Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: 99NBneai0ZpnS8/vSvD9YGzJ1iZQfGUDLidT3VeUEN4=
Subject key identifier: 3C:91:2A:A1:7D:E5:05:03:42:53:81:96:FB:81:CB:8E:2D:6B:EF:92
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 019F92484AD76469F2527F1570AE1998E8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 04:00:38 +0000
Manifest this update: Fri 24 Jul 2026 04:00:38 +0000
Manifest next update: Sat 25 Jul 2026 04:00:38 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: 8C/qkgbzXB0tRHfQ3UvwgQT4Qp9i45r8gvuThL0JWOY=)
2: x6n822Rpr9x_ujzRReAoyI3uWJE.roa (hash: xHlOIj9K0jyV1cDKqnDaDCInd6n4ZibqQVDDfE1qwao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:4a:d7:64:69:f2:52:7f:15:70:ae:19:98:e8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Jul 24 04:00:38 2026 GMT
Not After : Jul 25 04:00:38 2026 GMT
Subject: CN=3c912aa17de5050342538196fb81cb8e2d6bef92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:f4:b3:33:9a:59:a4:43:f5:53:ec:5d:59:
dd:9b:4c:b1:39:7b:50:f3:73:60:7e:a2:af:f4:08:
9e:85:29:8f:0a:91:e7:7e:41:f7:ec:86:35:2c:19:
43:30:aa:a6:a8:bd:95:fc:1a:3c:c7:15:cf:03:9c:
6d:85:70:d9:e7:e9:57:52:c0:5e:e5:a7:4c:06:1b:
8f:d4:b7:a4:cd:34:1f:dd:17:0a:36:9b:ff:81:0f:
74:4d:27:2a:b8:9f:00:c1:54:98:a1:33:59:25:46:
37:3c:5f:1c:2d:6d:52:af:12:82:b6:a6:d0:13:05:
98:3c:c3:82:44:55:22:6d:a2:76:fd:9c:2d:7f:df:
2c:5d:27:d9:c1:8d:77:52:4a:97:c3:29:67:25:70:
97:6d:31:3a:93:b1:0d:d6:5b:f2:0f:26:90:a7:e3:
23:e4:a6:6d:47:91:de:02:ec:8f:1b:62:cb:79:18:
db:9e:4c:b7:41:a4:1b:47:1e:34:b7:39:79:42:a4:
5f:28:49:ad:bb:7b:c6:f0:b4:79:6d:34:39:80:f6:
3a:6a:b4:f5:84:f3:cd:6b:fd:c4:a2:8b:b4:31:b8:
ef:a5:9f:7d:d3:46:84:7a:8d:ee:29:b7:dc:45:9c:
a9:cb:02:f2:c6:87:d6:fa:bf:e2:b2:96:bc:76:0c:
94:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:91:2A:A1:7D:E5:05:03:42:53:81:96:FB:81:CB:8E:2D:6B:EF:92
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:39:58:a2:c2:bc:7d:36:ab:ba:29:7c:f3:1a:17:1c:13:cc:
79:78:1f:ed:5b:31:e8:ac:83:42:ca:52:8d:f3:99:92:8e:23:
b7:dc:1e:2a:ae:13:9b:7d:c6:52:c5:1b:cc:3c:e4:39:1b:09:
e9:6e:3e:c1:ff:6b:55:c0:ba:01:50:53:0d:31:aa:78:1e:4e:
d0:e4:0d:ce:68:f5:19:eb:10:90:08:81:6f:05:e1:10:3d:6c:
7c:0a:7b:88:6f:af:67:13:ab:3f:15:00:b3:82:85:43:4b:d2:
a4:bd:52:9d:62:cd:97:d7:0e:50:08:85:f5:9d:ee:98:05:77:
b6:60:76:73:ec:94:75:32:78:42:91:3b:3e:50:0c:82:56:08:
31:ce:4f:05:ab:9d:78:f1:21:84:28:0b:71:36:1b:be:16:71:
c6:3d:a0:37:5d:a6:c3:1b:be:4f:01:6c:49:33:80:99:3c:9f:
93:a1:43:d3:45:54:36:ce:f7:76:1c:3e:c3:fb:2c:a6:34:33:
c6:94:7a:84:21:11:fe:d1:d1:85:8d:aa:d5:52:58:85:26:29:
d3:5a:bc:94:4a:15:bf:a9:68:ae:a7:db:51:27:e2:67:89:e0:
21:84:ef:c8:4e:36:36:1c:93:f6:29:7b:e2:20:5e:8c:47:55:
03:28:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:09:02 2026 by rpki-client