
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
File: 7gc50FKNy0_OV40R9-w0sON0Us8.mft (raw, json)
Hash identifier: 8o646q5TbjGzn50bJJ5LemGPThK1Kf/Q1DVT+Vca7/0=
Subject key identifier: 3D:E2:4E:9F:0F:51:B4:E3:85:9C:3C:92:B8:0E:A4:41:5F:82:D6:75
Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
Certificate issuer: /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Certificate serial: 019F9022CB3D3FFC70D9FB240F3C2A5D4870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
Manifest number: 1614
Signing time: Thu 23 Jul 2026 18:00:27 +0000
Manifest this update: Thu 23 Jul 2026 18:00:27 +0000
Manifest next update: Fri 24 Jul 2026 18:00:27 +0000
Files and hashes: 1: 2sKAiZ30G6oJLAKluK9x1BnfKC0.asa (hash: 6nrWkagWhoGD+Qfsj/tM3pqrkbyN5EDHkHagAl4HLIw=)
2: 7gc50FKNy0_OV40R9-w0sON0Us8.crl (hash: mvcLzmF8P6Y9FdwO0otPevl/npltvj91lOkMRUZXPSI=)
3: JcR3YDi06JT6Wl_eQYsoL_-4XeY.roa (hash: jOukTvc7ghec56xAJX59+DDpg3Q2klioM1BU5lwJY5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:cb:3d:3f:fc:70:d9:fb:24:0f:3c:2a:5d:48:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Validity
Not Before: Jul 23 18:00:27 2026 GMT
Not After : Jul 24 18:00:27 2026 GMT
Subject: CN=3de24e9f0f51b4e3859c3c92b80ea4415f82d675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:06:9e:b1:f7:6f:15:95:0b:81:ac:00:72:af:
0c:bc:d2:67:9d:6f:1c:3c:4d:18:22:12:65:5c:d3:
86:ac:7b:60:7a:08:55:4b:09:c3:39:80:1b:c8:c0:
3a:0a:ba:47:0f:d4:6b:23:31:3f:a6:3f:88:78:45:
77:2f:56:fc:6b:3b:28:14:dc:08:50:2d:8b:3f:2c:
59:7f:86:ee:65:ce:d6:dc:d7:99:7c:92:f8:43:e4:
18:22:62:fa:aa:56:d0:f1:70:2a:a0:56:1c:99:0f:
94:0d:a9:3e:a9:11:50:e9:65:37:86:b6:f3:2a:ae:
65:d4:98:11:b3:d0:8e:8f:11:fc:96:4c:0a:6b:1c:
71:ab:91:a5:1b:aa:9b:3f:19:21:c3:84:92:37:41:
ea:fc:fc:fc:f6:84:d6:b5:11:da:6e:9b:d5:54:46:
5f:65:4c:4e:df:44:a1:2d:2e:38:37:0c:54:52:78:
47:6d:c6:09:eb:e8:72:c3:88:01:02:14:62:15:6b:
96:65:24:09:04:02:1d:ef:8d:ec:ee:aa:73:bc:89:
2f:fa:c0:73:89:04:38:b3:2d:17:a5:62:aa:a5:a5:
32:13:4c:32:01:92:36:17:a7:d8:c4:59:20:50:a0:
83:43:59:ef:66:95:f9:f0:73:06:1d:07:51:68:bd:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E2:4E:9F:0F:51:B4:E3:85:9C:3C:92:B8:0E:A4:41:5F:82:D6:75
X509v3 Authority Key Identifier:
keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:c7:bc:d5:6e:54:8e:86:f1:ba:0c:28:31:47:13:b4:39:3d:
