Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier: Jh2oNBiz9JlFXfyP62WQsHOQ+XoxYdokerm2gMFXAsE=
Subject key identifier: FD:54:DB:72:4E:8B:A2:10:68:74:74:0D:4F:91:0C:3C:9B:57:3D:12
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial: 019F909171ABB660BF0AB9EFDAB7B3B452F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number: 0859
Signing time: Thu 23 Jul 2026 20:01:18 +0000
Manifest this update: Thu 23 Jul 2026 20:01:18 +0000
Manifest next update: Fri 24 Jul 2026 20:01:18 +0000
Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: UIw6GH5UbRdbEnVN5ae0SEaFCSHz/vMFgylm9uqgx/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:71:ab:b6:60:bf:0a:b9:ef:da:b7:b3:b4:52:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Validity
Not Before: Jul 23 20:01:18 2026 GMT
Not After : Jul 24 20:01:18 2026 GMT
Subject: CN=fd54db724e8ba2106874740d4f910c3c9b573d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3c:77:b3:15:27:f0:90:8d:98:38:5e:06:70:
64:bc:0d:e0:64:d6:e8:99:0b:64:35:2d:32:92:fe:
1d:34:86:cb:d6:36:91:ce:84:36:ab:6d:e7:a9:b8:
57:d0:23:dd:d2:77:72:e0:1b:72:0d:ac:93:5d:4d:
fc:00:a0:c4:07:37:01:09:84:67:53:eb:7b:e1:03:
fd:1d:df:08:7e:28:e5:cf:46:b1:0e:a9:2f:64:2f:
d6:0b:20:c1:0a:29:1a:14:57:5b:38:74:6d:b0:e2:
a2:4d:08:ba:8f:5a:89:6c:1a:e4:cb:06:18:c3:29:
e7:0b:9e:93:bb:5b:58:2a:ff:e6:ff:18:b1:73:46:
80:99:94:ed:c2:f4:03:4d:16:de:6d:44:ec:bd:f8:
ea:24:53:f5:97:ca:c8:bd:b1:77:85:c4:3e:bb:2e:
88:72:de:67:9e:69:c4:6b:a4:01:20:89:ef:82:94:
e4:9d:ff:66:17:e2:e5:f7:56:88:92:b9:11:3d:e1:
b7:0f:68:6e:49:5f:25:a1:b4:c5:58:99:17:f3:a2:
61:7e:a8:e0:e8:7c:6f:25:99:2d:3a:50:fd:04:cb:
dd:d5:18:58:48:64:7d:3d:d6:a3:5d:10:1d:b5:ee:
10:b9:da:7a:df:b8:49:76:80:3a:ab:f6:44:91:e9:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:54:DB:72:4E:8B:A2:10:68:74:74:0D:4F:91:0C:3C:9B:57:3D:12
X509v3 Authority Key Identifier:
keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d5:14:c6:18:b1:df:46:01:23:bc:7c:2e:a0:87:78:94:6b:
72:51:28:0c:70:8f:6e:7f:ee:4f:82:00:cb:46:f4:ea:14:68:
a2:93:30:4b:7e:bb:ee:72:67:1d:d2:b6:66:13:67:82:20:46:
c2:8a:ef:03:ef:1c:18:84:72:02:bb:d5:b4:cf:f1:32:37:96:
19:b3:e9:a3:0e:9f:ff:cb:de:4e:9f:35:9a:b7:2d:95:03:41:
ff:5a:e3:5b:ff:10:7a:26:36:c1:ed:cd:d9:37:ca:14:96:6e:
00:a2:1a:0f:ca:32:d1:74:60:bf:74:9d:22:07:c1:3a:7b:ef:
d6:85:27:6c:74:de:bc:82:3c:ba:f2:fe:f6:1e:0d:d1:69:8e:
7f:47:38:4d:ea:33:2d:1d:1b:ad:15:a4:23:e4:8c:4f:dc:26:
d6:ae:53:f6:c4:a8:6e:a3:c8:1d:72:6c:85:9a:9a:c5:80:2b:
5e:11:45:a3:43:c1:86:11:df:89:66:9a:23:23:ae:f6:32:f1:
13:f5:1e:d2:7e:6e:9a:cb:71:04:0d:06:b9:84:eb:50:ee:c1:
f7:8c:00:24:04:bb:cb:f7:b5:02:9f:d6:7d:0d:08:a8:e8:16:
d6:b5:7b:cd:fb:56:72:dc:8d:d3:d9:73:dc:0c:47:13:66:0b:
d3:98:d0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:19 2026 by rpki-client