Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
File: D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft (raw, json)
Hash identifier: H99b0I9j+s7KH5A9wizpNdubf6WKZGbnx0wsco/hTwM=
Subject key identifier: B6:45:FE:5F:1D:29:8C:40:2D:28:3B:14:95:4D:89:71:71:B2:FB:A1
Authority key identifier: 0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
Certificate issuer: /CN=0fb7cdb05282b089b476759f69ed4a436b456362
Certificate serial: 019F9059BA27EA6796AFAC02930DEBA2CEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
Manifest number: 0271
Signing time: Thu 23 Jul 2026 19:00:27 +0000
Manifest this update: Thu 23 Jul 2026 19:00:27 +0000
Manifest next update: Fri 24 Jul 2026 19:00:27 +0000
Files and hashes: 1: D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl (hash: qti/H+eux4E87PuXE7bTvjXk0XztF4GQEjs0EF7b27g=)
2: Jv84iN2B8ANANDflC9HEXw5LA8Y.roa (hash: qNF0F5ELDvVzv6IS3eSh9XZM4TiIIZIYRSv7YJ85pZA=)
3: llmMHNqMSoDUXRxE5hAlr6D6GAE.roa (hash: R5kL9/aM+FrgRUOf+AsKqKfQFvEpHbyhgcOmGd1LC1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:ba:27:ea:67:96:af:ac:02:93:0d:eb:a2:ce:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb7cdb05282b089b476759f69ed4a436b456362
Validity
Not Before: Jul 23 19:00:27 2026 GMT
Not After : Jul 24 19:00:27 2026 GMT
Subject: CN=b645fe5f1d298c402d283b14954d897171b2fba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:59:97:dc:f9:0d:81:c9:a9:bc:87:95:80:22:
48:a8:e8:93:6c:89:80:78:5f:03:c8:87:a8:09:92:
7c:dd:25:d1:57:68:c1:1d:92:17:a3:cc:4e:cf:f9:
64:b6:54:8f:ad:f6:e1:83:67:ff:78:2c:7d:39:f2:
e1:dd:92:91:64:90:3e:94:dc:7c:34:78:9d:66:08:
98:1d:33:dc:13:94:5c:84:33:cc:c0:8a:ac:e3:54:
71:0e:a5:86:66:97:4f:52:23:c9:41:b1:45:f6:48:
40:d6:e9:85:25:a6:41:e4:dd:7d:22:55:27:c5:41:
03:02:a8:8a:99:3e:61:8f:20:43:b0:1c:ab:ea:d0:
1e:2e:ed:54:9c:1d:6b:59:4c:ad:ca:6d:c1:51:07:
54:28:bc:11:2e:2d:55:96:c9:70:8a:6d:41:9d:ad:
0f:b9:0b:1d:5b:09:f0:2f:b7:80:47:83:6b:b7:cd:
1c:e3:27:a1:9a:7c:97:91:c1:41:62:bb:26:e5:36:
28:17:3a:7a:31:86:aa:e8:aa:49:e5:05:0c:99:45:
0c:b2:d5:95:f8:ac:fe:4b:c9:7a:43:d1:3d:2c:2a:
4b:3f:90:10:b8:0f:c1:b1:2d:7e:a7:df:f7:25:13:
42:63:5b:93:bc:d2:6b:9c:27:c1:b0:07:25:a3:92:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:45:FE:5F:1D:29:8C:40:2D:28:3B:14:95:4D:89:71:71:B2:FB:A1
X509v3 Authority Key Identifier:
keyid:0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1d:ea:b3:51:93:0a:f7:41:a3:1a:ad:45:03:3a:d3:c3:61:
e0:1d:89:99:c9:aa:ad:11:f1:6c:51:d1:64:cc:45:c1:8a:22:
16:b6:1c:46:eb:48:b0:b0:b4:f7:78:52:d5:d5:8c:b1:f2:86:
57:13:04:59:4e:bc:27:a1:9a:ef:f5:e3:c6:46:44:16:7e:3e:
13:9a:f3:c9:0a:7f:f6:67:67:bb:26:53:ae:c0:4f:fd:2d:68:
df:72:63:97:38:83:79:b7:8f:5b:4b:a8:15:46:e7:ab:42:17:
42:05:31:59:85:41:5b:12:88:0d:31:9e:1c:40:ae:e8:d2:b1:
16:c8:42:89:ed:18:1e:ee:b9:45:f9:fa:4b:48:03:bf:c4:4b:
ba:84:09:4c:96:8e:6f:ae:2f:01:67:60:0a:19:8d:5f:1c:cb:
46:89:8e:0d:d3:37:dd:99:59:9c:16:e3:a0:98:2a:35:cb:e5:
95:49:86:6f:f5:6c:02:69:b5:72:6f:8c:ba:c7:11:d6:9d:09:
f0:44:de:2c:4e:5f:bd:25:bb:f0:81:5b:e8:59:f5:c7:dc:48:
79:13:ac:11:fb:05:a9:61:f3:46:67:4d:6c:a7:a9:6b:08:d6:
f4:55:79:4b:23:6b:9a:cb:29:eb:b5:88:58:4d:47:8e:4f:67:
77:d5:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:42 2026 by rpki-client