56:90:33:eb:54:53:93:02:12:a9:cf:24:21:55:e3:3c:c6:96:
d5:6f:e1:d0:c6:8d:4e:95:f6:aa:c9:00:f4:a2:5c:fe:fe:35:
98:83:c4:e4:3d:7e:fc:cd:2c:d6:b4:9d:a6:ed:fa:5a:d4:11:
c2:5b:c5:d2:f6:ea:26:1a:e3:62:42:c5:aa:ed:de:cf:65:00:
c8:84:26:9d:ad:2e:36:d3:a3:39:04:a1:62:1f:a2:f3:ec:57:
29:f5:42:f0:7f:79:34:ff:fc:0e:bb:7f:0b:ba:4e:1b:46:45:
54:39:85:12:3b:12:14:47:b6:35:80:fe:47:a5:ae:9e:4c:48:
57:2c:5a:e0:89:e7:cd:e9:2b:64:1b:8d:9e:c5:4c:f3:69:fc:
eb:56:ce:2f:b4:3d:34:43:b5:49:0b:53:6f:93:5d:71:61:06:
92:f6:99:b2:26:76:d4:38:55:ff:6a:10:e4:39:e0:64:9b:1a:
ce:46:d0:d6:dc:c5:6d:9f:8d:a8:5a:4a:77:a6:fd:6b:23:4c:
2c:c3:df:98:35:15:75:96:0b:76:f7:cb:9c:f1:f6:1c:9b:f0:
06:1d:48:5e:fa:51:4a:7a:9a:68:be:45:b2:2d:3c:14:92:57:
d5:9c:ac:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIss9P/xw2fskDzwqXUhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDczOWQwNTI4ZGNiNGZjZTU3OGQxMWY3ZWMzNGIwZTM3
NDUyY2YwHhcNMjYwNzIzMTgwMDI3WhcNMjYwNzI0MTgwMDI3WjAzMTEwLwYDVQQD
EygzZGUyNGU5ZjBmNTFiNGUzODU5YzNjOTJiODBlYTQ0MTVmODJkNjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QaesfdvFZULgawAcq8MvNJnnW8c
PE0YIhJlXNOGrHtgeghVSwnDOYAbyMA6CrpHD9RrIzE/pj+IeEV3L1b8azsoFNwI
UC2LPyxZf4buZc7W3NeZfJL4Q+QYImL6qlbQ8XAqoFYcmQ+UDak+qRFQ6WU3hrbz
Kq5l1JgRs9COjxH8lkwKaxxxq5GlG6qbPxkhw4SSN0Hq/Pz89oTWtRHabpvVVEZf
ZUxO30ShLS44NwxUUnhHbcYJ6+hyw4gBAhRiFWuWZSQJBAId743s7qpzvIkv+sBz
iQQ4sy0XpWKqpaUyE0wyAZI2F6fYxFkgUKCDQ1nvZpX58HMGHQdRaL2HcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3iTp8PUbTjhZw8krgOpEFfgtZ1MB8GA1UdIwQY
MBaAFO4HOdBSjctPzleNEffsNLDjdFLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84NTNlZTMtM2E0Zi00ZDk1LTliZGIt
YjAzYzJmYmRjNjQ0LzEvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84NTNlZTMtM2E0Zi00ZDk1LTliZGItYjAzYzJmYmRjNjQ0
LzEvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxce81W5U
jobxugwoMUcTtDk9VpAz61RTkwISqc8kIVXjPMaW1W/h0MaNTpX2qskA9KJc/v41
mIPE5D1+/M0s1rSdpu36WtQRwlvF0vbqJhrjYkLFqu3ez2UAyIQmna0uNtOjOQSh
Yh+i8+xXKfVC8H95NP/8Drt/C7pOG0ZFVDmFEjsSFEe2NYD+R6WunkxIVyxa4Inn
zekrZBuNnsVM82n861bOL7Q9NEO1SQtTb5NdcWEGkvaZsiZ21DhV/2oQ5DngZJsa
zkbQ1tzFbZ+NqFpKd6b9ayNMLMPfmDUVdZYLdvfLnPH2HJvwBh1IXvpRSnqaaL5F
si08FJJX1Zysaw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:10:34 2026 by rpki-client