
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.mft
File: D7JAVZB3wRHaVfjisw5xF2QNguw.mft (raw, json)
Hash identifier: W7pcHWUtBLFanGYwCirOOuN6ltUyfdT/ktxlWoCTzvM=
Subject key identifier: 4E:DF:70:20:10:61:10:04:71:DE:E1:F2:7C:76:71:83:37:16:91:C0
Authority key identifier: 0F:B2:40:55:90:77:C1:11:DA:55:F8:E2:B3:0E:71:17:64:0D:82:EC
Certificate issuer: /CN=0fb240559077c111da55f8e2b30e7117640d82ec
Certificate serial: 019F8F7E8EEB2DBE54A4E6E1C82D1CCD8E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7JAVZB3wRHaVfjisw5xF2QNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:03 +0000
Manifest this update: Thu 23 Jul 2026 15:01:03 +0000
Manifest next update: Fri 24 Jul 2026 15:01:03 +0000
Files and hashes: 1: 2FjkxVJwhbBSDsFlqMOylRx1h7w.roa (hash: lWPoUqWqXBuYP0fhmCr8Qtwx5dmWT/xwoh3ALnECDtg=)
2: D7JAVZB3wRHaVfjisw5xF2QNguw.crl (hash: Z5dWvKkevMEB2tD8zFYOPn58ZhhAk1NMeBZPMlo/73g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7JAVZB3wRHaVfjisw5xF2QNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:8e:eb:2d:be:54:a4:e6:e1:c8:2d:1c:cd:8e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb240559077c111da55f8e2b30e7117640d82ec
Validity
Not Before: Jul 23 15:01:03 2026 GMT
Not After : Jul 24 15:01:03 2026 GMT
Subject: CN=4edf70201061100471dee1f27c767183371691c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:da:b7:99:cd:35:13:75:17:f6:b3:8c:50:
f2:c0:9e:68:5b:bb:0f:81:25:75:8e:51:14:ec:ff:
89:dd:55:52:65:c0:0b:38:e8:e5:14:af:de:dd:f9:
a9:e7:97:19:0c:02:a8:be:f8:e7:5e:f0:55:bf:43:
e5:f3:42:ca:13:17:a0:dd:5b:8f:e4:63:fe:98:b1:
5c:74:bc:fc:62:1c:a6:1d:71:77:07:e7:e7:eb:34:
80:e2:09:11:b3:6a:fe:3d:1e:dd:55:f4:5c:9e:99:
14:2b:4f:aa:36:da:d0:56:eb:a8:88:d1:80:6a:98:
d1:bb:11:37:84:43:5e:42:73:de:74:45:80:fa:97:
99:4f:35:f2:80:20:b8:5a:ee:91:6a:95:a3:4e:6c:
70:d2:44:08:d6:03:7c:fa:27:b3:7a:06:d2:1a:95:
6e:e7:d7:ca:92:3c:91:cf:2a:84:10:9b:9d:d8:89:
e0:5c:63:f1:aa:4b:55:01:19:c1:33:d3:71:3c:2e:
b0:a3:62:5c:e6:2b:5d:d7:b9:12:81:8a:e0:10:30:
a8:be:95:a8:3a:0d:55:05:61:af:de:15:95:f3:79:
af:14:c7:e2:20:06:c5:17:18:e4:8c:b9:c8:6e:cb:
60:c6:8d:7b:71:45:7d:42:b7:58:44:cf:e9:3b:af:
e1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DF:70:20:10:61:10:04:71:DE:E1:F2:7C:76:71:83:37:16:91:C0
X509v3 Authority Key Identifier:
keyid:0F:B2:40:55:90:77:C1:11:DA:55:F8:E2:B3:0E:71:17:64:0D:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7JAVZB3wRHaVfjisw5xF2QNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d4:7a:7c:8d:e7:05:73:aa:82:29:11:36:b4:4e:11:3b:f0:
2a:4d:54:1b:da:38:89:16:16:af:61:af:07:b9:7a:a4:4b:db:
f5:78:2c:33:63:d1:4d:dc:0c:2b:cb:48:af:78:c1:cd:60:2a:
2d:e9:10:d5:02:35:0e:55:2e:bd:56:49:4b:0f:e4:a9:df:78:
e1:dc:4b:e1:8f:04:92:e1:f0:20:06:01:06:4e:fe:95:68:ec:
79:d1:71:f4:52:e5:86:f0:ba:ff:26:6d:04:4e:36:9a:41:c8:
57:8a:af:d7:be:a6:5a:3c:ed:0b:c3:2e:7c:7e:89:66:7f:a0:
11:70:a8:a3:15:2a:8d:6f:48:fe:c6:3b:51:75:87:74:29:06:
57:7e:84:65:fc:ed:8d:0a:90:a4:b1:82:12:e7:0b:c8:8a:3b:
2e:2c:21:a6:75:5b:2c:3e:48:34:8f:8d:09:f8:79:6c:29:03:
63:6d:70:77:9d:d0:10:04:b3:a3:75:f2:c6:20:15:69:39:fa:
fb:f1:af:aa:59:16:48:3d:0a:d4:df:71:1d:ba:77:bb:43:de:
1d:1f:1d:67:a6:cc:98:c4:af:71:bd:a4:bd:9d:5e:f3:cb:0c:
84:f3:2a:9d:51:8e:6f:12:dc:b5:a4:98:fd:2b:1e:fc:58:b6:
d9:38:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:38 2026 by rpki-client