Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: 7awdVZIgDtkxLEdOK0w2/bBk5ClC8b73WdXdOxeP7g4=
Subject key identifier: 2C:70:77:E6:BC:7C:39:4D:E6:8A:4F:B7:7D:63:5B:D0:D1:F7:6B:FD
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 019F92ED4DFA2FFAACE56AC191DD37F24C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 07BC
Signing time: Fri 24 Jul 2026 07:00:53 +0000
Manifest this update: Fri 24 Jul 2026 07:00:53 +0000
Manifest next update: Sat 25 Jul 2026 07:00:53 +0000
Files and hashes: 1: KV9d7BSlB2bKlwJY62KIXsG4Wz0.roa (hash: R5kvK926QqdFk8i2+ipQZcd5Ih9FO34LMPFzB8nRWl4=)
2: nM83HlJMcq3XGr88tOJ2Jgml18Q.roa (hash: iKLSCb2eHBRO55h1ctPBOi2BUx1jjcn6kLFniadlimw=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: /rhqcRH7MNMLMF8fYRLgpbFnfWBTB9PR4NTr30csoOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:4d:fa:2f:fa:ac:e5:6a:c1:91:dd:37:f2:4c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Jul 24 07:00:53 2026 GMT
Not After : Jul 25 07:00:53 2026 GMT
Subject: CN=2c7077e6bc7c394de68a4fb77d635bd0d1f76bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:ef:44:72:64:4f:9d:0d:74:6d:b7:f0:7c:
31:9f:42:4f:32:5c:34:e9:00:32:7e:e5:b3:a5:fd:
31:7b:b1:93:4e:7b:0a:c7:cc:c1:6c:6a:c7:a6:ed:
1f:b4:7d:e6:41:94:a0:35:27:73:e5:e7:57:76:df:
03:60:18:ce:e4:82:8c:7b:98:b3:fb:30:6a:02:b9:
33:bd:bf:e4:1f:84:de:60:3c:ba:29:ea:a6:eb:76:
97:d5:64:72:29:b3:e6:5c:69:bc:0f:1e:27:2f:70:
42:7f:05:fe:63:cb:71:e6:04:d4:07:fd:96:9d:bf:
3c:30:82:93:bd:7a:af:8f:c8:76:25:54:04:51:4c:
6a:0a:da:7b:86:60:4a:e4:9f:8d:5a:44:79:a3:23:
17:2c:9c:9d:f5:50:14:15:78:54:85:70:5a:d3:93:
14:79:a9:84:57:5f:00:71:b7:3d:19:8b:2a:0a:b1:
f4:6a:ce:0b:af:6c:17:12:ab:ca:18:1d:67:8b:04:
04:6e:5b:04:07:61:0b:dc:4a:40:82:27:51:16:79:
c0:fe:1d:89:ac:6e:49:f4:d9:dd:2e:e9:ef:33:60:
b4:a5:ca:6d:eb:4f:37:7b:40:c3:31:08:a8:0b:65:
5b:28:b9:49:87:c3:df:cc:e5:49:3d:ba:61:da:c8:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:70:77:E6:BC:7C:39:4D:E6:8A:4F:B7:7D:63:5B:D0:D1:F7:6B:FD
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:08:7d:51:26:29:14:a3:66:5f:8e:57:86:44:6a:e2:a0:24:
0d:b5:af:e0:6b:b5:a2:e7:34:57:39:fb:ad:95:aa:88:61:b4:
33:2e:0b:b4:39:4d:b0:31:a3:29:25:8d:f3:fe:78:d5:f1:b0:
a4:9d:fc:e9:bd:46:32:37:49:3f:01:79:b5:eb:fe:f6:70:f8:
f1:72:39:7d:75:98:fd:6f:74:77:91:49:1e:73:bb:2e:db:00:
fb:3b:c6:b6:f3:01:75:53:dd:a6:12:5e:df:ce:1a:e9:0e:15:
8e:0b:bf:62:65:64:f3:db:16:6f:67:dd:72:b4:ff:b3:73:a3:
88:a5:6e:da:73:95:ca:85:bc:0d:c2:7f:fa:66:69:87:ea:03:
76:de:82:5a:49:e3:51:15:03:48:a9:9e:30:d3:64:dc:52:2c:
b5:f6:97:96:5f:a4:30:58:b5:5d:7d:6c:f4:16:0a:12:85:3f:
76:0e:a7:9d:a5:ce:88:60:ce:89:9c:6f:ff:f0:82:e7:8a:3f:
a3:1a:14:69:b7:3c:31:45:c8:8d:55:25:3e:df:04:b0:c6:c0:
b6:82:e6:1a:05:82:a2:c3:dc:7a:73:00:b8:b6:27:07:28:45:
5b:7c:a8:4b:02:ff:ce:c5:6c:75:8a:61:44:ca:5d:9e:dd:91:
b5:3b:34:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:25:18 2026 by rpki-client