Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
File: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json)
Hash identifier: IkL0zKnhq/9nusleId4mCq+JLnqOVI9UnPJl4/UGGH8=
Subject key identifier: 5D:3C:65:C9:61:ED:BC:EB:B1:D0:3A:32:14:4F:87:FC:32:66:04:E7
Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
Certificate issuer: /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Certificate serial: 019F905AA09571FE2E7E39BA45DE3DBA3099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
Manifest number: 089C
Signing time: Thu 23 Jul 2026 19:01:26 +0000
Manifest this update: Thu 23 Jul 2026 19:01:26 +0000
Manifest next update: Fri 24 Jul 2026 19:01:26 +0000
Files and hashes: 1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: qoaVVTywm8pH5Usb2N7VzFzUBWDHoWnqDc56u/LkJKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:a0:95:71:fe:2e:7e:39:ba:45:de:3d:ba:30:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Validity
Not Before: Jul 23 19:01:26 2026 GMT
Not After : Jul 24 19:01:26 2026 GMT
Subject: CN=5d3c65c961edbcebb1d03a32144f87fc326604e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:55:42:e8:83:ba:f5:95:ed:45:4f:ef:68:
16:95:05:a3:71:d5:24:d6:d6:43:a1:02:6e:98:82:
ff:a0:f3:c0:d3:60:fe:d4:6e:fc:cf:33:b5:a1:64:
3a:d7:a5:07:15:46:fa:c5:9d:e2:bf:bf:0a:b3:e4:
cf:d5:c9:67:4e:1b:29:a9:72:60:e1:f3:cf:49:74:
04:21:e3:6d:2f:18:0e:b8:7a:e3:1a:c7:8e:a1:10:
9a:c4:d5:66:f7:57:c2:50:69:b0:1d:fa:27:1e:d5:
b2:47:ee:30:7d:2f:e1:32:6a:f3:b3:3b:89:21:9b:
58:0a:e2:21:fc:04:9a:8e:60:b4:48:7c:ce:6c:98:
f6:b1:9f:2f:49:a1:14:cd:a2:f4:df:a5:c3:1a:e0:
a9:67:cf:0a:6b:5b:bd:14:02:d6:8f:4a:38:fd:0a:
f8:b1:1f:ed:34:cf:54:da:00:99:ff:8b:96:8f:d9:
9d:8e:2f:3b:ff:5b:90:d3:1b:25:12:c2:fb:0c:f0:
b2:7e:93:af:b8:38:d2:ec:d2:a6:37:6a:fc:b2:d6:
69:c0:85:3c:b2:35:72:9a:bd:48:f1:61:a0:ec:dc:
3e:6a:20:f2:cc:19:c9:d3:bc:2e:d6:26:6b:57:70:
d8:d8:3b:06:97:53:99:16:8d:af:93:8e:6f:da:7d:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3C:65:C9:61:ED:BC:EB:B1:D0:3A:32:14:4F:87:FC:32:66:04:E7
X509v3 Authority Key Identifier:
keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:51:d5:f5:75:6e:b1:db:3e:f1:97:54:96:46:c0:26:93:b5:
99:e7:2d:ef:09:77:00:00:d3:75:fd:13:8c:8d:70:96:82:36:
c4:06:a9:07:0a:d1:7b:1f:4a:d3:20:11:11:4b:65:ed:58:cf:
a2:39:42:0a:89:28:23:e5:04:30:96:f2:29:16:cd:13:e8:b0:
f1:af:3f:b4:67:73:6a:f2:23:c4:45:8f:40:cc:dc:96:bf:e2:
be:e1:d3:a4:8a:82:16:d8:be:8b:20:a3:7a:7e:01:b1:0d:38:
9d:09:f5:52:db:cb:d2:4c:f3:d3:42:1e:11:98:ec:21:3b:0e:
41:44:16:f2:7b:63:69:2b:37:d3:0c:f2:1b:6c:4b:b2:58:2d:
de:e8:87:ab:01:35:dd:0b:da:ba:88:6b:80:cf:69:a2:4d:86:
6e:59:80:f9:09:dd:4a:c9:76:a1:06:f5:dd:44:fd:b6:fb:14:
e7:7f:5b:7b:bb:4d:cc:73:52:cb:83:3b:e3:cf:2e:9b:57:09:
55:1c:36:d2:ed:b0:c8:32:cd:18:ff:21:8a:5b:e4:4d:7d:2f:
97:20:c4:51:6d:13:77:f8:3a:18:5f:75:c0:04:ed:b6:dd:7c:
a3:9b:3f:af:91:29:89:a3:04:f2:ff:74:5d:0f:df:44:16:fd:
df:18:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:24 2026 by rpki-client