Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
File: 7HB5DNzgwZKsiG89nvcl85lRg5g.mft (raw, json)
Hash identifier: PJtB910z/1gKW4a0M6Fi69FXJs+xrcM/44YjshZ+Nu0=
Subject key identifier: A2:CE:63:CB:5C:20:70:FF:51:82:BC:71:18:F6:63:CD:1E:1D:34:84
Authority key identifier: EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98
Certificate issuer: /CN=ec70790cdce0c192ac886f3d9ef725f399518398
Certificate serial: 019F935B35B884F98701F50951620C4AA4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
Manifest number: 0250
Signing time: Fri 24 Jul 2026 09:00:55 +0000
Manifest this update: Fri 24 Jul 2026 09:00:55 +0000
Manifest next update: Sat 25 Jul 2026 09:00:55 +0000
Files and hashes: 1: 7HB5DNzgwZKsiG89nvcl85lRg5g.crl (hash: D5T4Cwk/iyeV0SBU9un9nGvH6brXSAoGHQxxki5THho=)
2: SqwoZLt0wGfQ52uqKIyPq1MR0n0.roa (hash: 54gdg5z/WirnRdadVGX+GzAUp4jdY5Mqe47XSjLSOVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:35:b8:84:f9:87:01:f5:09:51:62:0c:4a:a4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70790cdce0c192ac886f3d9ef725f399518398
Validity
Not Before: Jul 24 09:00:55 2026 GMT
Not After : Jul 25 09:00:55 2026 GMT
Subject: CN=a2ce63cb5c2070ff5182bc7118f663cd1e1d3484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:26:33:76:eb:98:8c:fe:81:fd:38:8e:2e:
67:8a:b8:28:0f:f6:22:18:d3:5a:34:b8:3f:c8:49:
6e:59:84:a5:49:73:2b:63:5c:2a:1e:fa:2d:b1:23:
99:dc:1c:5c:12:3b:d8:03:f0:f9:c0:73:ef:f8:d9:
00:f7:4d:4d:06:30:05:33:2b:1a:f2:eb:2d:ca:7a:
1d:53:e0:9a:33:7a:36:d8:fe:8a:19:1f:28:09:d4:
51:8c:00:a7:65:84:6f:e5:c9:92:25:01:51:55:39:
53:0f:e4:b4:94:a8:c4:8b:4f:e0:ab:42:71:1c:73:
d9:e6:fa:6f:a1:0f:1b:0a:e6:d3:1e:a3:d3:5a:1d:
90:83:58:17:61:40:68:13:89:b6:19:e1:19:ee:37:
03:a2:91:57:9b:55:a3:33:e1:a8:a2:31:d7:b4:95:
75:a8:6d:27:57:9b:57:8f:e9:26:ef:99:aa:9b:fb:
73:58:c1:c0:56:ad:1b:71:5e:e6:c4:9d:e1:dd:f2:
6f:bf:69:bb:7c:0f:50:fa:8f:58:e4:62:b7:bf:7d:
99:82:67:cf:56:87:8b:0b:1a:01:ca:5a:99:d4:57:
1c:78:7f:5f:ad:fd:8d:d2:b8:b8:a8:59:1e:b8:27:
92:3d:e1:91:78:00:58:69:53:95:ef:07:16:98:9d:
ab:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CE:63:CB:5C:20:70:FF:51:82:BC:71:18:F6:63:CD:1E:1D:34:84
X509v3 Authority Key Identifier:
keyid:EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:16:5c:e8:6a:21:e1:5c:a3:90:af:31:53:47:68:88:c6:31:
bd:a4:1c:0c:23:01:7a:6b:4a:d2:cb:3e:82:b1:86:3e:cc:ee:
92:bc:ea:64:86:00:83:98:c6:7f:03:6a:4e:50:a6:6e:50:91:
48:e0:8e:60:73:ab:a7:e0:4a:2e:2b:b5:7b:aa:f4:a4:4d:41:
76:ce:15:d0:6d:3a:97:ad:96:47:16:47:c1:3f:3d:9b:f0:dc:
83:90:61:94:5d:40:30:be:8f:6a:48:65:fe:71:3f:87:4a:a9:
dc:98:fd:8a:03:38:56:95:0a:d3:8a:0e:85:66:8b:d0:36:c7:
a9:5b:9d:2f:6d:92:11:e5:0b:f9:1b:de:6f:77:0b:04:c2:5d:
12:23:d7:70:83:3b:55:90:42:d8:f9:c1:0a:73:f2:ae:79:4b:
38:ea:41:4c:2f:b7:8a:68:f6:af:ca:22:7d:55:ea:36:6a:ce:
e7:92:b4:5b:f0:2e:4d:79:aa:be:a0:e8:bf:56:73:e0:58:5c:
79:bd:06:09:d3:9e:1f:c9:40:42:68:d2:db:be:91:f0:83:8b:
03:27:66:be:1a:89:dc:a4:56:9c:e9:fe:14:c9:eb:ff:1c:cc:
ae:26:e4:f7:e5:67:e5:35:89:47:a7:ed:0a:0f:e9:cd:f5:8b:
59:71:fe:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:28:20 2026 by rpki-client