Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: un4izBxsMp6UNALi3uZvuI7lmblrXrdRWFRisKKBvuY=
Subject key identifier: 96:39:8C:B6:76:60:60:32:C8:E7:71:A8:EF:60:69:C3:8F:11:9B:56
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 019F935BB11A39EAFB5963FCAD1B28F1C106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 1748
Signing time: Fri 24 Jul 2026 09:01:27 +0000
Manifest this update: Fri 24 Jul 2026 09:01:27 +0000
Manifest next update: Sat 25 Jul 2026 09:01:27 +0000
Files and hashes: 1: 3wC4iAYIU6RjN3EGUKVhlIp3rko.roa (hash: r6BtCtLIRGTbjhqdmmeh1e+4MWSh7VLtqxWzoKISutU=)
2: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: zTdv3j/82zM3f2B/bgHjkB+6mjzmMr1gE+v7jsq++XY=)
3: H6GA7joAUfNPurokrgS1LJjNtfY.roa (hash: FKRThdMjAtwcwfUfR10ZtwzWVg2CFJr5Omg8dgAq7bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:b1:1a:39:ea:fb:59:63:fc:ad:1b:28:f1:c1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Jul 24 09:01:27 2026 GMT
Not After : Jul 25 09:01:27 2026 GMT
Subject: CN=96398cb676606032c8e771a8ef6069c38f119b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:cd:9f:6e:fc:b5:c1:55:9f:38:b8:e8:b3:
23:dc:6d:14:d0:6b:8e:32:c4:b1:75:b0:22:dd:3c:
5c:65:d9:e3:09:16:97:8a:91:b8:09:1e:04:55:78:
f4:46:28:ce:05:6e:ad:c2:1d:87:0e:fb:c2:98:ec:
78:83:c6:c2:c3:b7:42:8c:88:53:57:27:d8:39:53:
82:28:0b:89:e9:21:2d:ba:0f:47:dd:3d:63:20:60:
06:b5:7c:a4:51:64:f0:e8:7c:d7:e9:6d:6e:9b:f3:
10:5e:a6:ab:56:76:7c:64:be:17:aa:3d:b4:c0:ab:
76:a5:b3:93:9c:80:52:7b:82:b2:9d:3a:02:a4:59:
a3:44:e2:04:de:94:49:a7:83:47:59:2c:7d:c4:9e:
72:a1:a7:83:43:9b:9b:1e:42:3a:2e:6a:d2:1b:00:
b9:0e:55:b0:ad:8f:5c:15:04:b2:1e:b9:b0:79:a3:
c6:21:8a:08:19:95:df:c5:30:08:50:0a:a3:40:52:
6c:31:be:27:0d:5e:4b:b7:76:fd:3d:c3:64:25:4f:
ec:3b:65:ba:90:2c:d7:db:b9:3a:25:61:b8:7e:4a:
78:d4:78:ec:da:72:be:bb:26:71:21:71:1d:8b:0d:
45:fa:a7:bd:89:49:27:17:c1:62:af:48:58:98:b3:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:39:8C:B6:76:60:60:32:C8:E7:71:A8:EF:60:69:C3:8F:11:9B:56
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:22:99:e5:d7:8f:ac:bf:12:6f:71:0d:df:62:a4:99:15:06:
cd:d3:0a:0e:09:d8:36:80:e9:df:6d:b6:24:64:df:9a:52:0f:
81:08:30:2d:4c:69:ae:ae:60:28:7d:1a:77:c7:96:39:96:8d:
d8:26:75:98:3d:b8:d4:a6:e1:ab:21:a6:53:b6:95:a5:c2:c4:
8f:f9:f6:dc:05:91:19:c6:72:d8:33:b6:19:24:85:91:13:3e:
f0:90:28:d6:d2:3b:9b:fa:3a:52:7e:73:00:a6:cf:f4:aa:36:
21:39:81:83:e6:e1:34:73:94:13:8b:01:74:9d:6f:29:f6:cb:
a0:53:e7:fe:6a:d9:9f:18:4e:8f:e2:68:af:f9:72:64:8b:4e:
14:7f:4c:6c:62:62:a4:8d:3b:a4:c8:9d:24:12:b4:18:1a:6b:
4c:92:fe:8f:21:3d:04:bf:9d:ba:ac:23:ac:c8:f0:9f:b5:fc:
cc:1b:b5:be:39:5a:bb:7f:ef:49:ca:22:a4:01:f1:12:03:0a:
70:33:3a:48:c3:05:e8:0a:84:13:ef:a4:87:e3:68:f5:dd:4b:
aa:90:6c:36:26:4a:54:ad:68:47:ee:34:bd:60:02:51:39:9a:
ef:26:c7:2f:68:2c:1e:3e:8d:46:e5:c6:9c:ee:ce:f8:1d:c8:
9e:06:15:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:13:33 2026 by rpki-client