Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier: 5PDNu3Km5n5PVboYUL8EocaVRJj+xQfyeNAblllomFo=
Subject key identifier: 03:D1:C7:65:4C:3A:52:E4:B4:7A:66:DE:1C:C9:F9:84:17:35:0B:8F
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial: 019F92EDC211725CC1BC9B74D146DED00FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number: 085B
Signing time: Fri 24 Jul 2026 07:01:22 +0000
Manifest this update: Fri 24 Jul 2026 07:01:22 +0000
Manifest next update: Sat 25 Jul 2026 07:01:22 +0000
Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: JOpmC/zcQdp9DvyLLOzsgWvosdoPVsQQ0KlBqDwqaps=)
2: Ane3kVXJDwOnCcrwevPbQSwdhlM.roa (hash: GcB+WQ8GGExoABfliUP8dcPeehhXNomt7lmTMnKvHmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:c2:11:72:5c:c1:bc:9b:74:d1:46:de:d0:0f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Validity
Not Before: Jul 24 07:01:22 2026 GMT
Not After : Jul 25 07:01:22 2026 GMT
Subject: CN=03d1c7654c3a52e4b47a66de1cc9f98417350b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:b9:4b:fe:3f:1c:0c:31:4c:5a:f8:2f:58:
9f:b0:4f:21:d1:22:cf:53:9e:b5:ba:46:1f:f3:23:
40:70:25:87:4e:45:bb:08:46:9b:d1:3c:1f:63:4f:
07:13:f8:83:98:6c:9f:8e:8e:a7:31:14:9e:8b:be:
42:b3:82:1c:70:a9:1f:b1:d3:37:07:10:cd:95:0a:
2e:5a:cb:9f:57:ae:c7:57:3b:9e:bc:81:d5:48:d1:
64:14:bd:65:81:e3:45:86:f1:b9:14:76:55:78:24:
69:60:f5:93:b0:60:de:3d:ba:1a:e5:a8:2c:b9:ba:
d7:bf:8d:a8:ae:7a:e8:20:cf:8a:43:2f:df:d3:69:
03:3e:1d:1b:75:8c:fe:a8:e4:9a:80:6e:c7:2b:66:
80:f4:98:80:d3:0b:24:c3:66:35:74:6f:40:20:d2:
0f:3e:7d:a4:a8:a1:04:32:c7:84:ca:bb:03:60:7c:
b5:e6:4b:ab:a7:61:d5:5a:87:1d:e5:48:4f:66:26:
8a:ef:f3:5a:03:50:97:45:24:1d:dc:74:d2:15:47:
4f:26:07:7c:16:7d:e5:28:87:73:de:8b:bc:ff:70:
b6:df:53:27:3b:e8:da:c1:36:02:7c:88:4e:df:93:
0a:a1:e3:74:e2:54:c6:28:49:8a:e8:c8:7e:cc:ec:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D1:C7:65:4C:3A:52:E4:B4:7A:66:DE:1C:C9:F9:84:17:35:0B:8F
X509v3 Authority Key Identifier:
keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:85:e8:eb:af:bc:11:d4:73:e0:8c:9f:39:8e:34:24:c9:84:
ea:1f:b9:83:84:6f:a3:22:55:62:b8:f8:81:d2:42:71:0e:7a:
98:08:42:20:bb:da:6f:83:cd:24:de:7a:82:27:21:57:ce:12:
0b:13:60:93:53:2b:81:da:5f:de:67:3a:69:5c:41:8b:76:ac:
28:bf:64:c8:93:d0:54:4c:69:f7:b0:f8:3d:1b:ca:02:27:0d:
5e:1a:14:d3:ed:24:d1:0d:6a:43:9f:6d:1c:4c:45:44:ab:78:
2c:8f:cf:d6:a5:51:3d:2a:45:25:d6:1c:cb:84:67:a9:75:c9:
a2:00:a2:f6:68:3b:75:71:a1:b2:8c:d1:16:8d:c1:9c:09:fa:
09:58:82:4b:20:55:ea:4e:35:1c:f9:1c:e1:19:ab:ab:f0:53:
f9:af:fe:11:bc:e8:d2:d6:63:14:f2:34:2c:32:ed:f7:15:e1:
c5:80:53:4f:4e:8d:fb:fe:5f:12:3e:12:48:94:c9:80:30:da:
b8:3e:dd:63:ea:7b:7a:12:3c:92:65:97:24:42:49:9d:46:ec:
8e:ad:0c:69:71:61:24:ea:dd:d5:09:b3:6b:5b:15:a7:72:a6:
51:98:bd:f7:ff:1d:1c:73:d6:15:eb:9e:4f:b0:8e:c6:5d:92:
78:2f:a2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:01:11 2026 by rpki-client