Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: HsI/IIATSUzIYLB2DUH6S5hcYp0x0KIyqwwo9WrrpSo=
Subject key identifier: 2E:44:50:2F:E4:A6:FF:19:11:CF:21:53:7D:5D:FD:B3:4B:34:4B:A1
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 019F8FB5B8038491922C689321359072D0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 0C38
Signing time: Thu 23 Jul 2026 16:01:18 +0000
Manifest this update: Thu 23 Jul 2026 16:01:18 +0000
Manifest next update: Fri 24 Jul 2026 16:01:18 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: bqHpvJAYf8hJBqi71d06SvP+WOVfnrq2OIg2w1HiT7w=)
2: aO8SV7r8aRmaMsrCVn54MAITseY.roa (hash: UBYs9t/xpmJLmkQIIYwuZf57SETqiU4zYplqSc9D++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:b8:03:84:91:92:2c:68:93:21:35:90:72:d0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Jul 23 16:01:18 2026 GMT
Not After : Jul 24 16:01:18 2026 GMT
Subject: CN=2e44502fe4a6ff1911cf21537d5dfdb34b344ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:f1:77:d8:35:75:a8:f0:d1:1a:a7:00:a1:
77:23:79:68:26:5c:af:2d:8b:62:10:1f:a1:39:fc:
d9:70:5d:86:96:41:b8:7a:42:b2:b6:1f:5a:e5:67:
3e:93:4a:44:f4:1a:8e:20:e5:2b:ba:80:20:4e:65:
c6:e3:54:6f:73:94:de:d7:b5:cb:c6:bd:c7:c1:d3:
eb:62:21:74:d5:fc:cf:26:97:e4:cb:0d:e7:61:04:
96:d6:da:7c:34:49:45:16:55:09:b4:87:7d:a8:15:
0c:7e:23:d7:ee:ab:27:5c:a3:99:ee:b4:e3:8c:af:
c9:d0:c1:0e:2c:a1:80:36:f2:49:7c:a2:4a:12:c7:
8f:11:47:b8:0a:d7:5a:c7:d0:66:0e:5c:a6:ce:66:
7c:fc:cb:b9:fc:f1:80:3a:77:17:11:88:d1:92:a1:
39:ad:53:24:6a:4d:37:31:29:fa:90:be:27:80:08:
9c:34:cd:9d:90:2a:cd:d0:7a:66:cd:b0:3a:68:15:
ca:80:cd:d1:5a:18:fb:77:b7:40:53:f3:9f:4d:58:
f3:fe:b1:97:51:70:35:13:96:37:43:f3:f0:4e:e7:
a7:ab:bd:08:a1:12:41:65:36:0e:17:0e:35:19:7a:
df:d5:4f:88:2c:a3:b9:05:f8:17:1f:a0:8f:89:3c:
fd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:44:50:2F:E4:A6:FF:19:11:CF:21:53:7D:5D:FD:B3:4B:34:4B:A1
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:26:56:19:91:ee:e6:4b:0c:4a:cf:ea:60:aa:3d:2c:21:7e:
b5:6c:ac:8c:37:f3:dc:f5:87:be:fa:1b:1d:39:28:ea:e6:07:
55:70:be:9d:15:37:69:eb:f5:75:f9:eb:3c:dd:c4:dc:cc:7b:
51:53:6f:f8:65:7d:c8:b2:4b:4f:b6:4b:a1:11:5e:fe:f6:da:
be:86:b3:9e:2d:1a:e3:5b:b8:0b:16:0f:a1:4a:45:a2:3b:3c:
ff:48:8e:cb:bc:f9:a0:df:68:52:2f:0d:f8:47:02:e9:c2:8d:
1f:75:d6:24:be:2c:74:87:04:90:fc:c9:7e:ed:d8:17:00:64:
5e:40:3e:c4:b6:cd:16:14:51:5f:60:0d:a6:97:c3:c1:12:ea:
38:0a:eb:c7:c1:7b:85:12:cb:74:8b:24:f4:c3:12:91:4d:0d:
30:99:e4:df:d6:c9:67:6d:df:9c:0e:7b:4d:8f:c9:44:62:df:
4a:5a:a9:75:88:4e:29:f3:28:3c:4b:39:f7:48:39:a0:6c:33:
ff:48:e1:f2:b1:3e:f0:6a:54:42:1d:54:df:a9:fd:c8:30:1a:
1c:89:70:8d:21:df:1d:3f:b2:3b:b8:a5:88:71:f6:b1:e6:b9:
95:13:3e:1b:60:11:f5:f5:04:85:ec:5a:a9:87:a1:40:cf:66:
e2:b6:7d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:38 2026 by rpki-client