Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
File: 7onRezmnaEppVLl7iw-6x9SJVMo.mft (raw, json)
Hash identifier: O4gg+kdzXwTz/ZWunyXII3cn5PSEAzUN01erzQHPReg=
Subject key identifier: E4:98:3C:46:B0:3A:F3:31:7E:81:C1:48:55:E3:46:65:80:36:3B:7E
Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
Certificate issuer: /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Certificate serial: 019F927F63E79C01C76D91459EAFC1CB17C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 05:00:49 +0000
Manifest this update: Fri 24 Jul 2026 05:00:49 +0000
Manifest next update: Sat 25 Jul 2026 05:00:49 +0000
Files and hashes: 1: 266U8v32AIwFxpg_FZxsUC2Aiq0.roa (hash: pX+SOE6s9KPyp5jmWUGDvGzaItPjX+1uMV/qoRqubBk=)
2: 7onRezmnaEppVLl7iw-6x9SJVMo.crl (hash: nlH9YL70kGBgWPISs/D+8MxtV6hkJJw1dCE0dR9Adqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:63:e7:9c:01:c7:6d:91:45:9e:af:c1:cb:17:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Validity
Not Before: Jul 24 05:00:49 2026 GMT
Not After : Jul 25 05:00:49 2026 GMT
Subject: CN=e4983c46b03af3317e81c14855e3466580363b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:28:f2:c2:24:42:cf:04:67:36:43:a2:61:b7:
94:50:6b:77:6c:4c:71:36:bb:62:09:5d:69:fa:dd:
50:1e:d9:e3:ac:79:2f:78:ce:70:a1:06:66:ba:f9:
e9:a7:1b:f9:19:04:4e:2b:92:d2:d2:df:cf:28:a5:
6d:90:8e:db:90:63:19:10:b0:9b:ca:7f:a0:8c:19:
a1:c7:d3:ea:8c:6f:fc:45:87:d1:bf:76:68:78:9a:
41:ad:7a:ae:2e:5a:83:bc:f5:2d:1e:40:92:26:a3:
8e:c2:a2:0f:d0:d5:89:ca:ab:73:76:9c:91:30:29:
c7:3a:21:9b:d9:15:d6:53:17:d4:e0:8c:1b:da:77:
0b:5f:9e:be:a0:0d:84:e3:70:e1:83:7d:af:20:7d:
18:f3:35:d6:e6:e2:70:83:e5:49:e2:dd:19:ef:eb:
d3:42:2d:10:eb:fa:b0:70:3c:e2:ae:04:fb:63:fb:
1c:fb:d3:ad:11:5c:2d:a0:0a:1f:f2:48:6d:b8:d6:
dd:74:e8:5c:df:84:cb:85:cf:17:ec:32:ba:7d:77:
48:5a:87:ff:5e:da:18:ca:de:c8:25:38:26:08:ef:
a7:7e:91:1e:66:0f:31:6c:c4:5e:d5:5a:be:ef:08:
17:09:d0:c4:4e:a8:02:0f:ac:62:cb:4d:bc:8a:99:
4c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:98:3C:46:B0:3A:F3:31:7E:81:C1:48:55:E3:46:65:80:36:3B:7E
X509v3 Authority Key Identifier:
keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c1:7e:51:80:3a:03:7b:d9:6f:77:21:53:fc:ab:64:85:9f:
16:94:cc:fd:5e:50:b9:be:e5:da:63:36:fc:7a:b2:1f:7f:04:
e7:92:da:05:8b:b2:3e:8d:86:0e:65:61:3f:d9:5f:04:86:3b:
3d:74:54:b6:1c:62:39:5e:4b:78:cb:16:e2:7f:f2:d0:08:1f:
70:d4:3d:8b:3c:59:80:a4:56:55:ef:7e:81:19:1e:d4:63:f8:
46:06:fc:76:c0:ce:20:e8:1e:ab:9b:08:d9:3f:54:57:1a:99:
49:99:5c:0d:aa:68:ae:96:29:df:41:ce:1d:76:80:bc:41:f7:
76:30:24:59:5d:4d:d1:9f:ac:81:a1:9a:a9:f9:e6:dc:1b:bc:
b9:dd:85:99:60:09:db:80:ef:68:ab:b2:45:08:3c:0d:67:c4:
d0:b6:b8:56:70:68:cf:dc:39:19:e4:af:44:49:c0:07:ac:c7:
60:fe:f3:18:6f:d4:86:67:a6:5f:a3:c3:4c:58:0c:46:3c:52:
11:19:58:f6:d8:8f:9c:16:ea:9f:7d:0d:2e:26:1a:b7:06:c3:
8f:eb:91:99:88:28:66:30:a5:20:fa:e5:63:b9:85:2a:31:cd:
20:b5:df:f3:b4:d8:6e:77:63:fc:7e:82:49:09:a4:2c:26:ff:
f5:03:8d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:03 2026 by rpki-client