Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier: 3FprQ1DNs0iSPc/sRPAJCHmiFR60IX7EeCfBPtGJ7II=
Subject key identifier: B7:CF:2E:9D:44:30:F1:C0:1A:0A:5E:74:D9:9A:97:04:C1:72:C2:EC
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 019F90C8438FF1E2395B093D91A86B2F5EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number: 13B8
Signing time: Thu 23 Jul 2026 21:01:11 +0000
Manifest this update: Thu 23 Jul 2026 21:01:11 +0000
Manifest next update: Fri 24 Jul 2026 21:01:11 +0000
Files and hashes: 1: 5z8L94SxohW89feZF-x7UUHOUGw.roa (hash: J9U9SwJZOAhHbw/+dwZT4u/bEO014TJ7Spfz6aawrAo=)
2: 60ZuDyr70onvZz7b_VP-SDmx33E.roa (hash: twz5MCkaRcivByRDA9QCyxItgQZO9OCdluDvL7eF7Ro=)
3: BlrqBtWblMfctvze6Z4e1h26Vg0.roa (hash: mrpfN/u4KNrOk9l0nXYVVF7vi+rRmvUj9lVXmfONvc8=)
4: NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa (hash: eNPkOFpshNdBId/GwxgDcZ/1OocRZllruwGL/l+cxaA=)
5: TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa (hash: r53OH2xwFa4qKn9FoyBvVY4gvGfnLfCBjSGuWq2Tb+U=)
6: e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa (hash: fhBttHfpH+r5wDlnd1XHbP4VIUk5mx77G0HB40PrGrc=)
7: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: AcjT+hGSvBTmH6kD4rwMSIyOCoKFSMGsDwsv0QMFOk0=)
8: vLogJj6NuTRQtmEXSY4brF-qnBY.roa (hash: zohFkXr1VCR5q6x1R2Xx5enwasHpy8O1g/gJdKkByho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:43:8f:f1:e2:39:5b:09:3d:91:a8:6b:2f:5e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Jul 23 21:01:11 2026 GMT
Not After : Jul 24 21:01:11 2026 GMT
Subject: CN=b7cf2e9d4430f1c01a0a5e74d99a9704c172c2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:2e:55:20:22:2f:01:22:6d:26:31:b4:8c:
89:e8:8f:15:ee:88:21:d3:2a:41:08:7a:ca:b1:e1:
45:fa:95:eb:0c:5d:b3:c9:12:ad:22:65:f8:40:9e:
98:cd:42:6f:08:47:12:b0:f8:6d:cd:a4:9c:df:29:
5b:59:39:30:80:c8:2d:fb:59:b4:2e:0a:c2:f4:68:
06:f6:91:1e:b8:f4:97:72:48:27:d1:a2:b7:3e:81:
fc:50:bc:8d:e3:00:05:26:84:a9:d6:16:d9:e4:a1:
a9:eb:48:b3:3e:52:60:96:e2:47:be:fe:92:bd:8e:
18:15:04:b4:27:ca:2e:e3:2b:43:7b:06:7c:51:9c:
d2:f6:8b:81:d4:ce:33:92:bb:0b:ce:2f:da:44:38:
4e:0b:a3:30:54:1b:04:cc:68:c2:91:bb:79:77:7d:
a1:d2:53:25:d4:20:2e:68:ae:f2:29:d5:1b:af:d0:
9b:db:45:17:ef:13:22:17:a6:05:7b:13:2a:da:f9:
94:93:55:25:b6:62:05:8d:76:d4:84:92:9c:5a:bd:
97:0a:0f:05:12:50:03:74:b4:2f:93:e2:48:ef:55:
ff:c1:c1:97:b9:14:d3:9f:b2:5b:4f:eb:6c:96:3e:
1c:5f:97:2d:28:bf:cc:19:34:29:2b:b4:60:ee:fd:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CF:2E:9D:44:30:F1:C0:1A:0A:5E:74:D9:9A:97:04:C1:72:C2:EC
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:91:39:b5:65:c1:11:5b:eb:30:34:1f:eb:d6:99:2c:e3:45:
88:9f:a0:d3:2c:d8:bc:8b:39:e7:a2:b4:bc:cd:36:ee:6e:c7:
81:bd:ba:f5:ae:51:71:9e:92:fb:0e:ea:ae:c8:c2:a6:c5:b1:
5e:01:40:03:f9:32:ec:0f:27:71:a0:1e:65:6d:07:8e:93:05:
f7:12:36:33:bd:71:e1:ba:1b:83:9d:e3:64:a8:27:9c:7b:49:
e7:d3:87:27:1e:53:30:18:85:68:fc:59:7d:80:64:f2:1e:c2:
54:0d:70:05:45:61:2e:67:41:54:92:87:34:eb:d8:54:09:66:
58:e3:7d:70:77:92:5f:d4:76:19:41:b9:d5:b2:5d:0f:8c:a5:
b4:e5:3d:59:47:94:15:97:c4:9a:87:f7:d3:d7:e9:77:4d:c8:
42:14:50:37:11:22:e4:38:d7:89:88:95:95:46:08:86:c2:37:
c4:2f:4a:94:12:64:30:45:db:2d:75:4a:3a:b1:a0:d3:c9:7f:
00:1d:77:17:ef:4b:c8:dd:eb:5d:c8:9a:a5:41:71:5f:b8:6a:
5f:47:46:e0:ae:d0:04:3f:5c:20:e4:a8:6a:d3:b4:b3:4c:29:
d7:7a:4f:1b:9d:e2:08:b0:cf:ed:dd:e4:47:b7:8a:a6:e7:a5:
30:27:79:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:46:16 2026 by rpki-client