Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier: FHQUEWpagp46y7I6sl5Tn8JuRK3qjf0SkBSSGcBe17w=
Subject key identifier: 57:AB:FA:11:99:C6:DE:7F:FB:10:6B:D6:3B:C5:3C:85:E6:4B:09:0A
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 019F9135F5F8F0336E06EE1D0DA83EF46597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number: 053B
Signing time: Thu 23 Jul 2026 23:01:00 +0000
Manifest this update: Thu 23 Jul 2026 23:01:00 +0000
Manifest next update: Fri 24 Jul 2026 23:01:00 +0000
Files and hashes: 1: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: XXmbjx/VafzPUtJeqY92oZuLA9Nl4crQTw7u+lW5iHo=)
2: bHM7HWlokuLAKGZUYW39_tqn2Fk.roa (hash: k5ZFTQBnrO/pZ+ljvAJJsNDjRf0esZ6TDnbCraHVTUQ=)
3: nnVHZXt9DivgToJiSfHRWDPCX58.asa (hash: /8k8/1a46VaQnelGrFv4w1ybQa3EbefqWYHF9uEGkc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:f5:f8:f0:33:6e:06:ee:1d:0d:a8:3e:f4:65:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Jul 23 23:01:00 2026 GMT
Not After : Jul 24 23:01:00 2026 GMT
Subject: CN=57abfa1199c6de7ffb106bd63bc53c85e64b090a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:5c:44:45:95:e2:ec:67:61:fc:ec:dc:13:
be:ef:24:8a:65:e6:b7:f8:db:74:ee:8f:d5:7e:eb:
43:ad:5b:59:de:48:9f:21:67:d3:aa:9f:af:04:85:
84:01:d7:1f:68:82:fe:6f:21:39:fd:65:98:d6:57:
e8:71:47:92:67:8e:eb:09:50:a3:b2:f0:94:13:e5:
cc:fe:94:87:80:a3:32:1d:c8:e1:8e:39:0f:08:a6:
d9:21:db:06:24:23:1e:fc:d1:5e:39:17:f7:42:1b:
ed:61:b6:c0:59:55:8c:49:f6:ae:22:d3:07:58:3e:
64:74:93:19:a5:f3:5d:48:50:64:a5:dd:07:a8:40:
ba:48:85:85:53:14:e3:15:12:f9:d9:e2:c9:f3:16:
bb:78:aa:62:a8:f5:a3:16:fd:91:12:4c:a1:3f:9c:
98:ee:b9:86:d0:fb:c0:02:e8:f1:d2:77:27:57:f8:
54:81:77:c9:c4:57:59:e0:61:4c:dc:17:80:e4:0a:
35:a1:92:2e:8c:11:15:8d:c2:90:35:7e:60:45:1c:
3b:59:4c:6a:23:a2:a9:f8:7f:12:fd:fd:26:a4:9e:
55:10:66:2d:39:87:b5:d8:bc:e8:e3:09:b7:69:be:
72:80:1c:0e:be:b2:5d:7b:98:71:4b:2a:3b:d4:42:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AB:FA:11:99:C6:DE:7F:FB:10:6B:D6:3B:C5:3C:85:E6:4B:09:0A
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:40:3a:69:9a:89:50:08:f9:9a:44:d8:ca:a6:42:04:a2:e8:
c0:19:a2:ea:50:68:e1:fd:1f:a8:c4:1c:68:dd:3f:04:9b:b2:
46:bc:20:e9:50:19:76:7e:18:dc:3a:97:86:80:fa:d3:d1:a8:
4b:9c:d8:eb:82:e6:8d:ca:44:9e:97:09:3c:1e:bf:66:38:ac:
c4:5f:59:ba:36:a7:46:07:92:80:66:5b:50:e8:18:a0:ca:e2:
86:d1:8c:06:47:19:c2:5b:e6:a1:d4:c9:3b:40:6c:97:13:1a:
a5:3d:9d:62:84:1d:be:97:91:24:38:5b:da:a6:96:91:d4:8d:
ad:3d:82:88:78:4d:1b:3f:59:2e:e5:54:03:ce:58:b5:a4:d2:
33:43:ea:07:36:d6:95:6b:18:4f:05:e6:ef:81:c4:bb:30:fc:
5b:6a:88:54:2d:a2:fc:81:b0:9d:69:5d:75:66:c4:d2:ec:ef:
fc:dc:19:9a:10:3b:fa:33:a1:80:3d:cb:70:22:45:36:80:cd:
bc:87:09:e3:c3:bc:99:c2:d1:87:b9:c4:49:5c:06:8b:c4:8a:
f3:ee:55:98:9b:d5:96:53:53:24:bf:ee:eb:7b:55:58:33:49:
e9:66:1d:9f:b2:2b:fa:08:29:86:15:20:ac:a8:cb:e7:f7:5c:
cf:b3:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:39 2026 by rpki-client