17:61:d1:01:af:9d:0d:ae:
d7:58:ce:4f:0f:ef:fe:40:c0:8d:45:52:e0:f4:d0:
98:cd:f6:9e:1a:c7:70:3c:8b:91:ed:43:ee:01:8b:
a7:17:ff:bc:f8:81:51:91:64:33:bf:9a:a1:25:af:
17:df:88:35:e2:7a:d1:94:9d:90:33:a3:b5:2c:6a:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6D:D1:CE:10:7A:C3:D3:D8:20:31:28:6C:64:D4:22:01:09:FC:FA
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b5:ee:4a:67:bf:67:58:59:44:ff:b6:67:6e:69:87:6c:ca:
5b:cc:02:28:ab:e4:57:af:df:94:c5:c6:22:1b:ea:23:29:7f:
58:6f:2b:87:9c:b2:c0:8d:77:b8:96:12:4b:1e:9a:56:69:9b:
5a:99:90:84:4c:3e:a4:c6:39:7a:d9:80:7c:6d:98:df:ed:b0:
d5:c4:9d:85:e2:5c:51:40:b3:57:10:ac:d2:de:23:ac:f1:64:
db:bd:16:8a:21:f8:95:74:b2:23:38:6b:a0:c3:c5:f1:1e:85:
93:52:ce:e4:f7:cd:8e:a8:e3:7a:a0:87:8c:14:bb:c1:b0:86:
25:49:56:cf:f9:c1:c0:c3:11:50:86:db:b2:c8:66:6b:7f:8e:
26:68:b4:2d:06:86:5f:3c:a3:38:43:c0:39:3d:b8:56:1f:97:
a3:f8:c4:bb:e8:f1:b8:e6:34:a8:b7:9b:a0:13:c9:bb:a4:20:
28:8e:e3:aa:62:07:82:56:e6:4b:cd:9b:e4:51:17:8a:a0:d5:
07:c4:47:a2:e9:e9:a6:5f:85:5a:f7:e7:76:0a:bb:a9:d7:23:
a4:bd:f0:02:84:21:8e:43:e8:c2:f0:8f:dc:3e:51:21:a8:cf:
c6:ba:94:2e:51:f6:4d:74:2d:8f:be:8f:bc:b2:ba:d0:f2:b1:
9f:b7:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:59:57 2026 by rpki-client