Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: WfxBTN8uFg/XN5TxV8Kmyl0hcwYBORVzfNX+SLdNfA4=
Subject key identifier: 9C:AD:47:9D:4F:F8:74:80:9A:F5:72:BF:F1:6A:06:EF:51:7D:8D:2C
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 019F8FEC5E22E26343FEC4C5148644D9CD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 1658
Signing time: Thu 23 Jul 2026 17:01:00 +0000
Manifest this update: Thu 23 Jul 2026 17:01:00 +0000
Manifest next update: Fri 24 Jul 2026 17:01:00 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: mo6IJ03NE5COCK4tRvjZgJ9eNCmxvhz6OLC0q3pCovk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:5e:22:e2:63:43:fe:c4:c5:14:86:44:d9:cd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: Jul 23 17:01:00 2026 GMT
Not After : Jul 24 17:01:00 2026 GMT
Subject: CN=9cad479d4ff874809af572bff16a06ef517d8d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:d9:cd:88:69:2d:4f:46:9c:77:77:92:21:c0:
78:19:76:80:bd:16:d2:26:f8:3c:0f:bb:67:24:a5:
b4:4a:cd:a6:5b:b3:34:24:55:ba:fd:62:ad:3f:4c:
98:a0:5e:25:cb:e0:36:90:01:f8:6c:77:c1:87:b4:
cc:74:7e:f2:11:0e:54:3f:fb:da:48:fb:4c:23:d1:
92:da:55:37:db:76:75:0a:cf:f8:d0:51:16:5c:a9:
2f:80:32:8c:46:28:e4:d7:3e:5f:74:ff:a7:85:69:
b9:d0:bd:b6:ed:8d:f6:36:2d:bb:e1:8e:7c:22:07:
b7:6a:98:fb:25:fd:d4:ca:ac:1e:cb:2e:f0:7a:bd:
66:10:1f:e6:68:ac:e2:77:a4:ff:eb:76:25:f6:a5:
4f:bc:99:ad:d1:23:a7:f3:37:b8:52:1d:1d:08:55:
6f:8e:e7:7f:5b:21:e9:7d:0e:a1:39:8d:a9:23:29:
7e:e1:14:58:52:57:de:49:75:26:4f:d5:55:3c:53:
f0:3e:16:51:7a:58:99:e7:29:70:94:43:31:5f:74:
d3:f8:8d:46:54:a2:71:0b:23:3e:7b:d2:72:25:0b:
72:2f:a6:b5:c9:be:24:10:46:bd:27:fe:d2:7c:5a:
95:99:39:86:ee:cb:72:31:d2:b3:f0:10:6e:9f:2b:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AD:47:9D:4F:F8:74:80:9A:F5:72:BF:F1:6A:06:EF:51:7D:8D:2C
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ac:dc:64:50:28:2f:32:ad:5b:7a:b1:db:75:6e:d1:8e:1c:
ee:29:c6:21:28:f2:6a:08:fc:46:b3:03:cc:86:27:7c:d5:24:
b5:4c:9e:7f:ad:90:4a:d7:28:9d:dd:6e:7c:f6:b9:34:19:3f:
95:b9:5c:cf:08:55:34:ee:5a:db:18:73:ce:bf:16:da:57:76:
b0:66:36:9d:94:99:81:14:4c:e8:e2:94:a7:11:8f:97:4a:78:
a2:4a:76:b4:a7:5b:d8:fc:e8:05:71:0d:81:b2:8a:12:c9:1f:
3b:01:ab:f1:d7:f1:df:0b:1e:95:12:99:9f:26:ca:3a:d5:17:
40:3e:9a:58:e3:da:9e:de:52:2c:c4:18:c0:56:1f:68:61:d1:
4e:66:43:ff:dd:46:d7:7a:c1:25:a7:8a:eb:22:be:f6:78:9d:
7e:81:6a:9f:3b:c9:52:bc:5a:b2:33:48:68:90:93:9f:a8:ee:
16:d9:f4:99:62:50:a7:a6:38:08:be:59:08:ac:d4:82:0d:59:
f6:43:a4:45:e6:cc:7f:52:4e:49:72:07:37:86:8c:5f:55:c9:
a6:f0:78:e7:fe:7e:e1:e3:02:d7:5d:c0:51:a5:63:e1:ca:d1:
d0:19:9d:fd:ab:4c:a3:db:e5:98:e5:9a:32:86:4a:f3:5e:44:
77:25:f3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:03 2026 by rpki-client