Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
File: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft (raw, json)
Hash identifier: s9s1rFdffDDl/wetYQBdw2exFmUWifH8vbe03f+Ry3g=
Subject key identifier: 57:1E:37:4F:BC:2C:03:5F:43:96:84:95:C3:48:EB:55:57:2B:58:64
Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
Certificate issuer: /CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Certificate serial: 019F90912BFCD314F49BDD8252EE6BE21F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
Manifest number: 1032
Signing time: Thu 23 Jul 2026 20:01:00 +0000
Manifest this update: Thu 23 Jul 2026 20:01:00 +0000
Manifest next update: Fri 24 Jul 2026 20:01:00 +0000
Files and hashes: 1: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl (hash: z1drfBFGA1rtbcYagNdnbrZeI7ArC4YhG8VBfBr1Js4=)
2: 9oOBFeGSrwdju604vrWfdCoTauM.roa (hash: pd4ZMcD0zoZVQx34tpixPFz8KnUMJc8/XoRGbitBdPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:2b:fc:d3:14:f4:9b:dd:82:52:ee:6b:e2:1f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Validity
Not Before: Jul 23 20:01:00 2026 GMT
Not After : Jul 24 20:01:00 2026 GMT
Subject: CN=571e374fbc2c035f43968495c348eb55572b5864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:dd:40:cf:b8:3f:d5:1d:92:fd:10:80:cf:
40:94:39:7b:1e:34:f9:08:ff:df:f4:aa:28:40:be:
29:b6:90:e1:3a:ce:b0:a3:ee:94:fe:e5:d0:47:97:
1d:fc:a0:8d:d4:c0:78:9f:47:9e:7f:b0:45:5c:8d:
8a:3d:de:26:2a:7c:93:32:0e:5d:c8:d9:9a:f7:76:
e1:0d:ac:55:20:ac:8c:11:a4:01:96:a7:3d:2e:91:
bb:66:a2:1a:22:be:ce:1b:71:59:5d:d9:42:f7:c4:
31:65:30:1f:28:d2:61:32:ad:1b:81:ca:b0:77:6a:
3d:66:20:3e:41:55:5a:fa:2f:5c:22:b0:06:48:97:
7b:1c:e1:38:b6:c8:48:22:36:4d:c8:80:ee:21:15:
6b:8e:f3:e0:17:cd:54:a2:8e:1e:7f:73:07:13:e1:
82:eb:24:9c:dd:b3:1e:bd:34:cc:8f:e5:dd:0a:69:
5b:90:bd:53:aa:8f:16:75:90:53:6a:9c:4b:8b:21:
9d:30:bc:38:8e:0f:59:52:7b:2b:38:a1:d1:ce:80:
2d:df:5d:23:ed:05:90:59:73:ea:7b:8b:9c:0a:91:
58:3c:29:47:5a:fe:2a:f8:49:b4:5c:e6:8f:a1:5a:
3c:84:34:be:4a:77:cd:fd:54:f7:bf:b5:ec:c1:ae:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1E:37:4F:BC:2C:03:5F:43:96:84:95:C3:48:EB:55:57:2B:58:64
X509v3 Authority Key Identifier:
keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a7:40:1a:52:83:e2:93:e9:a9:43:fb:7d:a0:8e:91:04:29:
85:82:9b:db:4e:40:de:ae:9a:05:cc:e2:a1:27:95:aa:7d:43:
b4:2f:12:23:78:20:ed:e3:fe:f2:4d:cc:2c:49:18:d0:56:88:
f6:5f:59:52:7f:5b:7c:77:4c:a4:d4:85:4d:63:90:d6:0a:1d:
a9:d5:51:7a:82:12:de:2a:7f:40:38:f4:49:18:d5:f3:b2:3d:
60:92:b8:16:1f:c3:ee:90:dc:64:e0:20:c4:28:d1:47:5c:ff:
bb:02:14:d1:f4:db:12:b3:f2:a8:cc:ae:2f:c3:2f:74:25:a6:
60:19:50:28:6c:cf:1a:6d:af:73:9d:03:42:5c:e7:dc:aa:0f:
cf:63:5d:3c:d8:39:64:99:3b:d1:7f:5a:54:3b:ff:4e:0c:59:
fc:96:41:59:fa:d9:2b:0e:e1:b5:f0:5f:e5:bb:ef:d9:2a:78:
9a:f9:c1:65:bc:10:13:f0:54:89:dd:45:41:75:bf:64:7b:73:
9b:9e:3a:c3:c9:45:a1:42:65:d7:5c:16:ee:ef:75:14:59:60:
0c:bf:32:c7:75:56:d1:79:cf:75:6d:b5:d0:f8:60:98:40:20:
8a:16:8a:3f:42:f1:86:96:d5:69:63:93:1f:6a:c7:61:ce:13:
12:70:b2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:29:01 2026 by rpki-client