
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
File: S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft (raw, json)
Hash identifier: q5jnaEa1WjeMfp/4XjSZfKj36lcaNmBDRS2fgZ79krA=
Subject key identifier: 25:0F:BF:7F:7A:7C:10:60:06:A8:B2:DF:00:8B:53:4E:C2:21:D8:EC
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial: 019F94A43F78427C45541054FE897300D439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 15:00:19 +0000
Manifest this update: Fri 24 Jul 2026 15:00:19 +0000
Manifest next update: Sat 25 Jul 2026 15:00:19 +0000
Files and hashes: 1: 0Zc__kN3HwhsJoBnO7wdin2RQss.roa (hash: CXzPpL1BSz7J6w6QJARe0QxvknuDCjM8a8ZeWT+w+XI=)
2: 8NpquuKtmcdUrFKy47Sj9fT29Os.roa (hash: JUFOjZ1XBHrYKPUOA3cAyXpp/9fbGuZHL5PKFslhQ7k=)
3: S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl (hash: K246gT6gge5C9FkDecZO9sa/p/zY88wXMV7d8yV3eiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:3f:78:42:7c:45:54:10:54:fe:89:73:00:d4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Validity
Not Before: Jul 24 15:00:19 2026 GMT
Not After : Jul 25 15:00:19 2026 GMT
Subject: CN=250fbf7f7a7c106006a8b2df008b534ec221d8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:0c:e7:78:cd:a8:96:a3:c6:fa:51:bc:9e:
d9:34:bd:5a:f5:83:e9:ec:6e:d0:5e:5a:e4:56:21:
44:f9:03:42:70:09:a7:10:65:1c:04:66:21:2a:68:
d0:32:c1:4b:6c:00:a5:dc:21:e1:1d:97:bd:d6:48:
31:3d:68:54:80:9a:29:d9:c2:ad:a1:f1:77:40:f3:
52:db:5e:ca:27:39:a2:2f:d3:07:17:92:31:59:f5:
a2:4c:72:bd:6f:ba:d3:c0:ce:a3:ba:de:26:f3:56:
6c:84:9a:b0:87:bc:e5:16:63:29:19:89:11:6d:7a:
bc:a8:fb:df:0e:a0:7b:9e:d5:d0:25:45:ed:ae:b8:
4c:15:6f:32:35:13:46:95:ff:6d:05:82:f6:21:fe:
8d:41:1e:ba:2e:77:9d:ff:be:77:51:0e:7f:6c:9e:
10:b1:65:7f:9e:dc:13:a5:36:ac:dd:49:3c:35:3b:
72:8f:7b:06:d7:b4:cb:fa:00:ad:e2:b1:17:71:75:
29:3f:27:5c:eb:b6:8d:70:67:b2:6d:69:04:27:b5:
95:21:bb:08:43:b1:9c:d6:37:f6:57:4e:9c:fd:18:
4b:bd:b6:de:8a:8c:74:54:3f:43:bf:25:33:a3:e8:
80:b1:f6:3e:75:46:83:91:77:6e:48:f7:20:b7:35:
12:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0F:BF:7F:7A:7C:10:60:06:A8:B2:DF:00:8B:53:4E:C2:21:D8:EC
X509v3 Authority Key Identifier:
keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:82:d4:96:d0:a8:ea:68:a0:23:d0:af:62:42:11:b4:e8:ad:
b1:6d:95:fd:9d:11:74:d6:b2:e1:5b:6e:1a:b9:3f:61:7d:22:
95:de:0b:d2:02:04:42:cf:2d:d9:99:9d:a5:3a:01:29:81:42:
32:ce:db:1e:1d:1d:18:d5:39:ac:43:38:e7:bf:40:7a:e7:c4:
b6:92:01:8b:a1:ae:dd:b7:4c:b6:90:60:51:b6:03:c1:a7:1d:
41:04:22:2d:67:8b:3c:df:40:85:c7:7e:3d:6e:5f:45:17:af:
f2:c2:c3:ca:f9:09:ff:20:b3:1a:c1:bb:c6:ed:a8:f7:ed:83:
d0:9b:bc:c3:4f:b5:42:7b:73:12:cc:07:84:8a:ac:94:84:87:
10:93:23:40:e8:d6:db:13:4f:ea:d4:18:21:6e:a1:ff:56:51:
bd:e1:4f:76:3e:61:23:75:e5:30:1f:b4:e2:98:7a:58:03:5d:
9e:a2:ea:47:31:0b:8a:ef:ed:80:6b:91:71:28:ec:6b:d1:92:
52:f8:8f:bd:68:c6:ec:89:14:4b:25:e1:18:61:7f:b7:e7:21:
92:7d:7f:86:f4:cb:6c:86:53:d7:10:8d:62:21:6c:65:c9:74:
84:bc:f3:a4:9f:cf:d5:7b:b9:38:a0:1c:98:ca:60:61:2d:87:
3e:70:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:41:55 2026 by rpki-client