Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
File: 7SGj8xKknz6djGxEyd4TOp7Yd-o.mft (raw, json)
Hash identifier: tQdGiF2vAf3ARoQIrWzDX9+O3Gl1hNkyDMln8MKEG/Q=
Subject key identifier: 52:2C:C0:35:F1:56:8F:E7:1F:09:70:05:74:4A:84:9E:89:89:A8:4F
Authority key identifier: ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA
Certificate issuer: /CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea
Certificate serial: 019F8FEBF3840E0DE8C3FBFADA272E6300C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
Manifest number: 026B
Signing time: Thu 23 Jul 2026 17:00:32 +0000
Manifest this update: Thu 23 Jul 2026 17:00:32 +0000
Manifest next update: Fri 24 Jul 2026 17:00:32 +0000
Files and hashes: 1: 7SGj8xKknz6djGxEyd4TOp7Yd-o.crl (hash: 6EFJULDbM228cHhKzI4U57DahANu5fT6A2zWNCmjsq0=)
2: QBDeh8-FvDO0AkQLiktV9k-NtVM.roa (hash: tI3DlxFpE7QxnE4bKmU+VTwjoA3hd05ITjU2EuSCJxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:f3:84:0e:0d:e8:c3:fb:fa:da:27:2e:63:00:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea
Validity
Not Before: Jul 23 17:00:32 2026 GMT
Not After : Jul 24 17:00:32 2026 GMT
Subject: CN=522cc035f1568fe71f097005744a849e8989a84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:0b:85:21:ca:28:0a:4d:a7:05:65:d8:dd:
ad:3f:a0:d9:e5:1f:3b:78:2d:98:56:51:5e:04:fb:
a1:59:42:00:e6:90:d0:a2:67:01:3f:71:d2:2f:b6:
b5:5d:2b:a0:56:ff:c1:5d:f8:cf:49:d7:63:1b:80:
6e:3c:f3:75:d9:de:f4:25:74:43:07:ab:5b:d1:ab:
b7:16:5f:2b:b5:e0:a4:26:7a:e5:2f:a1:8b:92:ae:
f9:cc:25:39:a0:28:ee:64:e7:ab:22:88:4f:41:41:
12:2f:00:39:02:b5:f2:58:9c:97:64:c7:d4:5e:dd:
92:3f:36:60:be:4a:df:87:29:f9:ba:78:37:d0:f1:
c3:58:ac:c1:d3:92:fc:38:f7:ef:27:6d:29:49:ec:
6b:16:57:0c:0e:2d:b3:a2:6c:ea:f3:bc:a8:49:4a:
3b:4d:85:d5:68:07:f5:06:f3:5f:9c:d2:d5:7a:9f:
a1:86:6c:2b:cc:49:11:36:78:86:29:78:df:3a:4f:
92:ab:a9:8a:04:da:c0:a4:f4:56:59:64:5a:59:23:
76:54:e9:3f:44:b3:fc:64:99:55:f9:e4:a9:e6:45:
67:e4:ca:6d:e0:9b:91:ab:e8:a6:f0:c2:13:25:cc:
3f:8f:a0:09:b5:58:d7:0c:51:83:71:fc:59:66:9d:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2C:C0:35:F1:56:8F:E7:1F:09:70:05:74:4A:84:9E:89:89:A8:4F
X509v3 Authority Key Identifier:
keyid:ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f6:81:a5:3b:57:ba:ad:6d:78:67:0c:d7:2d:2f:6b:66:90:
f8:29:d9:6f:8f:b9:bc:75:f3:a0:75:97:2d:24:58:d2:09:d7:
05:12:e2:49:0b:69:f8:0c:84:32:2b:78:bb:f8:1e:58:43:55:
5b:2d:25:2f:a8:3d:dc:de:d4:c0:48:69:77:bf:2f:91:d4:bd:
4b:f9:17:7c:5e:a2:e6:dc:3a:5c:14:1e:ff:b1:af:73:9c:7a:
c1:f9:68:90:d8:45:c7:fd:08:0e:99:9f:21:0a:6b:46:ee:69:
0d:06:01:08:ad:ed:d6:bb:47:fb:71:4d:2d:61:9a:4c:1c:d7:
11:73:0d:1b:2a:bb:17:60:43:71:74:cf:d2:95:9c:bf:71:ed:
cb:56:87:c3:97:16:79:5c:61:3b:fe:27:a0:3d:c7:fe:44:9f:
3d:c4:41:4d:25:f6:62:4f:1f:b8:d1:c6:59:58:e4:b8:49:23:
37:a8:32:39:a0:78:77:de:bf:24:c4:6a:ff:8f:9e:1e:91:53:
6f:14:16:fb:8b:97:9f:8b:ba:78:3b:dd:ca:48:7d:2c:4f:3b:
79:2c:ce:4c:4b:ce:d6:21:aa:c8:aa:3d:bd:71:58:e5:07:23:
c6:cf:d0:55:04:23:8b:79:73:11:5d:de:a3:92:0f:45:66:d6:
8c:f4:40:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:32 2026 by rpki-client