Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier: iRSF3zGaILBQUcNfTebYDgmYVWK+NEv3XgM6rSc3c5c=
Subject key identifier: 8B:48:D2:55:A6:C3:39:C6:E9:76:F6:28:39:F4:54:B0:8E:1F:42:E4
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 019F91DA630F2E842262FC2D6750E087448A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number: 19DC
Signing time: Fri 24 Jul 2026 02:00:36 +0000
Manifest this update: Fri 24 Jul 2026 02:00:36 +0000
Manifest next update: Sat 25 Jul 2026 02:00:36 +0000
Files and hashes: 1: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: +bKedcwijIgj2AHH2snzyTBgOLQlLd2XXU4RIkteG+s=)
2: JsIYFyLR74GQysEIqnGykpSJQUI.roa (hash: iaHnb3OAMXTWsBgbEKrwhuTvCOgUBCodv1kDk+4mavA=)
3: NKy6Tyf5RyRglBk0yV_ExDPmxuo.roa (hash: ebb1VqS7aGDzvUXqYNWhDAqOkeGUT55XR6ggJqYbSMU=)
4: OUVdt4o2LS_i-Gunl0nnzrdW_jI.roa (hash: LG7q3NWzE4G2vBN3PTFInwdMW/gtEeHrNbl3IVaBPnE=)
5: YH5NKMifzBmhf3nIG20jcgRcBU0.roa (hash: V5cTAFBzO7CMX8CCIxzqRfhGsna670gP9hgi/NVqRBc=)
6: mCt7UGq2s1qnA69MYZljhYxWiD4.roa (hash: qi5pYWU2cgvvhT1J3aGpMqhq1J2xvA8Deh0/Hh6j/Rg=)
7: sRMtAiiTomuNQjvyhVAd07KYQM0.roa (hash: 1ZDSFc07GgvbF2RmQMqVaUItzv9tv/zTWoNdPvDIoXs=)
8: sjgUHUj_TSMku2aB-f61amSIyCM.roa (hash: /+JjugGAK765zafXtIVOVPtipqmOZ3WaKKGK25tgoO4=)
9: zhcr9I3s3OVNgzaih7vQHJr6C0Y.roa (hash: nLQ289DooRLgqJOtJaVgt01KECd6y0NdXrqka7CO4Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:63:0f:2e:84:22:62:fc:2d:67:50:e0:87:44:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jul 24 02:00:36 2026 GMT
Not After : Jul 25 02:00:36 2026 GMT
Subject: CN=8b48d255a6c339c6e976f62839f454b08e1f42e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:c4:97:aa:27:3a:d7:e1:af:d9:51:2d:a6:
26:be:32:cf:7c:a8:b5:1c:28:59:fb:6d:23:f4:09:
a1:43:70:f3:c9:05:03:a5:48:4f:84:c5:15:80:32:
90:f4:9b:3a:47:33:fb:12:f0:67:3a:4d:dd:3e:4f:
07:8f:16:d4:f0:da:dc:70:52:84:1c:68:e7:b8:6a:
ac:bc:d1:c0:fd:fb:4c:6d:fa:18:76:ee:51:ce:44:
d9:a8:d9:72:95:5a:1d:b1:10:ba:c4:0c:2d:81:79:
2a:de:c1:dc:4c:b2:36:a8:01:f1:81:14:1b:52:77:
2b:50:ca:1f:09:87:cc:d5:c0:07:39:7a:a1:bc:87:
c0:7d:1f:9d:75:5c:d6:27:60:59:f6:cd:76:9f:53:
c2:0a:04:29:46:b5:f5:c7:18:7f:45:55:02:db:d5:
85:fc:03:6b:d9:d6:12:93:72:a1:8e:b2:47:2b:a2:
83:66:77:4a:7c:3d:f7:76:c2:be:e7:6a:af:b9:d0:
9f:44:03:65:13:8e:1d:94:25:eb:90:da:39:2c:ae:
a2:68:c3:ea:87:3f:37:8f:cb:ef:f3:6b:29:4b:df:
db:1f:8b:b7:ca:20:23:db:2c:3e:d6:36:9d:93:de:
25:be:c9:7e:8e:08:73:a1:07:69:5d:fe:8d:fb:7b:
08:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:48:D2:55:A6:C3:39:C6:E9:76:F6:28:39:F4:54:B0:8E:1F:42:E4
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fc:22:ae:36:1a:a7:a6:58:4d:95:78:74:55:f9:96:ae:a7:
53:d3:05:d7:c8:1b:03:66:9c:98:a8:f6:7f:fd:51:13:ef:fa:
37:81:cc:80:28:53:bb:81:88:a1:dd:7a:70:c3:ab:78:55:aa:
0b:e6:d9:38:9f:5c:9a:19:84:aa:24:bf:58:10:d3:54:a2:19:
97:c8:ed:7c:18:9d:00:c7:53:e7:8d:c0:05:aa:22:ea:f3:10:
62:53:13:d9:58:b7:72:04:71:03:7a:e8:f2:82:83:70:a7:42:
af:1a:44:41:91:e6:57:cd:d7:77:6f:f2:fb:74:f3:83:20:71:
fd:0b:41:7a:8d:ec:b3:4a:99:6d:0c:39:29:1f:8d:71:0a:33:
17:29:88:4f:8b:cd:29:d5:6c:f0:a9:73:3c:87:0c:96:a6:44:
2f:ce:03:76:3e:6c:d3:45:c7:23:b2:d8:60:4f:8c:48:92:fc:
4d:8d:9b:de:76:72:a5:24:5f:a2:93:c3:ba:27:a1:a1:4c:a0:
a6:23:35:ae:63:3d:90:83:de:0d:30:f1:05:26:c0:64:34:50:
4b:ee:c8:9d:ef:6c:5e:da:b2:a8:e9:1b:7d:ff:ab:d2:fa:33:
5b:ad:2c:95:3c:c4:65:13:48:1a:69:52:83:31:da:6b:fc:c4:
9d:3a:f7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:15 2026 by rpki-client