Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File: 7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier: iOkzMHsvVF27vw8LoIRz/rnlvJwmdbCBn38wy3DZo4s=
Subject key identifier: 1A:AE:A3:56:18:6E:D6:C6:99:AB:27:6B:A9:9C:7D:C5:AF:E9:D3:A5
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 019F90FF747972B8CD0DE1D838DAE68CE499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 22:01:28 +0000
Manifest this update: Thu 23 Jul 2026 22:01:28 +0000
Manifest next update: Fri 24 Jul 2026 22:01:28 +0000
Files and hashes: 1: 0_75cziqkrd_avFDUZ9rg7qilxA.roa (hash: pSQt5ocfFcDKXdLoPRHR826k+pr8i3n1PKJhobyxS7Y=)
2: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: jdhL0utl6A1ZzkDWeTq3vCBYc+fITOWXqsYJAbr0RbI=)
3: HkkRPwqU3p5aRopaf6XmKJHJOS0.roa (hash: rwteSwkgkB56v9QAYH409kxEVNO2s78pdzGxZ9J+cBI=)
4: OLd3XQLlCLw9LdNyxml8_t8xuEg.roa (hash: CeqIhEYWVzjJk4bpmS5ELgvmNglk0SZVe+OxNRFsLsg=)
5: YFvRu6poI8Ij__cAkw9ZXzn1ELA.roa (hash: TFdZLvuT5jh6qUmHTvzmxP9xeFFqlGN1y9JFOGD2i4E=)
6: YeiOtzdwnFZaRqUumW9LmExU9wM.roa (hash: MQxdsF/k+I/4Kf6o+ulDftRoc2iIVZbE/JYfdEq0Q2c=)
7: fXNtDKuxKl9PcIOvEE_JPpC6Emk.roa (hash: d9XcOkmKMoLj3DydzQnJz/zsoCrdK+ingQkEPwtmOSU=)
8: vKDDTdeKpC38SOoCmTQDNYKcN_A.roa (hash: 1c+RNvMiXqFMlXYtXBUL17aJsh89UBFVQ2ryMtknJE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:74:79:72:b8:cd:0d:e1:d8:38:da:e6:8c:e4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Jul 23 22:01:28 2026 GMT
Not After : Jul 24 22:01:28 2026 GMT
Subject: CN=1aaea356186ed6c699ab276ba99c7dc5afe9d3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:92:4a:40:53:f3:c3:82:09:4b:f2:7f:15:a1:
c6:06:6c:bf:3f:7c:59:ad:46:18:6a:a2:49:0d:49:
e5:40:db:d9:91:bb:9b:46:2b:f5:76:4d:b3:3a:b2:
c7:d9:a1:2f:f3:cf:3f:59:21:46:60:73:b8:50:68:
26:c0:6e:01:5e:72:68:dc:10:2d:05:a2:a3:c9:82:
c7:45:68:b2:e5:0a:5d:ce:68:18:7b:e8:1e:e3:33:
29:7b:1d:47:9e:d9:63:bb:08:38:68:d2:13:91:87:
94:85:47:ed:6d:da:b5:33:b9:b3:ec:56:83:96:aa:
67:16:61:04:e5:99:64:00:b3:23:a0:0e:13:02:fd:
45:c9:05:28:b6:9f:7f:ea:25:a7:fc:39:97:d7:98:
52:a2:2e:f9:ac:da:fe:82:d1:67:23:0f:0a:87:11:
bf:89:e9:56:1f:e4:5a:05:2c:f5:a7:32:47:22:52:
2e:c8:1f:6e:6f:36:06:63:2a:03:2c:11:2a:d2:f4:
0b:65:3a:83:05:e7:75:98:9b:9c:5f:4c:d4:0a:23:
08:d6:b5:3c:ea:9b:2a:dd:24:49:f5:21:16:24:ba:
c4:91:c2:4d:83:c9:52:d8:4e:a9:d8:f4:d3:90:26:
ed:e4:b9:24:86:88:56:d9:7a:be:cb:46:c3:05:52:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AE:A3:56:18:6E:D6:C6:99:AB:27:6B:A9:9C:7D:C5:AF:E9:D3:A5
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c2:49:27:83:81:4b:f5:3d:c5:97:1c:9f:1e:0e:4b:46:39:
b6:58:0c:5f:eb:86:2e:08:09:06:64:8a:70:f1:21:d5:aa:87:
0b:46:b9:1c:2e:7d:1d:bb:9e:5d:93:92:c0:ea:bd:25:4f:d8:
86:dc:98:27:5d:35:11:7f:06:f5:71:24:e8:dc:2f:b9:a8:86:
62:48:aa:19:c5:08:0c:33:46:34:73:45:c1:4f:2f:91:f4:4a:
8e:84:68:7e:47:01:c9:df:b1:ad:e7:08:66:d8:4d:56:2a:71:
6d:e8:4b:28:8f:94:29:30:bb:95:52:85:8c:10:a3:b1:40:37:
00:43:65:93:df:ef:c2:b2:08:5a:37:18:6a:bd:e0:8c:ac:ca:
23:fe:74:ef:4d:45:34:d4:43:9e:dd:de:46:80:7d:e8:60:4f:
be:24:45:8b:89:f1:8d:0a:64:85:53:93:5d:0e:8b:fa:ac:4b:
db:06:6b:1b:40:a2:52:0b:df:b0:2b:3d:ff:5f:ca:d0:99:6a:
f1:51:e9:fe:69:37:43:7f:dc:4b:ee:b9:fb:37:33:64:f2:6d:
cd:3f:55:48:03:29:b4:49:d5:3b:32:c5:85:5c:61:67:ee:01:
10:71:71:1e:a7:d3:8b:fc:18:2e:a6:3a:3d:68:9d:f6:5c:f6:
50:19:da:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:35:36 2026 by rpki-client