Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier: foZYaZQwhLy2ZclTfAkpU2pf/GbQpv3uTZtETYi7GRg=
Subject key identifier: 2C:FA:79:9F:DB:FC:2E:D2:27:35:BF:94:D8:00:AE:2B:B1:5D:E4:4B
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 019F927FA93FBF96FDE9E6726E5BB4F1794F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 05:01:07 +0000
Manifest this update: Fri 24 Jul 2026 05:01:07 +0000
Manifest next update: Sat 25 Jul 2026 05:01:07 +0000
Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: nHGXjHcH7jXsKL+l53zHOWkBCGliJI2v9rOYf+S7xWg=)
2: cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa (hash: /VirzHss1ndnL0VauqeSmTCntzhbwvddkhihXgztiNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:a9:3f:bf:96:fd:e9:e6:72:6e:5b:b4:f1:79:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Jul 24 05:01:07 2026 GMT
Not After : Jul 25 05:01:07 2026 GMT
Subject: CN=2cfa799fdbfc2ed22735bf94d800ae2bb15de44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0d:de:7c:8f:fd:2e:4d:7f:c6:f6:9d:54:f5:
2f:66:4b:69:90:ce:05:d4:e2:91:7c:60:7f:b4:c6:
78:d6:4c:70:55:0a:4f:87:66:d7:eb:2b:6e:eb:0c:
b3:ac:45:f7:72:1e:4a:0d:6f:1f:45:3a:6c:46:69:
a5:48:3e:6e:0c:30:01:5c:3d:f7:97:92:4e:90:6c:
3e:5b:8c:2d:6f:1a:00:04:78:e5:5b:61:0a:6e:cb:
45:33:9f:08:8a:bd:12:d5:43:f4:d9:ac:57:8c:e5:
13:dd:18:af:a3:4d:d3:15:da:da:1d:ff:11:7e:4d:
c3:27:b8:6c:b1:70:06:68:94:81:0d:85:5e:94:41:
30:4d:05:a7:85:18:49:65:75:18:35:53:cb:3f:8e:
f2:dd:1a:eb:08:8a:d3:9e:28:65:c8:2f:c2:bc:4f:
a0:5f:27:5d:2e:cf:65:88:8b:e4:26:6b:ac:8e:5e:
37:c2:73:c8:0a:21:fa:6d:d2:6e:ad:b1:04:96:01:
1b:aa:55:11:44:68:80:a0:3b:ff:73:d8:ff:b9:7e:
02:40:b7:90:9f:72:0f:43:60:13:1e:6d:cf:2d:b8:
d9:7f:0a:3e:cd:6d:f4:66:86:9e:a5:97:ac:02:4f:
3f:7c:d5:b6:76:67:22:f3:20:03:9b:d7:e0:fa:e5:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FA:79:9F:DB:FC:2E:D2:27:35:BF:94:D8:00:AE:2B:B1:5D:E4:4B
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:98:e1:81:17:8f:6c:4c:7e:3b:07:72:fd:57:71:ee:e5:7a:
96:4a:6c:00:b0:61:28:02:2a:55:55:88:a6:b0:2b:61:06:e7:
ef:41:ba:0e:70:ff:30:55:89:aa:f3:29:ba:b0:56:1b:b5:80:
bc:39:5d:3e:24:cc:14:13:9b:44:ae:ad:a6:fa:10:be:32:3a:
2c:ed:4f:38:9b:74:c4:90:43:15:ea:68:34:c1:8f:f6:5c:af:
19:a1:66:5d:ff:d5:b8:8f:91:ed:85:72:70:1e:3f:ed:14:f4:
57:15:11:2f:f5:68:c6:cd:d7:c7:5d:19:4e:f8:cf:98:47:bf:
69:ed:15:d3:49:ed:c1:60:d2:30:83:a3:4c:2a:11:b3:0d:dc:
fe:2e:91:8f:75:7c:05:17:2a:cb:d7:6f:fa:fe:d2:e4:35:2e:
65:f9:87:04:79:b8:8c:e7:1a:ca:07:f7:f9:04:61:f4:60:1a:
4f:5f:c5:9a:55:a1:62:7b:41:62:73:23:a1:90:c6:71:be:ea:
cb:b2:ec:38:aa:7b:6a:c8:5b:58:c8:b0:b5:13:33:1f:bf:46:
5a:93:6c:0f:39:cf:f4:26:9e:ba:bf:89:59:85:ea:fb:95:01:
26:ea:c4:ae:9e:48:ed:d9:12:f4:e5:d3:d5:be:71:c7:f2:a4:
19:06:ff:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:38 2026 by rpki-client