Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File: 7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier: dhoWVqaA2vhcu0cnSLXYCrnwkv+LVzNkSX1VTK3WBsA=
Subject key identifier: AF:27:AD:C3:0A:21:AF:D8:B3:4E:31:D1:7A:F8:E4:D4:9E:2C:27:51
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 019F8F4740B40228CEE91208B3960581E929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 14:00:39 +0000
Manifest this update: Thu 23 Jul 2026 14:00:39 +0000
Manifest next update: Fri 24 Jul 2026 14:00:39 +0000
Files and hashes: 1: 6ukkUq47_d2FjDn2mGzCVotpwug.roa (hash: BSpIOmqaO5YAgsvsZQqH6+DD7MhtSJv4k++NTBFYMhA=)
2: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: 581n+eNxeZW4IsYYamgj8861QqrgNMpKTDpeLcxmUzU=)
3: lOdlGRTCbIpEqR9qatoRPkmZsSo.roa (hash: puduhtYoMCBO2MogdQIQ/qqMbhZcm/6N0DD1bqrK4NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:40:b4:02:28:ce:e9:12:08:b3:96:05:81:e9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Jul 23 14:00:39 2026 GMT
Not After : Jul 24 14:00:39 2026 GMT
Subject: CN=af27adc30a21afd8b34e31d17af8e4d49e2c2751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:95:27:43:ce:bb:21:41:7b:91:a5:03:29:
84:dc:c1:ec:b4:55:73:6b:0b:ce:3a:e5:1e:72:1c:
1e:a8:5e:44:dd:7d:19:11:bc:59:44:e5:fc:4e:42:
ed:9e:b5:60:93:6f:eb:31:21:e3:15:1b:ee:cd:eb:
1b:c3:a3:48:15:7f:bf:82:68:84:f5:81:82:29:a6:
4b:cb:7a:50:01:7f:04:2f:ef:45:09:3b:24:19:dd:
9a:05:ee:30:a1:ae:44:6b:e6:4e:85:29:5e:f1:bc:
f1:14:1a:54:f9:21:76:ff:ef:cd:70:8a:ea:74:65:
8f:bf:77:ed:f3:c0:94:89:58:ad:d7:e5:e6:54:8a:
7e:38:1e:c7:a0:50:53:0d:48:26:84:24:6b:49:6e:
e7:6c:c7:b3:ac:ce:24:00:e1:87:71:15:60:5b:02:
a8:af:db:d2:c4:6c:cb:98:8c:1f:72:04:5f:2b:0b:
03:e7:91:20:84:43:82:34:06:28:35:0f:11:9d:87:
15:b4:3d:de:fa:46:f0:b9:b5:35:c2:32:f4:d1:ff:
33:1c:55:02:94:17:73:eb:a4:c1:e5:40:b2:51:8a:
30:b4:22:9c:f4:4b:ee:0d:9e:86:21:50:b5:a0:55:
28:59:71:cb:63:83:3e:8f:84:b0:c9:35:e1:aa:99:
43:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:AD:C3:0A:21:AF:D8:B3:4E:31:D1:7A:F8:E4:D4:9E:2C:27:51
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:06:6a:4b:70:66:ef:27:13:f8:60:43:61:ac:e8:68:df:98:
de:bf:2e:54:15:de:df:5d:9a:cb:6a:01:29:86:82:94:c0:c5:
f6:56:8a:1d:90:c2:7b:f5:e4:14:3f:f5:16:45:b4:09:2f:81:
6a:02:d3:9a:3e:1d:f5:ba:06:9f:1b:a2:a0:f3:cc:0a:ac:ab:
13:b4:bb:87:6c:81:e2:a4:79:75:2f:0e:cf:6b:85:21:a1:e6:
2b:9a:45:d7:f3:ec:a7:f5:46:09:24:4e:6c:df:d7:cd:88:f4:
ce:4c:9d:41:d9:e7:33:32:e5:10:56:b5:24:71:9d:4a:91:b3:
e8:62:6f:32:7f:31:ff:33:6c:f8:35:99:d4:f3:86:05:f8:3d:
94:3a:5f:b4:4b:e4:9a:60:5a:e6:e1:3d:7a:52:8a:20:70:d7:
ff:9f:97:87:d5:13:e1:67:b0:75:2d:c7:9f:42:2c:fe:eb:b8:
3c:36:d0:2b:66:88:c7:f3:c7:c5:8d:02:c4:6a:92:0d:b2:73:
c3:74:65:a0:0d:ae:ae:d1:cd:12:21:e5:5c:48:5b:e7:84:96:
fb:b9:19:ca:af:18:24:02:c3:9f:c8:a9:66:0b:f3:fd:2b:d2:
6c:39:21:8d:c7:50:42:06:6d:0c:5f:36:6d:58:ff:fa:43:34:
14:ea:56:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:16 2026 by rpki-client