Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: XTngU12R02a+cMyO65k7QQ+GZU3ktUgMS6hqzOHvXxw=
Subject key identifier: EC:6E:BA:06:A0:99:FC:92:8D:0F:5D:79:E4:23:53:6C:2B:C2:3B:63
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 019F8FB584407434C6ECB959AA70D8849305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 16:01:05 +0000
Manifest this update: Thu 23 Jul 2026 16:01:05 +0000
Manifest next update: Fri 24 Jul 2026 16:01:05 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: +iD3i2z8aYpDRrL+DmYFEB8DqFF+kxCyDkd6gcAXrww=)
2: Y1SgnZdGMmo9fGpuJl7wUQaxlkc.roa (hash: c5a6z6fFSi3Ksmn1qg/vCHzequVOvVzrYowSPYYXoZY=)
3: zgjOZSAzojMMAhNOHNiG97-1lKs.roa (hash: 9AqyfTSVIr04hBsXGR4iW4XjBoNFR8P2652xVPdhD0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:84:40:74:34:c6:ec:b9:59:aa:70:d8:84:93:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Jul 23 16:01:05 2026 GMT
Not After : Jul 24 16:01:05 2026 GMT
Subject: CN=ec6eba06a099fc928d0f5d79e423536c2bc23b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d0:93:51:d6:97:77:3b:8b:68:55:3f:c1:fa:
dc:55:dc:af:57:bc:ba:49:15:43:e3:82:fe:ce:9c:
8f:6d:97:50:e8:10:bb:d2:4f:66:fd:ae:a8:30:a6:
6a:81:76:4c:a9:fb:af:5f:6c:65:b8:5d:3d:df:5b:
ef:e4:bf:4c:9d:4c:06:e9:05:4a:d2:0d:89:3f:9a:
cf:e2:e2:d4:b1:e9:49:52:dc:be:8a:b6:c9:b0:5f:
7d:6d:95:c3:0f:de:9f:17:86:66:a5:32:95:e3:0a:
f6:55:3c:02:78:f0:96:81:68:e6:86:e1:60:a0:81:
4e:f5:f2:7f:95:19:5f:c2:41:38:23:0f:12:64:db:
63:38:dd:74:c9:52:db:4f:83:63:92:a0:6c:84:64:
0f:ad:61:6b:f1:a2:44:85:47:91:a3:3d:0d:93:4b:
7b:00:3a:66:0f:fe:c5:8b:c0:a0:6e:59:e8:45:77:
97:01:38:fc:a4:d4:31:f0:9d:cf:89:72:ca:5b:44:
a3:d5:90:3a:8f:75:7d:ad:40:00:06:63:6d:fb:57:
04:7b:94:86:91:83:2b:33:52:2e:91:a5:2f:ef:2e:
d9:03:74:10:dc:50:6e:62:c5:95:a7:db:35:3e:3c:
75:66:1d:4b:7d:4b:2c:93:4e:07:c3:ec:56:9b:e3:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6E:BA:06:A0:99:FC:92:8D:0F:5D:79:E4:23:53:6C:2B:C2:3B:63
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:32:ec:72:35:2d:fe:cb:c7:de:13:01:67:17:86:78:74:3e:
5c:94:24:8a:a1:c1:b3:c8:ed:96:d3:a8:0f:f8:a9:9d:85:13:
d6:f2:84:41:1c:12:61:4b:f3:3b:18:4a:68:8f:51:41:42:7c:
2b:a1:e6:8f:17:b3:e3:59:28:18:36:25:5c:8f:91:5d:1f:ae:
3c:fa:9d:21:40:22:fa:c6:69:9a:97:1c:c5:fb:82:c7:2d:69:
00:9c:4c:cb:57:36:1e:93:99:27:29:0f:17:7c:19:32:0a:38:
1a:33:bc:cf:ad:59:ea:29:31:5c:a0:38:f5:2d:34:68:86:4d:
e9:15:68:18:94:31:8d:e8:86:4a:c0:61:5d:d0:59:28:9d:e2:
05:20:29:f8:0d:86:b6:8d:23:e8:e2:fe:4c:4b:48:44:05:e3:
25:d9:06:12:f0:49:ac:7b:8d:1a:6a:25:b9:17:8f:36:2b:ec:
d0:f9:a5:18:c7:af:b4:f0:33:b0:d9:01:86:18:7a:de:ab:b8:
39:74:80:2b:9c:5d:5e:37:1e:e3:82:71:b9:5c:93:a4:20:dc:
94:2c:71:5a:1f:1e:ff:bd:c6:c6:f6:29:55:cf:01:3f:67:5a:
50:cb:74:a1:c3:c6:59:db:66:9d:ad:90:b6:98:d7:e1:a4:5f:
de:6e:2f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:05 2026 by rpki-client