Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
File: 7JJpGF9j3DNWA39xPOigkJ_wciU.mft (raw, json)
Hash identifier: C5yVhV7dLK0vXIoOeuyTvzgZuyZc9Gaxw7hu73QbGW0=
Subject key identifier: D0:4C:A8:FF:D0:53:8E:D2:0D:C1:01:6C:12:12:CD:67:FE:2B:95:F3
Authority key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
Certificate issuer: /CN=ec9269185f63dc3356037f713ce8a0909ff07225
Certificate serial: 019F94A4A543C2E1AD290774801A37E31116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
Manifest number: 0EC0
Signing time: Fri 24 Jul 2026 15:00:45 +0000
Manifest this update: Fri 24 Jul 2026 15:00:45 +0000
Manifest next update: Sat 25 Jul 2026 15:00:45 +0000
Files and hashes: 1: 7JJpGF9j3DNWA39xPOigkJ_wciU.crl (hash: 3PEgJNY7nIfwxEe2oRGugMK5kGxlWgceB6EAupJDyS8=)
2: svvoqJIRYC-HEv4mFDJ4yabrIfA.roa (hash: DylecbDSgd1YsXawir60/ZUXc9wMtcV4PzlLtSqtsUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:a5:43:c2:e1:ad:29:07:74:80:1a:37:e3:11:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9269185f63dc3356037f713ce8a0909ff07225
Validity
Not Before: Jul 24 15:00:45 2026 GMT
Not After : Jul 25 15:00:45 2026 GMT
Subject: CN=d04ca8ffd0538ed20dc1016c1212cd67fe2b95f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f7:35:b0:04:bf:7f:dd:8c:f8:d5:7b:5c:68:
7c:9c:96:ce:ff:2d:a0:ff:df:76:19:f8:c7:3a:a4:
28:0b:45:e4:71:c9:32:1e:e4:b4:9b:b3:46:0d:96:
83:16:42:83:51:af:6c:09:00:32:6b:97:0b:6a:b6:
8e:a1:83:c4:46:e3:a2:e3:2b:9f:ee:85:74:57:9f:
53:f9:04:a2:13:cf:88:30:0a:21:5a:2b:f0:a0:35:
b2:4a:d6:3a:cd:5c:0d:36:e1:e7:34:45:8c:b3:11:
51:36:7d:26:59:c2:37:c1:4a:a0:1b:71:ef:81:87:
37:03:17:d7:d6:1d:49:dd:b9:fb:ae:e3:67:78:a7:
96:db:0d:5f:20:ef:22:8d:a8:1a:4a:f3:fb:39:22:
23:1f:65:54:88:4e:34:20:87:bd:64:30:c0:b0:c6:
f7:f9:d8:43:e6:80:14:f8:62:c4:52:54:09:1d:00:
e8:f9:45:63:a8:7b:ff:1f:19:49:04:03:d7:69:5b:
6c:9c:4a:85:84:9d:3e:03:09:48:13:6e:54:ab:d4:
d8:50:27:74:d8:c0:aa:77:61:85:96:02:b3:47:df:
cb:8b:45:d0:9b:69:06:32:9f:53:d7:2b:50:6e:ee:
ce:3e:b4:59:d7:43:a2:bb:0b:d6:53:aa:a5:04:c6:
2a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4C:A8:FF:D0:53:8E:D2:0D:C1:01:6C:12:12:CD:67:FE:2B:95:F3
X509v3 Authority Key Identifier:
keyid:EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ad:e6:31:9c:06:da:4d:0a:69:c7:e5:8e:54:9c:52:74:20:
41:e4:d8:8b:76:6c:0a:ee:be:2e:53:8c:fe:3b:c5:65:13:58:
6e:11:78:b8:19:23:52:b6:f2:5d:03:23:b9:fb:19:dc:97:46:
aa:6a:84:0e:7e:42:83:22:a8:28:9e:77:67:66:48:26:e0:f8:
f9:df:a6:71:33:e7:cb:34:f3:10:9b:5e:cf:3c:07:08:81:ad:
48:36:16:68:0b:15:4d:2d:52:e4:be:c3:84:3e:91:68:50:3a:
7d:9a:9e:e2:26:26:8b:0e:39:d8:f5:4c:8e:48:f4:08:60:ac:
19:5b:89:e3:87:80:d8:4a:fb:f7:e8:17:9c:f6:c8:65:0a:e2:
1a:08:c7:0e:85:af:6b:68:c1:9e:f1:1b:35:33:c5:2d:1a:a3:
de:f8:d3:ed:dc:62:12:c9:fd:fa:63:0a:08:af:b4:5e:7d:5d:
9a:3b:8f:18:df:01:26:00:cc:c0:16:59:72:53:d4:b9:64:4d:
30:7c:ff:c7:fd:e1:4d:98:4a:ff:8d:e2:24:80:b1:31:00:b2:
f1:8b:84:7f:85:ea:fa:56:92:a2:3f:bf:c3:af:2f:44:06:c9:
09:38:70:9a:4d:8e:1b:63:fe:98:a3:d6:e1:9f:ec:8f:53:ef:
5c:ae:ae:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:01:48 2026 by rpki-client