Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
File: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft (raw, json)
Hash identifier: WMbYeQKfXVHDFMe/9tGFlKXLduWVft7YVcQAlyM7sc4=
Subject key identifier: DC:9C:93:DB:A5:A8:49:29:06:7B:FF:27:C6:46:40:1B:CD:DD:4F:7A
Authority key identifier: EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
Certificate issuer: /CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Certificate serial: 019F91DA63BB2523B2CF8397A79230461464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
Manifest number: 0DED
Signing time: Fri 24 Jul 2026 02:00:36 +0000
Manifest this update: Fri 24 Jul 2026 02:00:36 +0000
Manifest next update: Sat 25 Jul 2026 02:00:36 +0000
Files and hashes: 1: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl (hash: Y8K5Ea2q2UuGZqR67RB8SmBYdFpa92eFMxqqitFqTQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:63:bb:25:23:b2:cf:83:97:a7:92:30:46:14:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Validity
Not Before: Jul 24 02:00:36 2026 GMT
Not After : Jul 25 02:00:36 2026 GMT
Subject: CN=dc9c93dba5a84929067bff27c646401bcddd4f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:4f:69:4c:c1:55:cc:bf:26:cd:3f:99:4f:
9e:ec:55:6a:3f:7d:9b:b0:94:57:52:41:17:a1:63:
21:83:33:6c:f3:90:29:20:00:10:54:cd:56:53:47:
5b:ac:53:2f:0a:8d:02:42:81:da:e1:91:0b:4c:9e:
8a:74:b8:f6:64:24:fe:e1:69:2a:d9:73:91:ae:f0:
c0:19:80:33:6b:bb:85:74:dc:46:b8:9a:c6:ef:ec:
44:c7:cc:81:57:eb:ce:17:84:21:85:53:e1:50:f4:
8d:b4:25:46:fd:0f:83:53:f8:51:42:dd:d5:32:8b:
77:55:a4:79:88:61:fb:12:9c:2e:86:16:dd:45:76:
0c:9b:8c:94:0b:fa:a8:df:b8:97:b8:43:e9:f7:99:
17:2c:e8:b2:94:1d:3e:78:ab:6f:99:55:10:35:62:
a6:df:9b:73:e4:6c:0e:6f:af:c6:ff:29:06:5e:44:
e4:49:5f:7f:5c:94:7f:3e:8d:03:b7:48:2f:ba:4f:
4a:37:8b:4c:bb:56:e5:5a:fa:5a:23:70:8f:98:76:
1a:b0:70:ba:71:4f:68:8c:94:c5:97:c1:33:e1:4e:
37:ba:2c:5c:8c:13:a9:2d:7c:16:8d:66:ea:4a:de:
5c:9f:fa:2c:4f:be:6b:69:25:41:5e:0f:2f:c9:1a:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9C:93:DB:A5:A8:49:29:06:7B:FF:27:C6:46:40:1B:CD:DD:4F:7A
X509v3 Authority Key Identifier:
keyid:EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a6:f5:e6:54:f3:e1:34:c4:6b:dc:bd:21:db:9a:6d:53:70:
25:d0:5d:a6:b6:b0:5b:20:02:f1:ac:52:78:9b:58:fb:b6:1f:
77:1e:4d:81:a3:c7:6d:3e:ba:bc:f0:62:92:fc:fc:ca:24:d2:
f7:5a:8c:81:fa:59:30:88:b0:c5:3b:4a:13:db:3d:eb:d8:0b:
e2:7b:ea:55:5e:a4:f5:d2:a5:cd:4f:4e:79:9d:25:69:30:46:
45:bc:13:90:37:fb:80:2d:44:e2:45:59:da:a9:08:27:b7:b5:
0a:e2:28:5e:a9:b9:b2:6f:1c:f9:56:d7:6a:a6:43:b7:34:ac:
9e:8e:53:d3:19:3d:7d:98:31:a6:7b:9b:08:39:12:03:a2:cf:
26:58:d1:98:d1:f9:95:8c:4e:ff:3b:77:a1:9a:2f:73:51:50:
0e:45:ae:fd:80:13:d0:f8:8d:cf:0d:43:a1:ce:6a:8c:48:97:
03:0b:1e:2c:3e:91:b1:dd:2b:b6:5b:4f:60:01:63:ed:53:4a:
22:c7:8b:83:59:3c:8d:50:e6:5f:a7:99:5a:38:b8:f9:25:cf:
ad:10:6c:f3:8e:b5:6b:24:3e:2f:3a:c1:1a:cf:fa:40:0c:35:
02:6f:d9:fd:80:fc:7c:64:5b:b7:71:dd:b2:a8:40:5f:8d:7d:
81:ae:80:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2mO7JSOyz4OXp5IwRhRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNjhiNjY0Y2NkNTBjYTc2N2Q0NmZmYjM0ZjUzYTA2ZDEy
MGI1MjMwHhcNMjYwNzI0MDIwMDM2WhcNMjYwNzI1MDIwMDM2WjAzMTEwLwYDVQQD
EyhkYzljOTNkYmE1YTg0OTI5MDY3YmZmMjdjNjQ2NDAxYmNkZGQ0ZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/NPaUzBVcy/Js0/mU+e7FVqP32b
sJRXUkEXoWMhgzNs85ApIAAQVM1WU0dbrFMvCo0CQoHa4ZELTJ6KdLj2ZCT+4Wkq
2XORrvDAGYAza7uFdNxGuJrG7+xEx8yBV+vOF4QhhVPhUPSNtCVG/Q+DU/hRQt3V
Mot3VaR5iGH7EpwuhhbdRXYMm4yUC/qo37iXuEPp95kXLOiylB0+eKtvmVUQNWKm
35tz5GwOb6/G/ykGXkTkSV9/XJR/Po0Dt0gvuk9KN4tMu1blWvpaI3CPmHYasHC6
cU9ojJTFl8Ez4U43uixcjBOpLXwWjWbqSt5cn/osT75raSVBXg8vyRrHWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyck9ulqEkpBnv/J8ZGQBvN3U96MB8GA1UdIwQY
MBaAFO5otmTM1QynZ9Rv+zT1OgbRILUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN21pMlpNelZES2RuMUdfN05QVTZCdEVndFNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iYTc2ZWMtNWQxYS00Mzc1LTg0OWUt
ZGVkN2FjMjUyNTQ0LzEvN21pMlpNelZES2RuMUdfN05QVTZCdEVndFNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9iYTc2ZWMtNWQxYS00Mzc1LTg0OWUtZGVkN2FjMjUyNTQ0
LzEvN21pMlpNelZES2RuMUdfN05QVTZCdEVndFNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKb15lTz
4TTEa9y9IduabVNwJdBdprawWyAC8axSeJtY+7Yfdx5NgaPHbT66vPBikvz8yiTS
91qMgfpZMIiwxTtKE9s969gL4nvqVV6k9dKlzU9OeZ0laTBGRbwTkDf7gC1E4kVZ
2qkIJ7e1CuIoXqm5sm8c+VbXaqZDtzSsno5T0xk9fZgxpnubCDkSA6LPJljRmNH5
lYxO/zt3oZovc1FQDkWu/YAT0PiNzw1Doc5qjEiXAwseLD6Rsd0rtltPYAFj7VNK
IseLg1k8jVDmX6eZWji4+SXPrRBs8461ayQ+LzrBGs/6QAw1Am/Z/YD8fGRbt3Hd
sqhAX419ga6AqQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:27 2026 by rpki-client