Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: /ewW7LS9aWLx8qVqw+3ttJUG2YVRGxRS+zoV1vdun/k=
Subject key identifier: 8C:15:1A:3D:9E:9C:32:EC:7D:7B:8A:5C:AF:7B:33:F7:3B:09:02:6C
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 019F90C7B10989746E12A58CE2760F3FE24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 17AF
Signing time: Thu 23 Jul 2026 21:00:33 +0000
Manifest this update: Thu 23 Jul 2026 21:00:33 +0000
Manifest next update: Fri 24 Jul 2026 21:00:33 +0000
Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: v+bWJi2frbqOKr1yJFxzHqDlfJbwNp5GBeqAScd2lpQ=)
4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b1:09:89:74:6e:12:a5:8c:e2:76:0f:3f:e2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Jul 23 21:00:33 2026 GMT
Not After : Jul 24 21:00:33 2026 GMT
Subject: CN=8c151a3d9e9c32ec7d7b8a5caf7b33f73b09026c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:51:0e:57:e2:f1:93:f9:94:ba:7e:36:33:
d9:13:37:7a:e4:55:36:2f:9f:5b:7e:a7:85:43:0b:
8d:92:69:77:f6:8c:9d:ca:48:e7:72:0e:83:20:ee:
67:d8:61:9f:73:02:7d:13:73:c6:2d:12:d9:17:20:
8d:63:a0:35:46:f0:c0:ef:f9:5c:49:e6:7b:c1:99:
f6:d2:4b:47:02:00:c6:07:e1:b1:60:e4:c1:27:81:
5c:19:de:1c:98:58:09:04:f6:52:c8:0b:a5:60:1e:
d0:68:a0:ba:95:be:66:d7:59:02:1a:f3:33:a2:03:
18:77:e4:06:dc:6f:2b:c6:90:b6:e2:4d:08:c1:1f:
5e:d1:d6:68:73:6f:f1:ef:3f:d6:f4:87:a1:31:21:
88:61:05:4f:8a:38:4d:46:a4:41:f7:35:52:a4:83:
1a:20:22:db:77:ef:ef:bf:62:8b:42:44:cd:15:65:
48:8f:3f:50:2b:04:99:9b:03:d8:46:01:76:ed:62:
cb:71:0d:20:ff:47:70:0c:3d:fa:46:6c:17:ea:08:
8c:a9:cb:2b:8b:49:e9:91:74:b4:71:f8:d0:22:d5:
79:89:3c:58:66:12:5e:6e:8b:b5:4b:07:6a:27:5b:
0a:d6:d0:98:c6:30:8e:cf:1c:3e:2e:1e:f8:f6:6f:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:15:1A:3D:9E:9C:32:EC:7D:7B:8A:5C:AF:7B:33:F7:3B:09:02:6C
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:21:e9:47:a5:63:fe:3e:f3:a7:f7:45:33:6a:d6:29:da:8d:
a4:26:0a:23:98:48:1f:81:7d:0a:52:04:e2:36:0c:32:1d:e8:
18:ce:ab:cb:66:46:df:19:c6:bf:e7:24:c0:dc:da:7e:ce:8b:
4c:16:3e:e1:28:ac:35:56:67:80:45:bb:20:3d:b5:87:a8:0f:
47:93:64:14:ee:a0:ae:5f:97:2a:c1:ec:91:11:30:6f:f3:ce:
31:c2:63:89:f3:77:92:6f:15:b0:b0:28:4f:6b:4a:a0:5e:98:
44:60:14:4d:fb:98:e9:4d:8f:b5:34:aa:eb:ad:12:51:e9:b3:
f4:5d:18:b8:1e:80:0e:44:a7:e4:25:c3:72:35:77:71:06:b1:
86:32:7f:f4:87:db:14:cb:dc:70:1e:47:63:ff:10:17:c3:91:
2c:72:41:fc:13:d9:1e:31:db:be:6f:43:8e:93:01:82:7d:66:
4e:5d:44:71:fa:b0:0d:99:d2:51:93:96:21:88:c6:e5:5a:55:
e4:8a:82:4e:55:05:ff:57:6b:88:68:44:d2:e0:24:62:79:f2:
7a:c0:a3:ec:fa:cc:df:64:cb:36:8b:a6:79:1f:8e:e2:ee:7c:
a0:80:ff:a4:fa:89:ef:07:96:d5:60:e6:71:d1:fc:6e:58:be:
49:b9:b0:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx7EJiXRuEqWM4nYPP+JPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWNjZTkwMWU1ZmI3YzkyZjA5YTkxNWNmNmU2NTZmNjkz
YmExMDAwHhcNMjYwNzIzMjEwMDMzWhcNMjYwNzI0MjEwMDMzWjAzMTEwLwYDVQQD
Eyg4YzE1MWEzZDllOWMzMmVjN2Q3YjhhNWNhZjdiMzNmNzNiMDkwMjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLNRDlfi8ZP5lLp+NjPZEzd65FU2
L59bfqeFQwuNkml39oydykjncg6DIO5n2GGfcwJ9E3PGLRLZFyCNY6A1RvDA7/lc
SeZ7wZn20ktHAgDGB+GxYOTBJ4FcGd4cmFgJBPZSyAulYB7QaKC6lb5m11kCGvMz
ogMYd+QG3G8rxpC24k0IwR9e0dZoc2/x7z/W9IehMSGIYQVPijhNRqRB9zVSpIMa
ICLbd+/vv2KLQkTNFWVIjz9QKwSZmwPYRgF27WLLcQ0g/0dwDD36RmwX6giMqcsr
i0npkXS0cfjQItV5iTxYZhJebou1SwdqJ1sK1tCYxjCOzxw+Lh749m+suQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwVGj2enDLsfXuKXK97M/c7CQJsMB8GA1UdIwQY
MBaAFO4czpAeX7fJLwmpFc9uZW9pO6EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEt
MTRhMTkwOWIxMjM3LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEtMTRhMTkwOWIxMjM3
LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSHpR6Vj
/j7zp/dFM2rWKdqNpCYKI5hIH4F9ClIE4jYMMh3oGM6ry2ZG3xnGv+ckwNzafs6L
TBY+4SisNVZngEW7ID21h6gPR5NkFO6grl+XKsHskREwb/POMcJjifN3km8VsLAo
T2tKoF6YRGAUTfuY6U2PtTSq660SUemz9F0YuB6ADkSn5CXDcjV3cQaxhjJ/9Ifb
FMvccB5HY/8QF8ORLHJB/BPZHjHbvm9DjpMBgn1mTl1EcfqwDZnSUZOWIYjG5VpV
5IqCTlUF/1driGhE0uAkYnnyesCj7PrM32TLNoumeR+O4u58oID/pPqJ7weW1WDm
cdH8bli+Sbmw7g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:31 2026 by rpki-client