Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: ciA5XnXwm3WX49n8UNZMMDeB/9H4QnOVusqtYsPh4b4=
Subject key identifier: 73:EC:80:23:66:9E:04:0C:73:7E:15:EF:D6:00:75:33:90:EB:50:C6
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 019F91A43971D55088BADCDD64B2C02224BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 01:01:26 +0000
Manifest this update: Fri 24 Jul 2026 01:01:26 +0000
Manifest next update: Sat 25 Jul 2026 01:01:26 +0000
Files and hashes: 1: 6CjF8Jlu6tuK8zsCRGmRKkMW1aY.roa (hash: cbJEUas+h/1ENIgGWWNamGqYchFhfCj4L7NJTrlZrxc=)
2: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: YfRUdj/utrvJqXSFlT6nQZQ9L8+1i1w0nhat1KsPKDE=)
3: sW8W0-8WOsG0evmu2fYzqrWdI9U.roa (hash: aDuewNAM6XmzF96K8nKeS1R/6Pbon3faWwSXg53klfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:39:71:d5:50:88:ba:dc:dd:64:b2:c0:22:24:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Jul 24 01:01:26 2026 GMT
Not After : Jul 25 01:01:26 2026 GMT
Subject: CN=73ec8023669e040c737e15efd600753390eb50c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:dc:ca:16:ca:fe:cc:75:21:da:6b:75:e9:
64:aa:21:d9:46:77:06:b0:49:ae:68:05:71:17:65:
ec:36:29:97:8a:f1:5c:98:c4:c2:ab:c1:23:ec:e2:
33:cc:68:81:1e:c3:ba:38:eb:19:90:67:71:f8:54:
32:ed:e5:b2:8b:9b:56:13:a9:62:fa:3c:96:3e:9e:
61:a9:90:3a:18:07:4e:64:63:9c:51:ae:38:1d:bd:
98:8c:51:6a:f2:db:55:0c:ef:7f:21:2d:7e:c0:78:
fd:11:45:54:a6:55:32:5f:97:ca:d1:22:96:bb:6b:
2c:bc:1b:99:2d:54:50:0d:d0:4b:35:4f:64:45:47:
0b:94:ec:6d:ab:d2:7e:d3:e0:c9:f0:75:41:9e:6b:
41:a7:ef:3c:69:a5:e2:73:f9:76:55:d5:78:81:d1:
0f:78:27:33:0b:66:50:ea:c9:d4:5e:fa:5b:04:f8:
89:92:83:eb:d2:d5:19:67:04:98:14:a1:fb:e4:11:
ef:f0:8f:c7:28:6c:c6:7d:e4:e5:86:f0:df:bf:c7:
21:c7:07:17:dc:67:9d:2f:95:b2:d0:29:93:57:a6:
fa:75:f2:2d:81:fa:fa:30:ba:7b:15:92:08:29:47:
32:13:72:f4:e4:99:93:c3:50:ce:6a:52:53:c2:d0:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EC:80:23:66:9E:04:0C:73:7E:15:EF:D6:00:75:33:90:EB:50:C6
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7a:a4:87:ec:06:b6:ce:d4:e3:5d:1a:89:1d:d0:49:00:f9:
81:e8:78:f4:f7:93:5a:17:6b:b1:9c:cb:bb:d8:ea:77:1b:ee:
52:14:10:f2:eb:e8:83:79:9d:08:4f:c5:2c:11:da:51:a1:0e:
ab:fc:e4:b9:70:7d:e0:c8:ee:d0:ca:9a:02:88:04:11:ab:69:
48:52:25:cf:88:c5:a6:54:0d:cd:db:d2:59:7a:58:a4:df:47:
e5:26:28:32:92:f4:36:a4:72:68:e2:4f:6f:ad:f7:59:4d:d0:
4b:64:a4:c9:84:d7:fe:96:5e:55:46:2e:82:f3:48:39:18:fb:
c2:44:cf:1e:f4:5d:1c:00:b4:13:74:32:3e:92:88:9a:64:55:
96:d5:4d:3d:45:1f:d5:4c:01:1e:36:ce:b6:38:c6:26:8b:3f:
a3:dc:7b:82:e1:7f:ff:dc:9a:d7:e5:34:91:53:bf:c2:e6:10:
8c:b8:0b:bf:71:b6:f2:1e:eb:a9:9a:07:d4:3a:88:9e:af:ad:
41:0a:59:f7:da:3d:93:3f:75:17:8c:9e:5c:f3:35:3b:b4:c9:
85:e0:b3:39:45:bd:98:04:cc:b9:f2:11:8b:cb:18:72:93:ab:
07:21:92:8e:48:d6:93:b2:71:f0:e6:e0:fc:ca:de:be:e3:69:
38:94:14:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:30:09 2026 by rpki-client