Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier: aZA7iXrHbVM2FdL7tMhtxPO9A9iq1DY1/JsnTu2y42M=
Subject key identifier: 4E:D9:8B:A8:2A:24:FE:26:5F:70:D7:AA:89:6E:4C:40:8D:D6:A5:D5
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer: /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial: 019F93C940EF36F612A4C936707FB9FCBA87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number: 10A7
Signing time: Fri 24 Jul 2026 11:01:07 +0000
Manifest this update: Fri 24 Jul 2026 11:01:07 +0000
Manifest next update: Sat 25 Jul 2026 11:01:07 +0000
Files and hashes: 1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: y7q59l9Bc0stehBhM2AyTO0rxt4rhb2ETcHWMfDT1sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:40:ef:36:f6:12:a4:c9:36:70:7f:b9:fc:ba:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Validity
Not Before: Jul 24 11:01:07 2026 GMT
Not After : Jul 25 11:01:07 2026 GMT
Subject: CN=4ed98ba82a24fe265f70d7aa896e4c408dd6a5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:df:3c:c8:45:7a:0e:e1:ea:61:e9:74:10:cd:
e6:63:e2:2b:9d:cb:4a:a1:bd:7e:45:87:fc:7c:4e:
78:e7:dd:eb:8a:31:01:83:ef:f6:50:83:b6:18:85:
5c:a3:df:81:e6:48:2e:55:a0:57:c6:7a:6f:07:0b:
26:77:e3:a3:d9:39:7c:22:f8:36:6c:c6:ca:e8:b4:
28:4d:af:6f:9c:a1:92:bf:de:8b:12:74:be:43:00:
f2:6d:bd:f0:bf:51:bc:27:4f:6e:a8:83:d0:09:89:
2b:8c:50:ee:92:cf:ae:fb:c3:8e:11:2e:2d:42:e9:
52:29:46:70:a7:a8:ed:9c:a9:53:46:59:ac:fa:e1:
4e:da:96:87:ab:dd:bc:06:3f:63:80:09:4d:e6:29:
96:c9:2c:d7:6e:02:92:d4:97:86:a5:92:50:be:9f:
07:6f:6e:bc:c0:a2:9e:60:93:b7:9a:08:93:83:f6:
60:0e:c1:08:de:cf:8d:61:d2:94:c7:8f:dc:37:6e:
ae:67:6e:dd:bd:ac:f9:1a:00:f0:a3:92:48:fc:06:
2f:14:36:45:21:64:35:86:1c:51:08:63:e8:79:0f:
e3:03:bb:5a:79:4c:c5:89:6e:e5:b4:71:69:46:ac:
9a:06:3b:bb:ed:ca:0a:3f:e6:e5:d2:78:2d:a3:bb:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D9:8B:A8:2A:24:FE:26:5F:70:D7:AA:89:6E:4C:40:8D:D6:A5:D5
X509v3 Authority Key Identifier:
keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:57:cb:94:68:2b:34:8e:b4:8d:ce:aa:d4:ac:33:32:7e:49:
bc:8b:5c:01:10:f5:9c:ea:bf:72:ef:13:04:97:6f:24:7c:d4:
17:f3:0b:91:b0:23:a4:c2:d1:cd:e9:c7:f3:e4:b2:3c:4e:a4:
91:e2:d2:2c:02:d7:9d:32:3c:7a:cd:c2:67:54:7a:c0:d1:41:
31:1c:de:58:20:b9:42:c6:d3:51:b4:02:9c:96:36:ef:ba:ae:
98:f8:96:2d:c0:27:b1:7d:2d:72:17:a8:46:04:59:e2:39:dc:
11:3a:11:b5:21:29:1c:7d:a3:c9:3e:b4:51:ef:f1:01:2d:9f:
2f:6a:b2:66:90:d8:ff:bf:1d:23:b4:6a:53:04:02:e9:b2:06:
1b:34:de:40:01:e5:cc:ae:36:21:56:37:6d:dd:54:b8:d9:d3:
0d:47:76:69:69:9b:c2:83:c6:61:2d:dd:50:82:33:1c:b5:b5:
90:60:04:0f:d9:c9:b8:9c:4d:f8:71:79:e9:7a:a1:52:d4:11:
84:2d:5f:27:6d:7c:62:b8:cc:1f:37:78:c9:25:d5:27:fc:9e:
7f:06:96:10:c9:c8:c1:29:13:4f:59:a8:4f:cc:5a:55:ed:a9:
41:cc:f2:89:92:eb:ac:03:8a:2d:f9:e1:6a:f4:38:be:86:a9:
df:27:23:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyUDvNvYSpMk2cH+5/LqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDNkZjgyOWFmZDZhMWYyNTkwZTQyNDQ1MjJlMWIzNmMw
ODZhOTQwHhcNMjYwNzI0MTEwMTA3WhcNMjYwNzI1MTEwMTA3WjAzMTEwLwYDVQQD
Eyg0ZWQ5OGJhODJhMjRmZTI2NWY3MGQ3YWE4OTZlNGM0MDhkZDZhNWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2N88yEV6DuHqYel0EM3mY+IrnctK
ob1+RYf8fE54593rijEBg+/2UIO2GIVco9+B5kguVaBXxnpvBwsmd+Oj2Tl8Ivg2
bMbK6LQoTa9vnKGSv96LEnS+QwDybb3wv1G8J09uqIPQCYkrjFDuks+u+8OOES4t
QulSKUZwp6jtnKlTRlms+uFO2paHq928Bj9jgAlN5imWySzXbgKS1JeGpZJQvp8H
b268wKKeYJO3mgiTg/ZgDsEI3s+NYdKUx4/cN26uZ27dvaz5GgDwo5JI/AYvFDZF
IWQ1hhxRCGPoeQ/jA7taeUzFiW7ltHFpRqyaBju77coKP+bl0ngto7sfSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7Zi6gqJP4mX3DXqoluTECN1qXVMB8GA1UdIwQY
MBaAFO4D34Ka/WofJZDkJEUi4bNsCGqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dQZmdwcjlhaDhsa09Ra1JTTGhzMndJYXBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hYWFjZjctYmZkYS00MDNlLWJmNjIt
YTFhNDZhODBjMWRhLzEvN2dQZmdwcjlhaDhsa09Ra1JTTGhzMndJYXBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hYWFjZjctYmZkYS00MDNlLWJmNjItYTFhNDZhODBjMWRh
LzEvN2dQZmdwcjlhaDhsa09Ra1JTTGhzMndJYXBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1fLlGgr
NI60jc6q1KwzMn5JvItcARD1nOq/cu8TBJdvJHzUF/MLkbAjpMLRzenH8+SyPE6k
keLSLALXnTI8es3CZ1R6wNFBMRzeWCC5QsbTUbQCnJY277qumPiWLcAnsX0tcheo
RgRZ4jncEToRtSEpHH2jyT60Ue/xAS2fL2qyZpDY/78dI7RqUwQC6bIGGzTeQAHl
zK42IVY3bd1UuNnTDUd2aWmbwoPGYS3dUIIzHLW1kGAED9nJuJxN+HF56XqhUtQR
hC1fJ218YrjMHzd4ySXVJ/yefwaWEMnIwSkTT1moT8xaVe2pQczyiZLrrAOKLfnh
avQ4voap3ycjWA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:25 2026 by rpki-client