Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier: dmw5KdFK7TEA3Bh+Sg1c+nkzgTSJ+m3LIu/38ZiJXIE=
Subject key identifier: 0D:E8:D6:B8:A9:9E:A7:07:E9:83:A3:83:FE:E3:25:25:9C:DF:CD:8D
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 019F9323F6E69672CC5A38E73E4C14998019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number: 19D6
Signing time: Fri 24 Jul 2026 08:00:35 +0000
Manifest this update: Fri 24 Jul 2026 08:00:35 +0000
Manifest next update: Sat 25 Jul 2026 08:00:35 +0000
Files and hashes: 1: EIlm2UOK4a43mkGzeWHWkYSMea0.roa (hash: +wMjOafG8Bh/qQ6ngEeSs6Schjv6y2L45oZoRJ0DZNo=)
2: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: XsB6UGEYLC4HJCechjvp6wDLp6HJ3cokJlxmjHpbUUs=)
3: luGI1U_JMgcQZM65wInUiA4UdbA.roa (hash: ZyKZURW02DYdgFTMs0cmnkA3UVYypfPPFFRpyjWyugA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:f6:e6:96:72:cc:5a:38:e7:3e:4c:14:99:80:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Jul 24 08:00:35 2026 GMT
Not After : Jul 25 08:00:35 2026 GMT
Subject: CN=0de8d6b8a99ea707e983a383fee325259cdfcd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:95:90:70:54:a2:e9:85:06:7d:19:e8:99:
af:68:a9:8e:6f:da:88:e7:4b:d2:21:8c:bd:ab:30:
cc:5c:e4:ac:da:3f:30:af:2a:1f:09:1f:1e:20:e2:
4a:3b:6d:92:51:18:89:c6:80:71:5f:67:44:4e:2c:
b5:95:20:fc:38:a4:00:ad:c5:33:01:35:8a:77:1a:
4a:20:56:4b:dc:f8:09:04:b0:2c:ab:37:e3:9a:31:
54:63:61:51:d5:ab:b1:19:f9:f1:3f:e7:8f:70:d7:
9a:a4:f9:ba:26:be:92:32:79:fa:f0:14:88:2d:64:
de:c1:81:ae:ae:f4:2d:18:f7:9e:b8:52:b7:57:2b:
25:b5:8b:31:25:4f:13:4a:1a:82:99:2b:df:82:cc:
f9:a1:3b:e2:eb:91:bf:86:8a:9f:c3:ee:11:2a:c1:
64:dd:7b:52:bd:29:3b:bd:7e:0e:5e:04:84:e9:78:
82:fb:a9:68:59:65:49:61:66:30:30:98:ca:dc:75:
c9:ba:14:d8:60:da:1c:ad:63:31:17:d0:27:f7:e3:
59:8f:0b:1a:f8:e5:d3:59:6f:e3:2b:d2:dc:38:91:
74:f8:73:66:08:37:60:d4:8c:e5:94:ab:2d:28:d3:
59:62:6c:f2:e4:ed:34:1c:cc:a7:bb:65:df:6b:95:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E8:D6:B8:A9:9E:A7:07:E9:83:A3:83:FE:E3:25:25:9C:DF:CD:8D
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c6:d7:00:a3:59:a1:6b:23:2e:2d:82:0c:4d:dc:c8:97:8d:
74:b2:76:1e:42:55:88:90:74:29:6b:e3:2f:81:ff:bd:b9:3a:
5a:a2:af:61:b2:f0:31:df:63:48:03:09:6c:57:d9:9c:26:23:
d9:59:eb:e9:bb:2b:01:f8:c8:24:66:fc:19:25:55:e3:fc:13:
c5:9f:fc:32:9f:cc:92:56:dc:43:5b:a6:dc:dd:66:0c:3f:90:
0c:ae:ae:98:b1:e9:11:0d:ca:a3:5b:21:4c:8e:f1:27:b5:f2:
06:80:69:7f:d6:cb:05:9a:d1:2f:7b:d9:17:24:68:42:7b:f5:
78:3e:53:db:0f:06:40:aa:b5:eb:0d:15:b7:0a:4c:27:19:c9:
a0:5c:14:fc:ab:7f:d5:16:bb:ab:1a:85:6b:a7:64:b9:6d:42:
53:c8:c5:95:ec:c1:fc:41:5d:2c:44:40:28:c9:39:fa:4d:c7:
a4:43:e9:a0:c6:5e:63:fc:11:01:34:25:96:dc:89:6f:2b:3e:
b3:72:dc:aa:a5:26:cf:bd:5e:df:62:b9:d6:aa:61:30:26:68:
b3:27:c7:03:27:e2:b8:57:41:c2:3e:03:43:4c:69:19:be:82:
92:a4:f8:42:87:07:34:1b:27:0a:10:fe:49:f7:99:a5:24:aa:
05:1d:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:13:57 2026 by rpki-client