Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
File: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json)
Hash identifier: dWVppWTBs9IF3MCH6YBW8FsIwz5aaa9kYpK2pexl/cw=
Subject key identifier: 45:6A:A8:85:B9:CC:41:C2:BE:16:71:CA:1B:B6:C4:EC:B6:E6:DA:AE
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial: 019F8FB50474803D435A9EFC651CD38D8808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 16:00:32 +0000
Manifest this update: Thu 23 Jul 2026 16:00:32 +0000
Manifest next update: Fri 24 Jul 2026 16:00:32 +0000
Files and hashes: 1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: 1S3fwArrk+jARETqcgXFRXiubRriFmsFc8jdEdV+U3c=)
2: edQgb1OKZzdIqpTZCvd7y06flso.roa (hash: YslE6ABxgM2nK0S1WncJ01AbUDV4x4LC73+qD5UxVEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:04:74:80:3d:43:5a:9e:fc:65:1c:d3:8d:88:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Validity
Not Before: Jul 23 16:00:32 2026 GMT
Not After : Jul 24 16:00:32 2026 GMT
Subject: CN=456aa885b9cc41c2be1671ca1bb6c4ecb6e6daae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:fc:db:b7:96:ba:51:0b:4b:4f:14:49:9f:
8c:83:9d:5c:c3:48:ec:84:20:25:08:40:9a:e6:ef:
e1:35:78:16:1f:44:54:10:e4:12:b3:d5:04:28:d5:
2d:42:94:0d:16:a7:e3:62:d0:3e:d1:98:1d:b0:dc:
2b:40:25:6c:93:99:c6:da:9a:70:c6:22:64:4f:a0:
74:f9:0a:c3:d8:bd:08:e0:33:f2:54:72:8e:e7:77:
4f:cb:b5:5d:e7:80:e1:51:22:cf:65:73:2a:1d:2a:
09:e0:9f:d4:fc:99:c7:46:d2:0f:36:5e:f7:f3:41:
40:0f:ce:55:a1:33:9b:96:93:54:cd:ba:0b:47:b4:
33:1a:a5:df:35:25:bc:26:0b:fb:a1:2d:c2:7a:9f:
0c:f5:4e:29:3d:5f:38:a1:64:9b:29:48:b7:c7:36:
b5:44:01:bc:70:05:40:76:5b:bd:7a:73:99:ba:20:
71:07:c9:d8:e0:f5:9a:68:31:9b:bd:e3:48:7b:60:
0c:32:52:85:19:47:d1:01:bf:de:0c:24:ae:ee:e1:
e5:33:87:ba:5e:c5:21:28:38:ee:da:14:c2:ef:52:
fb:32:69:2e:43:63:4b:6a:be:72:6f:b8:29:63:c1:
27:a7:ac:bb:bd:b4:02:b9:bf:55:d3:51:32:4f:60:
89:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6A:A8:85:B9:CC:41:C2:BE:16:71:CA:1B:B6:C4:EC:B6:E6:DA:AE
X509v3 Authority Key Identifier:
keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:39:c3:40:54:80:02:9a:c1:9b:a5:05:2d:61:4f:63:c8:a0:
c7:56:2c:dd:4f:dc:2c:26:da:01:a2:45:68:34:b0:7a:ac:7e:
42:85:32:e2:18:a9:16:28:d3:44:56:77:49:cc:32:9a:ce:00:
67:73:49:ed:44:aa:de:9d:c1:7a:93:f5:47:dd:23:d9:ab:dd:
75:88:c6:59:bb:a9:fe:dc:4b:3f:0c:73:55:21:6f:0d:62:b2:
80:81:fc:70:8c:d8:4a:5b:67:8a:13:fd:99:ff:4d:34:16:ce:
c8:d4:4f:af:ff:33:41:f5:da:3b:12:18:a8:f5:a5:10:06:2d:
08:71:75:46:54:4f:5f:03:5c:09:3a:9e:81:81:7d:85:67:fb:
00:4b:82:63:64:26:94:6a:00:b2:ed:29:d6:67:18:bb:6f:49:
dc:73:7f:34:99:28:66:01:de:44:44:d0:6a:57:4a:7d:a7:ac:
e7:62:c1:77:56:28:44:33:84:f6:40:3e:5d:55:4d:a6:56:e2:
cc:60:a5:4f:bb:8c:2f:da:be:89:7a:59:b4:63:54:7e:7f:d1:
e9:2e:70:49:65:5f:f5:5e:39:cf:88:34:16:9f:f3:9e:2d:db:
48:55:63:26:37:03:e1:79:e1:e0:5b:12:c8:69:d0:af:e0:14:
da:37:71:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:32:35 2026 by rpki-client