Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft
File: m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft (raw, json)
Hash identifier: ELx9Je2oScbdEgqQwgAd+HdoZFfKPU2L/X8hi66LGLM=
Subject key identifier: 1F:DA:7F:DE:63:49:AF:CE:46:A1:0C:38:66:16:1E:7F:AB:A8:07:57
Authority key identifier: 9B:B6:72:A7:41:46:43:FD:E4:2F:D5:D7:D9:64:42:6C:CF:BE:0F:F6
Certificate issuer: /CN=9bb672a7414643fde42fd5d7d964426ccfbe0ff6
Certificate serial: 019F90C804C958D0064BEA1D37862AEFBB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft
Manifest number: 1D
Signing time: Thu 23 Jul 2026 21:00:55 +0000
Manifest this update: Thu 23 Jul 2026 21:00:55 +0000
Manifest next update: Fri 24 Jul 2026 21:00:55 +0000
Files and hashes: 1: 1-iqRWTEyF4ajtF5LcGXfc70ss5M.roa (hash: Dz6lLNPsk+ndbehBfxapa+ksrphrNfbcDIDf943cyGI=)
2: m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.crl (hash: f2xktLMgaKp1hukbP2reEy1DevPRCh90aQD0hxVggng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:04:c9:58:d0:06:4b:ea:1d:37:86:2a:ef:bb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb672a7414643fde42fd5d7d964426ccfbe0ff6
Validity
Not Before: Jul 23 21:00:55 2026 GMT
Not After : Jul 24 21:00:55 2026 GMT
Subject: CN=1fda7fde6349afce46a10c3866161e7faba80757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:be:99:0b:6f:e8:af:14:81:cd:49:d3:8d:be:
2c:63:8e:e1:bd:76:b2:2b:30:6c:6c:82:37:c9:9c:
0e:f1:37:c5:f2:9d:a0:19:3c:5e:db:05:0c:b0:86:
4a:14:23:fa:df:a2:3a:b1:f5:34:34:55:64:ef:8c:
94:23:5d:20:6c:21:57:61:cf:31:c1:b8:96:13:1e:
6a:71:44:2f:9a:17:64:4f:25:5c:a2:2b:cc:f2:e5:
8f:21:dc:92:8c:36:7e:77:30:bd:77:4c:7a:23:c1:
5a:13:75:ec:ec:41:6e:ee:77:92:cd:f5:d0:c5:78:
a2:59:a4:e1:71:b0:4d:11:a2:ab:9e:02:b0:30:88:
7f:9b:3b:d0:c5:45:4c:b5:1d:4f:e0:2a:75:e4:09:
6a:61:d0:c8:78:79:ad:41:63:f4:36:fc:8f:84:6c:
06:82:84:45:95:f4:49:e3:01:56:1f:8a:5d:93:48:
7b:01:c9:19:8a:34:72:c9:5b:e3:c9:7e:c2:1a:3d:
96:7b:ab:63:70:82:97:7c:e0:a9:e1:95:ca:ba:ec:
4e:ac:46:b1:b9:8e:f2:09:67:e3:44:78:56:8e:17:
e2:57:c2:6f:1e:8b:80:c7:2f:dd:50:96:1a:df:af:
b9:a6:1a:d1:ef:26:3b:9a:53:ec:d9:15:0e:46:65:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DA:7F:DE:63:49:AF:CE:46:A1:0C:38:66:16:1E:7F:AB:A8:07:57
X509v3 Authority Key Identifier:
keyid:9B:B6:72:A7:41:46:43:FD:E4:2F:D5:D7:D9:64:42:6C:CF:BE:0F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2c:25:38:42:39:8c:91:a9:8a:34:bc:60:85:e1:f7:53:66:
c5:ed:6a:7b:31:62:ee:17:48:cd:e1:e3:56:eb:a6:8a:49:2e:
ec:fb:70:e3:72:ab:d6:fd:73:bc:17:88:d3:e0:0b:3d:ba:d5:
30:94:62:8c:d1:17:16:97:9d:5d:f5:13:35:28:d9:bd:6a:ed:
bb:ca:c6:4e:37:2d:09:49:3b:02:a1:69:4f:59:84:e1:2b:77:
c3:4d:0f:6d:0f:ad:d4:bf:b8:8c:16:ce:07:fb:7d:90:a7:0a:
83:5e:39:8e:26:da:65:aa:b9:9f:29:2b:7c:b7:58:5c:f6:53:
4e:d7:d4:78:56:f6:9c:33:87:a2:79:c3:9e:50:ab:61:c9:68:
37:95:8c:9b:fa:cf:01:79:a3:7d:27:c2:c7:62:2e:c0:eb:0c:
41:95:45:ef:11:07:84:d6:f8:d9:04:99:d1:11:a9:e1:0f:ef:
07:37:b3:07:42:d3:75:9e:66:29:a9:fc:d2:80:b4:0a:a2:53:
52:7f:2a:94:4a:4e:8e:1f:ef:49:f2:0a:39:9c:02:a9:bb:a2:
de:f1:be:a2:11:e0:89:a8:98:7b:e9:b7:df:4f:30:95:4d:06:
b4:cd:42:12:01:a9:63:56:e7:8d:82:bc:4b:24:e1:06:7b:11:
16:51:9c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:21 2026 by rpki-client