Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File: 73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier: /RzjFma0Ul+juZKUs8UBhqrGEsBy+zKtO+i3zaIJ2s4=
Subject key identifier: 7C:4C:BF:96:AE:C8:F8:7E:AE:E6:21:3D:26:2D:68:F9:DE:4D:F7:57
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial: 019F8FB4EDE77E8B4AB986A6952B4E9E61DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 16:00:26 +0000
Manifest this update: Thu 23 Jul 2026 16:00:26 +0000
Manifest next update: Fri 24 Jul 2026 16:00:26 +0000
Files and hashes: 1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: 0RgF4wdbRnfd+rByAyx1dwqDPJn0WC0zDhdOgijpLYw=)
2: s3XOS3QA_OLCEJgqKQs1DGSZPSE.roa (hash: zm1kL82qrnuSElGfAwXwitkc6LPDrRud9bFF8MtyuyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:ed:e7:7e:8b:4a:b9:86:a6:95:2b:4e:9e:61:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Validity
Not Before: Jul 23 16:00:26 2026 GMT
Not After : Jul 24 16:00:26 2026 GMT
Subject: CN=7c4cbf96aec8f87eaee6213d262d68f9de4df757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:4e:0f:45:6f:f9:4e:9c:27:c1:d2:f3:63:
cf:3c:d4:94:ce:b5:71:de:60:31:02:c8:9f:d5:44:
fe:e4:29:d7:4b:1a:2f:8f:dd:b4:ed:4a:97:ce:d4:
b9:03:42:a9:12:21:12:7d:e7:94:c7:d0:30:c4:38:
ed:72:ad:85:f8:32:38:91:fd:70:4f:e5:8d:35:7c:
7d:a7:9b:03:a1:29:c8:6b:13:17:fa:85:d8:57:1d:
bc:39:a8:32:d1:f5:b9:2f:0d:87:3f:43:60:78:bd:
b0:12:3b:fc:6e:44:a0:59:5f:6c:17:58:69:9f:cd:
96:56:09:88:07:68:03:d9:f2:bc:42:61:bb:50:bc:
49:26:fb:c0:3c:01:0a:f8:cf:2c:c3:c9:00:1f:9d:
0b:ae:59:27:0b:b6:52:8f:ee:6f:65:9f:0b:ce:6a:
6f:ed:62:f0:e5:78:3b:ad:43:94:eb:1f:3b:91:28:
b8:e5:26:aa:ec:f0:6b:61:1d:65:ed:55:aa:2f:53:
25:6c:22:31:5f:ea:d2:78:dc:dc:9d:f3:5c:7c:bd:
bc:d0:3d:96:91:54:df:7e:a6:0e:c6:22:a6:9c:3c:
56:2e:12:a5:f4:f9:27:4e:a6:4a:fd:df:80:fa:d2:
c5:07:be:6f:a5:39:45:6f:18:00:58:bf:6d:b0:a5:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4C:BF:96:AE:C8:F8:7E:AE:E6:21:3D:26:2D:68:F9:DE:4D:F7:57
X509v3 Authority Key Identifier:
keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:db:39:87:d6:35:cb:8b:ad:33:79:0b:f4:8b:22:ad:52:59:
36:57:b8:3d:46:59:af:92:20:42:74:94:64:9c:1d:f5:63:8b:
9a:ff:86:b4:1b:9a:0f:44:05:43:bf:52:65:0c:b4:50:50:3d:
4b:4b:ea:a6:5e:46:87:79:99:4a:98:c7:95:34:5d:36:49:4a:
77:c6:df:fb:e3:61:57:37:de:91:57:d2:58:93:d9:bd:33:97:
83:83:97:c2:16:07:a3:1c:c4:02:23:21:b4:26:a9:70:fa:ca:
e0:fb:cf:66:fd:61:ad:d6:d6:ea:c8:91:89:75:91:26:d0:6a:
16:0c:82:3e:f4:c9:27:62:a4:c3:6f:42:37:48:78:c6:7d:bf:
d7:84:41:19:3b:64:cf:d8:28:0c:9a:f7:d3:67:a1:d8:30:4a:
99:a2:13:10:24:df:6a:10:87:bf:7f:18:dd:48:ec:53:32:44:
a4:dd:d9:9c:9e:7c:30:3b:fb:4b:80:a8:44:8b:2d:27:5c:7c:
34:c9:40:33:bf:00:2b:08:57:6b:9a:3e:ee:50:87:4a:17:6e:
54:1c:d3:e2:fb:4c:c7:68:7d:e5:75:6e:6e:e2:7e:85:f5:14:
ec:e2:1a:60:c4:73:88:75:49:f8:12:ed:84:7a:97:8e:cc:fd:
f5:a7:16:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:32:49 2026 by rpki-client