Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: fqQCkdZDjmlCzOeS15pH/fgzZAt0rJC09W/zQE+E6ho=
Subject key identifier: 04:04:4C:B3:95:29:C3:9C:3A:20:34:9F:E1:11:E4:93:DD:B5:5C:F0
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 019F91DA8A033A5F6A34E9427500711BE2F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 02:00:46 +0000
Manifest this update: Fri 24 Jul 2026 02:00:46 +0000
Manifest next update: Sat 25 Jul 2026 02:00:46 +0000
Files and hashes: 1: 1--FRY1CjawLnslfsBcAkrouqU6s.asa (hash: NFM53UpFWBl2wcWeqeLFtEIb13ge6QGgn48A2dxQblk=)
2: aftA-bCSN_cfnaumewln08mRqyk.roa (hash: ewCgfj5ZHQWWUV5zhZ6e7KdXcICBairndqt6imFYbD4=)
3: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: 06u9dkXk+lm3dkvZywdjn2wo/egYB+mChDQRQKikoKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:8a:03:3a:5f:6a:34:e9:42:75:00:71:1b:e2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Jul 24 02:00:46 2026 GMT
Not After : Jul 25 02:00:46 2026 GMT
Subject: CN=04044cb39529c39c3a20349fe111e493ddb55cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:c6:0b:11:b8:96:10:db:97:9e:00:b5:c2:
1e:75:01:47:e2:2d:64:93:e8:61:77:3a:28:82:e0:
d5:51:d3:fe:fb:68:5e:12:bd:ec:f4:eb:b9:8b:34:
87:e8:51:f8:57:66:53:f9:9a:05:48:06:0c:40:ca:
00:26:65:29:8b:40:29:4d:8f:77:1f:3b:ed:b2:27:
a7:49:10:a2:7a:4a:c5:bb:95:41:9f:26:f9:99:1c:
e1:70:7d:b9:96:00:1b:f7:3f:9b:8b:d1:b5:67:c6:
29:61:99:fc:b4:45:68:02:eb:33:bf:b2:88:3c:5c:
34:d5:10:a7:94:25:e5:50:0b:6d:37:10:4f:d9:6c:
d5:53:d4:87:20:0f:79:d1:f6:d9:99:f9:c3:cc:ab:
72:37:8d:d1:5f:5b:13:6a:81:ac:f4:5e:ba:5a:5f:
3e:dd:fd:3b:5d:38:e9:31:ad:08:fa:fc:f1:9d:66:
37:dd:48:51:ea:95:ad:9d:10:b7:61:4a:b1:f6:f8:
d7:e9:b6:0e:72:65:f2:f2:ce:05:c7:b0:e7:43:94:
89:fb:eb:3d:f7:67:f9:2e:16:84:a2:bd:33:e0:6b:
82:c0:0d:2c:d5:8b:d1:02:00:24:9e:ed:71:2e:51:
e4:ae:5f:5c:8f:2d:a9:0b:92:61:0e:c7:55:1f:e9:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:04:4C:B3:95:29:C3:9C:3A:20:34:9F:E1:11:E4:93:DD:B5:5C:F0
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ad:b0:d9:1f:e4:14:b9:e4:11:b7:7b:e8:48:96:fb:b7:4d:
5f:46:2a:db:91:7f:49:4a:19:76:e7:3e:33:2b:43:7b:e5:f3:
bb:28:96:2f:6e:0d:82:a4:ef:58:99:1e:ab:f2:d6:11:ec:1d:
c7:03:25:8c:2f:77:d5:8e:84:92:ff:5c:fc:60:5d:a7:65:96:
9b:5a:bf:8e:70:58:eb:8e:3a:3e:03:75:07:d1:f0:0f:93:82:
8c:63:c1:4f:29:39:5c:e8:ef:b6:05:d6:2b:2c:3e:5a:89:71:
68:91:94:93:fc:79:3e:11:92:71:38:38:7f:bb:57:f9:fe:4f:
e5:53:35:55:b3:3e:4d:65:b7:35:be:d3:9d:e0:86:2a:a5:c0:
9d:20:72:4a:7d:ec:d6:e4:ca:1c:13:1d:7b:3d:0c:17:b0:8a:
b4:33:91:40:be:8e:29:fd:02:83:c6:e9:f5:ad:17:ed:a3:79:
7a:c1:26:5d:52:b8:2c:0b:f8:34:2e:8e:8c:47:8c:38:aa:27:
93:ac:9a:68:61:b1:67:9b:f3:eb:74:4c:0d:14:00:87:25:39:
d4:74:db:2c:81:4a:b9:5c:21:03:d8:28:24:b0:76:6f:81:00:
6f:a2:71:25:33:d5:7f:01:25:09:7d:94:ad:9a:a5:ab:3d:42:
6a:63:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:15 2026 by rpki-client