
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File: t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier: /WUCVSTF93kwiFy8ccRrOCDwl4QFFkSZRvIwwKXjMTU=
Subject key identifier: 64:2E:38:DE:D4:78:86:EB:4E:68:27:7A:72:25:91:D8:EB:24:6C:A0
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial: 019F91DA3786089BDF9B4319ECE034FCBBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number: 0725
Signing time: Fri 24 Jul 2026 02:00:25 +0000
Manifest this update: Fri 24 Jul 2026 02:00:25 +0000
Manifest next update: Sat 25 Jul 2026 02:00:25 +0000
Files and hashes: 1: RhYPlB5kqIX-dmV0ZFbkO4F9FQA.roa (hash: B4giMGx1nCtQi2hJ6Q8i5DGTsStHwrUH2rtSDwaQt6Q=)
2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: q1MmIhsdFbaaWljcu9mFYQ46MiGHZGXfAythVQH5GTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:37:86:08:9b:df:9b:43:19:ec:e0:34:fc:bb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Validity
Not Before: Jul 24 02:00:25 2026 GMT
Not After : Jul 25 02:00:25 2026 GMT
Subject: CN=642e38ded47886eb4e68277a722591d8eb246ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:00:07:21:8e:d3:84:f1:28:c0:f3:ab:17:
42:93:5a:d8:72:99:71:69:d3:f1:b7:dd:24:1e:7e:
90:bf:1d:f1:ba:d1:aa:3b:e5:d2:2a:89:c6:6c:62:
ff:0d:31:5e:7b:00:18:8e:a0:79:9b:cf:fe:ce:00:
fa:ab:72:6a:7e:59:3b:d1:4e:ed:64:11:25:29:28:
d9:d2:6f:70:f7:1f:b6:59:14:b2:db:8d:fe:79:7a:
39:5b:94:55:4f:d7:a3:1b:89:c2:c9:63:af:1f:64:
c3:ec:2f:c5:03:df:5d:47:4e:bc:f0:88:a7:4a:5e:
16:05:d6:36:be:b1:02:ed:d7:af:b7:6e:ef:d5:b7:
51:94:2f:86:a8:2b:dd:3a:56:98:d3:fb:6d:71:17:
88:d3:17:f3:e8:17:d9:4b:17:5d:8e:e1:9e:f3:76:
cc:86:64:dd:e3:76:cd:3b:6e:a1:94:b1:77:ad:3b:
e3:1f:75:6e:9a:fc:bf:32:fb:af:bf:30:8b:d6:d9:
ff:46:e7:05:2c:69:83:b0:9c:31:a9:54:8f:3d:20:
4d:af:d0:73:25:3e:4a:f4:23:3d:7a:1c:86:a1:d0:
12:98:e0:36:12:ea:96:8c:1c:c1:83:bf:3d:98:44:
a6:19:e9:fb:c4:de:2f:f7:5d:41:7f:7b:41:76:a8:
f7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2E:38:DE:D4:78:86:EB:4E:68:27:7A:72:25:91:D8:EB:24:6C:A0
X509v3 Authority Key Identifier:
keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c5:55:c3:a2:68:72:99:78:34:86:50:40:4c:f2:58:8b:6e:
9f:95:16:5a:a9:46:35:2e:b4:23:3c:57:9c:f7:23:f7:15:eb:
7f:17:f5:45:43:80:1b:25:fb:5a:72:dc:38:be:67:59:cf:f0:
25:8f:f0:91:50:08:eb:30:38:e0:54:b5:b6:0a:4f:d9:73:9a:
fa:c2:ff:c4:6f:ed:1c:b0:eb:fa:e9:8b:5b:b3:f2:d1:82:7f:
82:cd:0d:4f:cb:fe:fe:7a:cd:bf:23:c5:30:10:a0:c6:ee:99:
18:1f:eb:7d:27:ce:4a:3e:e5:77:cb:0b:08:1b:9e:af:5c:2a:
23:e4:41:a7:84:05:76:ec:1a:ee:2d:9a:25:71:c8:3e:c7:d1:
17:b3:11:a9:d0:f1:6c:75:ed:02:72:bc:99:ff:02:3f:24:78:
82:2b:76:76:1f:f0:0c:91:6c:6f:e5:f8:40:de:3d:16:be:47:
fc:22:a7:52:cf:53:af:e3:40:e8:32:84:21:4f:cd:cc:7a:1b:
00:73:b9:cc:54:45:56:4a:9e:14:44:e6:e4:47:6b:3b:41:d4:
ed:74:15:b1:3c:36:07:ef:80:76:87:61:38:fe:fb:a3:5e:c2:
1a:cb:40:94:54:a5:f1:7f:96:2f:88:d7:24:ef:08:15:75:8a:
45:a9:0b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:37 2026 by rpki-client