
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
File: 53OfCEQuIkRmIbiaV2ObNUK6NNw.mft (raw, json)
Hash identifier: XT3LJD97/H6kmXU5YOfCzj4u6qseix7753jhUDuWp8A=
Subject key identifier: 2A:7B:0E:2E:7F:7D:6F:1C:93:4B:75:98:54:8C:F8:48:C8:7A:66:2F
Authority key identifier: E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
Certificate issuer: /CN=e7739f08442e22446621b89a57639b3542ba34dc
Certificate serial: 019F90C849177D0406A44E993CA889B70234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
Manifest number: 07E3
Signing time: Thu 23 Jul 2026 21:01:12 +0000
Manifest this update: Thu 23 Jul 2026 21:01:12 +0000
Manifest next update: Fri 24 Jul 2026 21:01:12 +0000
Files and hashes: 1: 53OfCEQuIkRmIbiaV2ObNUK6NNw.crl (hash: OYglww7Hm/53DCT4/Iq0kbC+g/F8tWjhNNwgtVv3GXE=)
2: nS12X_FMQVUUwkWnLYmgJW732kk.roa (hash: GXbiX9J7KWPFCiPzKs7zINZFOvfmZgRDxvmBON8Kk10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:49:17:7d:04:06:a4:4e:99:3c:a8:89:b7:02:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739f08442e22446621b89a57639b3542ba34dc
Validity
Not Before: Jul 23 21:01:12 2026 GMT
Not After : Jul 24 21:01:12 2026 GMT
Subject: CN=2a7b0e2e7f7d6f1c934b7598548cf848c87a662f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:b6:10:67:b3:c2:0b:d1:24:7d:93:61:b5:
f7:d2:cd:6a:4c:10:a2:4d:81:49:5b:a9:99:36:66:
8c:eb:54:d8:b2:38:3e:89:f3:29:92:be:3a:4d:4d:
8e:2e:2f:98:76:27:e7:09:3e:70:27:6f:fe:dc:f7:
92:42:ac:6f:16:10:a1:fc:c3:8c:03:43:d5:90:6c:
f9:e3:57:54:00:3b:50:07:f4:b6:83:f0:4c:c1:83:
3d:73:49:fa:0f:3b:29:e2:63:35:70:04:c5:50:ef:
19:02:05:97:47:b8:72:66:ef:77:2e:91:0e:c2:79:
46:0b:58:37:a5:ef:5f:a1:db:fa:80:d9:76:dd:ad:
4c:8e:e1:3d:e7:4b:17:fe:2e:5d:a1:ec:9c:69:42:
77:77:e4:81:59:52:60:54:f3:3f:fd:54:ec:77:f6:
55:b8:ea:9d:2b:02:a3:22:92:36:35:20:ae:93:97:
da:41:ac:97:a8:79:46:e2:50:9a:b7:9c:f6:b1:f9:
de:04:7a:a8:44:2f:9a:64:f3:66:5f:e9:b8:e1:9e:
e4:05:34:6f:59:04:55:47:80:82:2e:ca:35:08:73:
35:04:f6:d1:53:c8:9d:8b:2b:71:5b:a7:79:bc:3c:
83:c3:a7:8d:b3:59:5e:2b:77:0e:4d:67:f2:6d:58:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7B:0E:2E:7F:7D:6F:1C:93:4B:75:98:54:8C:F8:48:C8:7A:66:2F
X509v3 Authority Key Identifier:
keyid:E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dc:db:ed:3a:d1:dc:62:9f:a8:1e:fe:5f:bf:b8:c8:d8:b2:
f3:19:0d:be:92:bf:d6:ea:95:b3:1a:e5:cd:53:73:de:a4:9b:
57:c1:a3:89:89:ea:68:ca:47:43:f1:c5:0a:eb:e0:16:f8:db:
2c:f5:d4:c7:9c:95:35:c4:00:c6:97:d7:b8:66:ec:2a:3d:73:
7d:59:be:ae:14:84:e3:a9:86:4f:ba:d0:12:c7:31:d3:13:89:
82:c5:06:bc:f9:c3:ed:f2:e0:dc:eb:3c:42:94:0e:ce:6c:44:
e7:25:41:73:e9:7f:14:9f:78:57:38:77:94:4c:cc:d0:40:a5:
b5:78:2c:2f:9d:3e:e3:b6:ac:3b:ff:6c:bf:68:e1:c5:cf:08:
86:34:8b:29:4f:a0:34:92:95:9b:ce:68:2b:78:21:a3:c8:7d:
54:01:2c:4d:6b:b9:af:40:07:85:12:40:ff:55:89:57:99:ab:
79:03:81:3d:f6:8b:d3:90:2d:42:24:a6:38:e8:9a:c3:ac:78:
6e:10:11:da:63:b9:6c:b2:ee:53:c5:0c:d7:f1:c3:5d:19:70:
09:5b:e7:0d:3d:87:3f:39:a4:40:78:d9:da:03:f0:3e:53:23:
08:65:fa:2d:91:ab:e9:06:dc:e7:af:a4:b0:f5:82:f4:0d:52:
2a:40:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:00:30 2026 by rpki-client