Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier: apBlTuasa/+eIFiblmwNClBNLR9NfRrOevWIroc5QkI=
Subject key identifier: 82:14:87:09:2B:49:3F:E2:02:13:36:29:DE:4B:4A:84:81:0E:B6:A5
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 019F916D2A284563C931324C7F8C1EEC6B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number: 19D1
Signing time: Fri 24 Jul 2026 00:01:18 +0000
Manifest this update: Fri 24 Jul 2026 00:01:18 +0000
Manifest next update: Sat 25 Jul 2026 00:01:18 +0000
Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: rmilV+TSI5+LD633sNFKObOcuX8OKQ60DqYabcBWefs=)
2: XHVi61WiazNgcFLfPPLSGooyVY0.roa (hash: DsQUXKDSsnP3SOeoq0hMzedmYIiSFC88k9HokDNi5rA=)
3: mYTd35kRkIBF88OmyEhVri7c_EM.roa (hash: 8He+vLv80dG8+N+bwzMwaOxaSPkQw5v1/xR4GgFaHQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:2a:28:45:63:c9:31:32:4c:7f:8c:1e:ec:6b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Jul 24 00:01:18 2026 GMT
Not After : Jul 25 00:01:18 2026 GMT
Subject: CN=821487092b493fe202133629de4b4a84810eb6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:ba:fa:05:79:7d:85:ca:60:a8:5a:27:53:
4d:d1:22:1f:e1:f8:96:1a:9d:86:20:d6:f8:30:3c:
5c:3b:23:7c:a8:f2:62:52:88:6b:e1:61:31:16:8b:
b1:7d:e4:c8:7c:13:01:f9:49:5a:80:f1:a6:57:fe:
2e:27:ad:38:91:51:63:3a:37:23:4d:f1:54:a5:6b:
c4:d3:45:28:2d:75:3e:20:f2:91:ae:40:72:01:08:
21:22:49:02:8c:01:50:2a:21:08:c5:1f:b8:37:d0:
9b:fc:f6:43:d9:2e:d7:73:9f:90:2f:a8:30:1f:bd:
01:ff:fe:dc:04:ac:35:c8:dd:ea:07:d6:7b:2b:bf:
ed:92:ce:83:00:fa:6a:ea:35:a5:8a:2b:72:2f:92:
e6:3a:8a:f6:ec:18:3f:9b:f6:cd:52:b4:53:f0:e1:
ae:7f:f0:99:0b:93:8d:97:bb:e8:c8:96:ec:61:a4:
b4:01:9c:17:e7:18:78:8d:0d:dc:53:a6:42:22:42:
24:ea:c2:a4:10:23:ee:1a:e2:09:ea:82:50:a6:e7:
e3:53:bb:6c:0f:80:84:b6:81:f0:53:f3:4a:e4:a3:
18:a3:3e:d8:c8:8a:dd:16:f3:db:bf:bb:14:b6:31:
6b:0b:90:2b:e0:65:15:39:65:c9:3f:0f:6f:3f:a0:
9c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:14:87:09:2B:49:3F:E2:02:13:36:29:DE:4B:4A:84:81:0E:B6:A5
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c2:98:68:d0:da:67:dc:d0:fb:01:c3:64:a0:89:f8:33:23:
60:da:ad:d9:3c:15:8a:c4:46:a6:c0:76:e9:8b:0c:4a:06:6d:
5e:a9:81:4b:47:44:f1:b7:8d:8a:a8:ed:a4:28:02:5d:01:1e:
81:2d:59:9e:4d:82:46:0a:9f:5b:c1:5e:8d:1c:c7:1b:d2:8f:
ae:ba:b1:e0:13:e5:c1:b7:9b:33:b7:2e:b6:2e:7c:5c:29:55:
7f:84:d4:8b:fa:2e:a0:53:c8:a9:57:03:6e:ea:43:d4:1e:f5:
64:c4:b9:7e:1a:74:33:03:fe:fd:de:eb:7d:9d:ca:ae:ed:2e:
93:51:b2:c2:b6:63:8e:43:fb:27:43:14:db:6e:69:08:0a:c1:
0d:9d:f3:0a:85:93:90:2b:a1:53:40:4c:17:ff:04:ca:af:4c:
9f:0b:da:15:49:ef:54:7c:7f:a5:a1:1a:9e:fc:30:16:73:4f:
fc:ae:92:6b:4f:e2:00:04:39:b2:04:5d:ed:37:e0:db:02:84:
7a:78:74:75:1d:15:21:cd:e0:b1:76:25:5c:0f:ad:ee:24:b8:
8f:55:e9:89:c2:25:35:a8:22:91:cf:71:be:08:4e:ea:5c:a1:
a1:65:5c:f4:10:5b:37:1c:e4:b7:f7:46:75:11:71:b3:f9:a6:
5c:c0:5f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:44 2026 by rpki-client