
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: T8cJX/bk+p1a+AOoyCOTJ7bddcI6SPYtOxoGC4LViFk=
Subject key identifier: 22:89:E5:12:8E:1A:74:05:B3:69:D7:30:A7:B5:EB:77:FE:F4:39:C3
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 019F93C8E220145254F9B89293EEA04D25EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 187E
Signing time: Fri 24 Jul 2026 11:00:43 +0000
Manifest this update: Fri 24 Jul 2026 11:00:43 +0000
Manifest next update: Sat 25 Jul 2026 11:00:43 +0000
Files and hashes: 1: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: rWStyrZX2n7RJJgEL/CntWLeHi0qI8Clt432sZuubUM=)
2: m5yvHicFnXm_Esifvf9nJ43HYjM.roa (hash: 2UG9meAu50+1K4RYnFNAIuouwlkL5D4Ox6KRSauQKrc=)
3: rI-1eY7TtxFeY70hEXPRG9r4SUU.roa (hash: 3yzUSLFgFbapDsLKTnHWd+eZDAnjuQ4IsvzD3dpVDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:e2:20:14:52:54:f9:b8:92:93:ee:a0:4d:25:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Jul 24 11:00:43 2026 GMT
Not After : Jul 25 11:00:43 2026 GMT
Subject: CN=2289e5128e1a7405b369d730a7b5eb77fef439c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:61:0b:3b:8f:2f:38:e5:b8:74:5d:b4:b8:
36:22:de:bc:8c:87:6c:17:e7:27:13:10:d6:43:98:
66:f0:8e:10:8e:60:4e:57:24:e0:f8:99:1f:0c:a9:
46:e3:8a:17:16:02:b8:d2:ab:60:0f:12:85:0a:71:
d3:a7:60:dc:ad:7e:9f:88:72:6c:32:69:65:74:3e:
c3:27:53:f2:76:32:3d:89:5e:8c:e2:e6:ae:a3:4f:
36:1f:a3:37:85:84:3d:7a:bb:9f:7d:7e:50:a0:30:
94:9d:a2:a3:f2:85:5a:07:c6:21:e5:22:b8:31:5a:
19:df:16:8d:29:56:d2:3c:f6:2a:45:69:d5:94:46:
0a:8f:1c:41:e1:40:7e:31:11:cf:75:65:2a:81:64:
92:ae:77:4f:f5:f6:5d:26:bf:60:d8:8a:4f:81:62:
18:37:7b:bc:dd:43:d2:f5:39:5f:2e:56:6a:0e:a1:
a2:9f:f5:c1:72:f2:2d:14:0c:9a:55:3c:8c:01:f1:
df:b8:70:b7:14:ef:fe:1a:6f:be:d8:f9:ff:f9:98:
1f:b0:e5:dc:7b:d9:54:3f:1a:7c:49:12:1c:44:26:
e5:62:1b:b0:65:f7:80:86:10:25:2c:93:eb:55:19:
27:4f:59:58:44:6b:a2:63:5b:f1:09:63:cc:99:f6:
6a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:89:E5:12:8E:1A:74:05:B3:69:D7:30:A7:B5:EB:77:FE:F4:39:C3
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:28:1f:82:ca:02:07:d8:96:0c:f7:50:3e:a3:7c:87:c1:5f:
97:54:f6:a3:49:da:bd:9d:d3:11:1c:00:03:a7:aa:d4:75:0a:
e7:64:7f:e3:59:93:b8:5b:23:2a:34:d8:a5:19:80:dc:a3:61:
c5:b7:d8:43:18:0d:9c:0a:22:ae:6d:05:de:69:00:45:4b:1e:
28:02:17:c6:8b:d8:96:43:c4:1e:bf:a5:24:b3:d0:71:e2:48:
89:4a:f8:d5:4a:ec:4f:56:99:73:bd:89:42:e4:11:39:f5:eb:
b0:d2:48:9e:85:24:ce:17:52:92:68:68:45:bf:21:3f:ae:7d:
57:61:5d:11:08:27:21:75:ec:b2:fc:a5:88:c5:b7:21:d0:fe:
ac:02:ea:2f:15:86:7a:63:4a:06:cf:c4:32:05:0f:87:56:c6:
b0:83:ff:eb:39:75:e4:ed:64:8d:9b:3b:1d:12:59:58:8e:8a:
23:89:14:5c:3f:64:a2:dd:d8:99:c3:58:41:53:d7:96:11:1b:
2d:1c:10:05:66:4f:38:01:88:7d:98:23:34:b5:4d:f2:4c:c9:
a5:26:b6:e7:ac:ae:24:d3:47:c5:22:74:b1:84:b7:7d:1f:79:
89:45:4e:5a:95:7a:dd:65:7c:fe:ce:25:79:c1:55:ca:82:0e:
76:44:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:04:39 2026 by rpki-client