Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: XEW3gaiI4ENauBGOshdP3dWjVYvawtTZztZ/0lcjRgQ=
Subject key identifier: CC:95:35:FE:C6:94:DE:2C:E3:5B:F4:76:61:C2:98:A8:30:A2:52:42
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 019F92B61A88E90C906604DA9B36CFB1E4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 17B0
Signing time: Fri 24 Jul 2026 06:00:35 +0000
Manifest this update: Fri 24 Jul 2026 06:00:35 +0000
Manifest next update: Sat 25 Jul 2026 06:00:35 +0000
Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: 6LcVdX9BlYJLfbOwwG0SMiuN1UJBt8/BScP3QHrbYKA=)
4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:1a:88:e9:0c:90:66:04:da:9b:36:cf:b1:e4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Jul 24 06:00:35 2026 GMT
Not After : Jul 25 06:00:35 2026 GMT
Subject: CN=cc9535fec694de2ce35bf47661c298a830a25242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:e4:da:2b:c4:ea:ed:3d:37:40:b2:99:df:
ae:af:20:f9:d4:ff:d1:d8:ca:3a:74:63:9c:00:af:
02:b5:ab:1c:0f:35:6b:ae:e7:ad:84:21:9f:df:cc:
b8:b6:a0:a7:c6:82:92:79:88:ee:20:0e:a9:93:66:
bd:c1:60:c7:1d:54:fa:78:8e:3f:b0:7e:b6:69:9c:
4f:89:4b:2b:37:fb:15:44:04:bf:05:aa:b8:cf:f3:
c0:76:5e:0c:30:27:1b:5e:7f:8c:7a:5c:3c:6f:b8:
ea:9e:dd:5c:f5:f7:25:49:2d:08:f1:f1:99:29:cb:
54:34:a6:d8:65:fb:59:bd:b4:b1:b3:c2:b1:3d:37:
09:e3:69:87:23:e9:1a:81:67:0b:73:b5:36:35:37:
d1:32:4d:8a:04:07:81:76:cc:9e:f2:5d:55:55:8d:
bb:b2:1a:5f:45:c8:2d:2d:df:db:2c:16:8b:ce:59:
53:a1:b3:b0:f4:95:9b:6f:ac:d1:d3:bd:47:75:80:
9c:51:d3:97:fc:95:24:9e:be:a7:35:57:2d:fd:3d:
bc:66:0a:03:59:84:c0:0a:89:f9:7b:73:b7:9f:62:
37:52:9f:5a:5c:be:ff:c7:c2:08:74:81:6e:c9:f3:
6e:da:b6:3c:a4:e0:a4:26:39:12:34:27:f0:f7:5c:
66:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:95:35:FE:C6:94:DE:2C:E3:5B:F4:76:61:C2:98:A8:30:A2:52:42
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9b:af:87:b6:cc:14:64:2c:ea:4f:cd:25:fe:53:d5:a0:b9:
74:9d:e8:b6:c3:3b:16:8d:bb:53:ce:fa:50:b3:d4:ee:83:4f:
74:47:a4:f1:d2:64:68:07:88:df:d6:db:68:1c:80:e2:af:cf:
cd:e5:43:5a:51:95:fb:6d:ba:a0:58:c5:fd:41:d7:f2:3f:6b:
c2:26:8a:33:27:a4:94:5b:5d:c8:60:2b:bf:31:cb:1e:d8:55:
72:aa:58:d9:85:1a:0e:e3:ff:0f:7a:dc:23:b3:e1:f8:21:36:
b1:37:40:ec:61:19:90:2c:40:3f:6b:3f:ae:7e:f0:ab:74:15:
42:0f:40:49:03:7a:db:da:d4:a9:08:2e:24:67:09:79:a2:28:
38:99:60:be:a2:cb:62:98:3d:84:25:ec:cc:92:1c:83:f6:d9:
fa:11:3e:1f:be:50:c8:e0:ab:ef:cf:f5:14:84:54:a2:56:5b:
af:af:bf:95:2d:38:56:cb:2c:25:65:40:4a:2d:dc:d2:72:93:
3a:31:0e:6a:f7:23:9a:2e:07:e5:da:0e:b2:42:cd:27:cd:8c:
8e:5b:32:2a:62:bf:f1:23:3c:1e:a4:9f:22:30:3f:e1:29:8f:
1c:5f:b7:68:3b:6a:33:bc:4f:8d:58:0a:96:fd:3d:17:fc:f7:
af:f4:49:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:13 2026 by rpki-client