Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: OKckwGwh8MmGxRNAbQ4dM+3UkSxjVNqyqfTLtSTSsX4=
Subject key identifier: 93:17:6D:F7:4A:D8:E0:89:8D:F0:3F:3B:B5:C5:61:C9:71:C5:E6:08
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019F909128D8207FC6463EBA05BB47A08C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 19E6
Signing time: Thu 23 Jul 2026 20:00:59 +0000
Manifest this update: Thu 23 Jul 2026 20:00:59 +0000
Manifest next update: Fri 24 Jul 2026 20:00:59 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: ZDz6r4nfQ2/XSpTsxqUJDzWJ+vM/qOBOJ/fLttpT0IE=)
2: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (hash: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c=)
3: JnNygfiur-rHLJuAn1hkxLz25cQ.roa (hash: CEYmgo0zOa133sbdNYSecv5niw3ZeeRwnisUaeasxBY=)
4: UV-Za1MLDNSaG4DuH_q131i6c6o.roa (hash: /nY7i2nihg09pwfCz4ZETusOQgWbnKeEZAo2lp/8PQQ=)
5: XwwEduTGUdEUmzQ6Vn1Qh0lULKE.roa (hash: yP/C4oSHOkCL3b3u7lTD0ceM0Z9V/7tsggm9f4RRupE=)
6: bc8LaOm-Ug6E5hSvds9yGbuwrFA.roa (hash: RaZzZcOTQlGar1i6XUpTh++hxvp7YrNT3WX2Bc1Xmtk=)
7: gDu74A_Z1ksatoKHQD455fxsAx0.roa (hash: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig=)
8: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (hash: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:28:d8:20:7f:c6:46:3e:ba:05:bb:47:a0:8c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jul 23 20:00:59 2026 GMT
Not After : Jul 24 20:00:59 2026 GMT
Subject: CN=93176df74ad8e0898df03f3bb5c561c971c5e608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:ad:2f:9e:de:97:9c:d7:ad:19:fd:bc:99:
5e:23:67:bb:94:0f:0a:ea:0e:85:63:7b:6b:1f:cc:
ae:40:2a:aa:13:5b:f5:1f:fb:91:c8:24:ed:8b:ec:
15:bf:19:34:1f:40:c3:1a:08:88:e4:13:09:0d:5b:
43:69:0a:81:81:73:2f:23:06:3e:e1:80:9a:f5:b4:
93:37:96:c4:f6:24:f2:50:aa:7d:aa:b4:27:68:45:
2c:f6:ff:01:26:56:6d:ae:bc:b8:9e:2f:c1:a5:ac:
6f:39:bf:24:fe:4a:34:8a:c3:25:29:2b:4d:af:e2:
f7:f1:64:39:8b:f6:87:b5:09:48:57:de:c9:fa:ed:
9b:ab:84:6c:0f:94:22:e5:4c:91:0d:c4:af:4c:c6:
47:89:65:60:ab:4b:89:a2:62:95:78:82:7e:97:db:
4c:90:87:b5:54:c5:90:58:41:4b:3a:e3:8a:eb:30:
3a:e1:a1:b4:ce:fc:c1:ae:41:c2:88:96:a3:b5:ed:
2d:8b:7b:2a:4c:19:6b:ed:ed:68:0d:74:9b:25:62:
9f:56:41:94:78:bc:08:ea:52:e8:1d:fc:e4:1e:50:
7e:d5:d2:c3:a0:7c:a0:90:00:e5:6f:45:38:19:cb:
99:df:c4:ce:5d:7b:87:a0:24:3c:eb:fc:58:41:27:
63:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:17:6D:F7:4A:D8:E0:89:8D:F0:3F:3B:B5:C5:61:C9:71:C5:E6:08
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7d:7a:d1:f9:9f:c2:23:e9:d9:e8:2c:33:28:5e:55:8a:8e:
22:52:4b:78:e1:47:50:f4:80:38:7e:7a:01:54:4a:36:44:0f:
e1:db:80:af:2f:3e:2e:21:7b:d5:b4:a2:20:2a:f5:d6:4a:17:
34:73:7e:14:93:58:56:b1:0c:da:16:62:a1:b1:d5:f5:55:ad:
15:ed:e1:7a:54:80:65:d3:26:50:72:00:32:d9:72:20:2f:da:
48:c0:73:00:cd:0d:7f:9e:01:4a:d0:63:6c:be:5e:83:21:8f:
f1:38:f7:e6:12:34:45:65:d3:19:9a:1b:20:bd:a3:6e:11:7c:
3b:35:7c:3c:07:b9:15:c8:8a:e3:c7:70:78:28:3e:f6:25:75:
cb:e2:c7:71:c7:15:fa:ae:b1:5b:52:e7:49:87:81:37:76:ab:
cd:c0:31:d6:85:be:e9:71:98:55:38:58:d4:4f:a9:e7:ca:8a:
72:f3:5a:78:67:cf:85:c4:64:ca:a0:38:22:0a:dd:5c:01:65:
d2:c6:5b:97:98:48:2c:d2:0a:8a:2a:ee:47:1f:9e:91:f6:03:
b0:a6:3d:2c:2e:95:4b:b6:e7:d3:39:49:dc:86:1e:0a:88:23:
e7:e8:88:4f:c1:9d:ff:33:b5:50:c4:d6:f7:7a:22:00:9d:38:
8f:2f:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:03 2026 by rpki-client