Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
File: 7pzNOKXWSWiAvAlHBuaPoE-izZY.mft (raw, json)
Hash identifier: /wwEm+eDsA7xcOHBzgQln5SOZbrMFeMjDst2v4mXz7g=
Subject key identifier: 7B:99:BE:3C:04:E8:76:82:66:51:4B:4A:B6:D3:B6:1A:70:17:2A:58
Authority key identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
Certificate issuer: /CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Certificate serial: 019F8FECBBF956AA89CC33EC5DE6EC6AC7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
Manifest number: 0582
Signing time: Thu 23 Jul 2026 17:01:24 +0000
Manifest this update: Thu 23 Jul 2026 17:01:24 +0000
Manifest next update: Fri 24 Jul 2026 17:01:24 +0000
Files and hashes: 1: 7pzNOKXWSWiAvAlHBuaPoE-izZY.crl (hash: wQCqZdv3HAWdeRHB8KteDHH6D+L9auKWFx+SljkPjLY=)
2: ocY70Yt7qprLim2mTu297m9-o2U.roa (hash: 6sPyz7kDxqJwF7yTxqQ7gDV39uN8BMfMMUG8+PSgNKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:bb:f9:56:aa:89:cc:33:ec:5d:e6:ec:6a:c7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Validity
Not Before: Jul 23 17:01:24 2026 GMT
Not After : Jul 24 17:01:24 2026 GMT
Subject: CN=7b99be3c04e8768266514b4ab6d3b61a70172a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:76:ba:77:80:2d:fb:78:05:90:a0:26:6d:
8b:ca:3a:f5:71:4b:f1:59:41:4a:6c:fc:76:e8:8c:
96:a2:b7:f1:02:d1:92:73:a7:09:ee:b3:d8:4a:56:
58:bd:90:b6:41:03:7b:a0:75:2b:f9:5b:db:18:01:
60:7b:ff:bf:87:4a:e7:0f:db:e8:6c:6a:3a:24:31:
17:41:0c:33:9a:12:5f:3f:4d:2d:79:a4:b9:f2:85:
25:c4:64:cd:d7:08:2f:66:71:99:f7:f7:5e:97:a9:
cb:f6:88:f2:85:42:36:b4:21:84:34:76:28:91:79:
ff:b5:9e:3b:ed:88:a1:db:b2:cf:40:7e:ac:ae:5d:
cb:99:4a:09:16:7f:26:a9:43:2b:7d:57:db:34:21:
7b:af:1b:f8:b6:32:c2:3f:35:71:e0:87:c8:7e:cd:
98:83:fb:02:17:e6:c6:d6:f7:6d:73:77:aa:19:d7:
b9:c1:42:fc:b4:f0:f1:4e:ad:e7:b8:02:33:45:47:
75:b0:1a:1d:68:ea:21:77:3a:2f:b1:15:87:b8:37:
87:0a:67:e7:51:5d:2a:fc:1c:ab:10:7b:37:01:15:
42:ba:f3:86:00:a9:7c:4e:f2:52:82:40:3b:90:49:
e1:90:27:d1:d7:fd:ee:eb:cf:ad:06:54:b1:43:c2:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:99:BE:3C:04:E8:76:82:66:51:4B:4A:B6:D3:B6:1A:70:17:2A:58
X509v3 Authority Key Identifier:
keyid:EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:58:27:f1:e0:fc:3d:91:bb:99:7a:02:6f:87:65:03:19:8f:
74:c7:30:59:21:16:4e:08:1b:27:47:aa:e4:c3:8a:a4:33:02:
2c:09:80:29:de:4d:5a:e3:f3:1e:75:3e:e8:78:60:68:7f:90:
c8:b9:8e:46:22:d2:c1:c4:40:0e:14:dd:05:44:46:2e:b9:97:
4b:7c:d3:c2:fb:bd:44:a6:09:6c:4a:d5:ca:44:ee:49:b4:27:
a7:dd:37:82:e3:2f:46:fe:e2:01:03:ab:30:03:71:09:0c:2d:
4d:80:ec:79:f3:0d:be:dc:67:f4:f8:e4:c4:6d:62:41:73:1a:
c5:b2:2b:0c:83:65:d4:05:cc:14:22:71:52:75:83:24:eb:b5:
c3:db:aa:c1:55:60:87:a5:21:b9:45:5d:46:5e:45:b8:2f:1d:
cc:bb:52:9b:7e:0d:70:d1:7a:8a:d1:b6:6c:e1:89:ee:ec:ef:
93:ab:09:69:f5:2f:f8:74:49:2b:af:88:6e:9c:c6:87:59:6f:
38:1a:c4:a2:cc:54:06:28:c6:35:b3:50:35:fa:c7:c8:fc:da:
e7:44:ba:27:84:00:a2:39:6b:f2:35:53:06:df:ed:78:e8:76:
d7:67:e3:de:3a:30:39:8a:91:2f:01:e2:11:d9:1e:fa:4f:46:
03:74:0f:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7Lv5VqqJzDPsXebsasejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlOWNjZDM4YTVkNjQ5Njg4MGJjMDk0NzA2ZTY4ZmEwNGZh
MmNkOTYwHhcNMjYwNzIzMTcwMTI0WhcNMjYwNzI0MTcwMTI0WjAzMTEwLwYDVQQD
Eyg3Yjk5YmUzYzA0ZTg3NjgyNjY1MTRiNGFiNmQzYjYxYTcwMTcyYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/R2uneALft4BZCgJm2Lyjr1cUvx
WUFKbPx26IyWorfxAtGSc6cJ7rPYSlZYvZC2QQN7oHUr+VvbGAFge/+/h0rnD9vo
bGo6JDEXQQwzmhJfP00teaS58oUlxGTN1wgvZnGZ9/del6nL9ojyhUI2tCGENHYo
kXn/tZ477Yih27LPQH6srl3LmUoJFn8mqUMrfVfbNCF7rxv4tjLCPzVx4IfIfs2Y
g/sCF+bG1vdtc3eqGde5wUL8tPDxTq3nuAIzRUd1sBodaOohdzovsRWHuDeHCmfn
UV0q/ByrEHs3ARVCuvOGAKl8TvJSgkA7kEnhkCfR1/3u68+tBlSxQ8KL9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuZvjwE6HaCZlFLSrbTthpwFypYMB8GA1UdIwQY
MBaAFO6czTil1klogLwJRwbmj6BPos2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3B6Tk9LWFdTV2lBdkFsSEJ1YVBvRS1pelpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xNWY5NWMtYjBiNi00NTIyLThlYTAt
NTViZWFmYTRiYjI5LzEvN3B6Tk9LWFdTV2lBdkFsSEJ1YVBvRS1pelpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xNWY5NWMtYjBiNi00NTIyLThlYTAtNTViZWFmYTRiYjI5
LzEvN3B6Tk9LWFdTV2lBdkFsSEJ1YVBvRS1pelpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlgn8eD8
PZG7mXoCb4dlAxmPdMcwWSEWTggbJ0eq5MOKpDMCLAmAKd5NWuPzHnU+6HhgaH+Q
yLmORiLSwcRADhTdBURGLrmXS3zTwvu9RKYJbErVykTuSbQnp903guMvRv7iAQOr
MANxCQwtTYDsefMNvtxn9PjkxG1iQXMaxbIrDINl1AXMFCJxUnWDJOu1w9uqwVVg
h6UhuUVdRl5FuC8dzLtSm34NcNF6itG2bOGJ7uzvk6sJafUv+HRJK6+IbpzGh1lv
OBrEosxUBijGNbNQNfrHyPza50S6J4QAojlr8jVTBt/teOh212fj3jowOYqRLwHi
Edke+k9GA3QPKg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:18 2026 by rpki-client