Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: 3WzzYOv7OOqkeUs7YCZc4+BQ7iv3KHaPQ2zvXRLO/z8=
Subject key identifier: 12:96:00:42:2A:5B:38:06:58:4C:95:61:23:64:0F:30:EA:FD:88:AC
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 019F9324079A7725ABE1DC859D1A01507301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 1453
Signing time: Fri 24 Jul 2026 08:00:39 +0000
Manifest this update: Fri 24 Jul 2026 08:00:39 +0000
Manifest next update: Sat 25 Jul 2026 08:00:39 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: Vuzdbc8xyQJXIh/6E8yhrZhO2xLary1muxUiN2KQgvg=)
2: _Uw3PwW3zuhX_9qdNVHM9xLSh_Y.roa (hash: pJtmufqjt3E+bTnB46Z/8QQdZ6WxLHIqysmmyqJfzzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:07:9a:77:25:ab:e1:dc:85:9d:1a:01:50:73:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Jul 24 08:00:39 2026 GMT
Not After : Jul 25 08:00:39 2026 GMT
Subject: CN=129600422a5b3806584c956123640f30eafd88ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:58:a9:32:24:43:bb:e7:d6:8d:4d:1d:67:
cc:c7:3b:3a:f6:18:f9:fc:7d:77:ef:7b:2e:a9:1e:
c2:26:c7:c0:9d:ba:ea:43:38:ff:86:8f:c6:60:0f:
36:d7:73:88:94:e9:23:b9:ed:60:9d:15:87:a8:1a:
eb:09:3a:0d:8d:b3:63:ad:66:31:cd:6d:9e:34:45:
2a:44:db:48:de:74:de:07:da:49:df:5e:4a:fc:fd:
5e:73:4b:b8:5b:5a:19:35:e5:d8:23:0f:3e:19:2c:
7b:de:6e:d2:3b:8c:eb:44:9e:f3:11:e5:de:bc:ec:
9a:58:38:f9:5f:a9:f2:11:b9:1b:6c:08:c5:79:74:
54:ad:5c:ea:73:3a:0f:bd:60:8c:53:86:ae:30:a0:
a3:54:0b:53:ea:ab:60:39:a8:07:6a:8a:80:c0:ac:
e1:3c:57:26:97:de:bc:20:a4:78:4f:10:45:ef:bb:
5b:77:39:50:84:90:c4:b1:cc:0d:e2:f0:2c:1b:e8:
62:f3:59:30:83:0d:39:b0:c2:c4:3c:d0:34:6f:b5:
11:c2:fe:38:cb:32:24:e4:02:79:5e:c5:4d:ea:a6:
e2:2b:f9:cb:a6:13:ae:39:30:c0:76:f8:29:f1:79:
22:e8:8d:25:58:69:ea:03:0d:3c:4e:3e:34:3c:6e:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:96:00:42:2A:5B:38:06:58:4C:95:61:23:64:0F:30:EA:FD:88:AC
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c2:cf:3b:a3:50:28:a0:6b:71:e5:f1:62:98:d9:ff:93:d7:
17:fb:c6:c0:d0:9f:25:b4:0a:b3:56:10:50:f8:eb:9b:d8:73:
ef:74:93:6a:dc:76:70:19:a2:42:98:37:48:ee:8b:a4:53:d8:
50:4e:e9:f2:09:17:90:29:fd:cb:8c:a4:42:0a:0a:49:03:63:
91:0a:14:0c:6b:fc:38:3b:f3:6b:ce:5f:91:52:c4:8a:cb:fe:
d9:07:c8:fe:b5:89:1d:a4:23:a5:a4:e8:a3:bd:06:ff:44:ee:
45:ed:50:62:66:a9:f6:a2:59:e0:b4:a2:4c:b7:45:d9:0e:99:
90:8b:16:ef:ee:31:0e:2d:40:6e:86:cb:ff:11:ad:4d:1e:f3:
33:0e:93:7f:52:b7:79:2e:78:ce:55:7b:90:37:a9:0e:ff:c3:
db:b7:e9:3f:76:6f:24:f5:12:a7:32:70:53:d8:67:ff:28:10:
8f:8a:60:a7:59:9e:83:27:19:48:49:a8:6a:78:5e:5e:45:1c:
0e:ad:55:a4:44:d6:fd:98:2f:62:52:ea:77:3b:93:a7:d4:c3:
f7:60:1a:1f:1d:94:23:7b:97:9d:ec:ad:3e:ed:ee:ec:61:1f:
12:7d:82:1d:42:64:cb:25:81:14:8f:35:fc:48:57:ce:41:53:
b2:b5:c3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:54:43 2026 by rpki-client