Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
File: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json)
Hash identifier: SfEb97Ojk1P3TfF5eYSFFZ/EJM69TYgZ2svQWY6r4Ss=
Subject key identifier: C2:74:97:D0:34:95:21:26:F3:6E:AF:D1:3D:63:69:98:34:16:30:84
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Certificate issuer: /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial: 019F90C7A3E108446A6D07D56F52B99A1380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
Manifest number: 1209
Signing time: Thu 23 Jul 2026 21:00:30 +0000
Manifest this update: Thu 23 Jul 2026 21:00:30 +0000
Manifest next update: Fri 24 Jul 2026 21:00:30 +0000
Files and hashes: 1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: d+gQHUz/4vBi6abANgLx5Jl3LP8Hnsd9lkj3skahnms=)
2: xkug34IJaWSwOfn5zGdas0MixZ4.roa (hash: IepgvoNLMpyof9xTWeZX3c1cPMLbQuZpVjyEywQxdwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:a3:e1:08:44:6a:6d:07:d5:6f:52:b9:9a:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Validity
Not Before: Jul 23 21:00:30 2026 GMT
Not After : Jul 24 21:00:30 2026 GMT
Subject: CN=c27497d034952126f36eafd13d63699834163084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:75:8d:1b:cf:7f:4f:a4:47:a2:8b:c5:c5:
c3:d6:24:cc:95:d6:1d:62:b2:27:95:e8:73:ab:a5:
b4:4f:b7:a1:62:c6:c5:bf:ea:44:94:9f:10:64:2d:
51:ab:af:03:70:fb:23:7e:fa:33:b7:f0:b6:3e:18:
5c:74:59:a3:d1:02:90:a2:3e:29:42:15:de:8f:fe:
b6:24:32:e8:14:5d:50:a9:07:47:88:5b:fe:52:cd:
c2:87:c9:6e:02:17:e3:73:c2:ab:5e:aa:76:14:9f:
76:6a:d2:9f:85:db:82:d4:bc:b8:cc:87:95:1e:4f:
b1:0f:4f:78:65:0d:6e:31:58:ac:fa:f8:7e:54:8d:
7e:fa:8f:e8:27:29:3e:23:e7:8b:43:ae:d9:c4:a0:
82:66:16:1b:07:78:c9:8f:c8:06:aa:90:12:6c:f1:
f0:60:b7:03:46:c5:51:44:ab:d5:df:8b:1e:a5:0b:
0e:67:cc:7a:a9:52:12:d5:f2:40:55:29:22:26:12:
1f:0b:b0:5d:0e:78:07:78:1d:8d:d8:97:02:f8:98:
cf:20:c1:5a:bc:6b:cc:b8:63:2d:ec:6f:3e:3b:55:
98:b4:07:04:0e:54:2d:66:eb:ae:83:8c:eb:df:02:
81:8b:27:1b:bd:13:53:25:5e:05:66:10:e0:b9:80:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:74:97:D0:34:95:21:26:F3:6E:AF:D1:3D:63:69:98:34:16:30:84
X509v3 Authority Key Identifier:
keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e3:87:17:e8:2c:13:f2:c6:ba:5a:a2:83:08:0d:ab:83:57:
0e:92:4e:e6:d4:73:78:2b:cd:f1:dd:d5:49:90:54:92:06:7d:
3b:cb:cf:07:46:41:6d:a0:13:a9:c1:14:fc:d0:c9:94:77:69:
ce:7e:8a:4f:56:1f:c0:8f:21:65:c9:9f:13:90:2a:e5:3b:82:
31:31:0d:68:a0:01:47:b5:4a:97:1c:aa:c7:6a:ee:1c:c6:d6:
82:00:07:f4:fe:47:ac:9d:56:74:50:0d:ec:25:90:45:3f:c3:
41:ff:c3:f8:91:c7:4d:42:38:27:93:fa:4e:76:65:de:01:b6:
26:f4:f0:67:31:22:a9:6d:c0:95:ef:09:ee:1e:7d:c5:63:7b:
52:94:2e:be:4e:58:e4:a8:b3:6a:fd:c1:23:be:ba:a0:74:bc:
05:28:2d:da:78:fe:af:8f:93:8a:cb:65:08:6e:b9:3d:e6:f8:
e6:2d:22:13:04:5c:5e:44:c6:60:e6:cd:51:0c:af:a8:39:8f:
8b:64:0b:dc:29:77:ec:56:b1:51:18:5e:dc:03:17:75:03:ff:
cf:d3:26:d5:ee:e4:d2:78:50:84:b3:e1:39:9c:60:54:97:4c:
91:1f:09:b7:b5:dc:41:69:03:d1:c2:0a:d1:f1:3f:31:14:14:
9b:8a:c0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:25 2026 by rpki-client