Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
File: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft (raw, json)
Hash identifier: YvFqdBNxFdyu9qM/JCdGxGfq2nqzcL9WOCR53HKvBZ4=
Subject key identifier: 24:61:C1:BB:FA:74:37:7F:52:EA:43:92:C7:64:51:BB:B9:15:31:19
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial: 019F916CDD96C9467C3F917448402851513C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 00:00:58 +0000
Manifest this update: Fri 24 Jul 2026 00:00:58 +0000
Manifest next update: Sat 25 Jul 2026 00:00:58 +0000
Files and hashes: 1: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl (hash: KGGZOedJ9e6Tv/eb670L98BAVgXieiuHr/YcgZCgHWo=)
2: 7ymJo6ToPK4ZRuDJzRSPCXxaPm4.roa (hash: ytpfJ9vNS5JwRc89yU0uWlEyTvzj77675KecMolldFc=)
3: Es0ua-vxyxjcsLvaoi1mzGRFLDs.roa (hash: f1TQFLKcOmbSU1W2vbI+gyaehRaTN+oWeXN0L2tAh3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:dd:96:c9:46:7c:3f:91:74:48:40:28:51:51:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Validity
Not Before: Jul 24 00:00:58 2026 GMT
Not After : Jul 25 00:00:58 2026 GMT
Subject: CN=2461c1bbfa74377f52ea4392c76451bbb9153119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:99:24:ad:da:8c:ab:03:f1:7f:64:e3:76:f1:
3d:17:42:dd:05:93:9c:83:91:26:66:2f:d6:d8:5e:
72:6a:b9:53:04:19:18:7d:71:43:2a:33:98:88:af:
7a:6b:25:c7:fd:0f:82:17:da:10:43:ab:6e:09:29:
e6:22:93:56:d2:c6:6f:ef:29:f6:25:bd:a4:fc:b3:
0a:c9:42:d1:84:fd:1b:cb:cb:10:ff:19:29:a3:ba:
e2:4a:08:e3:59:41:a6:9a:e7:d7:d6:f4:f7:ae:ae:
41:29:22:45:29:de:59:65:10:f0:4f:05:e0:a3:2b:
03:b4:ab:24:cb:fa:cb:df:b9:29:ba:16:c6:40:b7:
4c:df:f4:52:2b:9d:d0:80:90:02:b9:ec:65:db:ed:
d1:19:5d:2d:b0:04:81:24:37:2b:b3:8d:ad:ce:27:
0f:0f:be:dd:cf:d8:e0:1b:7b:5e:ae:52:89:09:2f:
e4:3c:46:12:7c:e2:9d:af:27:0f:f5:4d:aa:12:c2:
20:b6:1e:2c:ff:7b:3a:a5:9e:31:98:e9:64:c8:83:
c2:33:f3:da:48:cf:e3:c8:34:89:f4:9f:0e:00:29:
2f:a3:7f:fb:50:71:9c:de:bd:1b:eb:ee:30:80:36:
58:47:c0:49:3d:b3:d8:8e:0c:50:b0:4b:ad:8c:59:
6c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:61:C1:BB:FA:74:37:7F:52:EA:43:92:C7:64:51:BB:B9:15:31:19
X509v3 Authority Key Identifier:
keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b0:20:6d:09:9f:8a:96:e7:a8:8f:34:2a:43:9d:83:38:42:
35:68:71:ec:67:f7:b6:c9:49:8d:6a:81:68:b0:8a:f3:40:c7:
f4:82:a8:cb:8d:6d:8d:56:83:13:36:60:e8:3c:5c:b7:a2:3b:
7d:64:37:46:c6:70:15:bd:d3:d4:40:ea:8f:5b:81:0b:fe:4f:
a5:b8:c2:58:0d:92:29:b5:1d:49:4b:f9:e7:1a:7a:fc:7d:41:
3c:a0:ba:48:cc:2e:14:07:16:11:ee:f6:03:58:a0:b9:a9:e2:
1f:14:d7:af:cd:91:c4:63:26:27:1a:51:5e:d5:e7:90:6d:a4:
21:c4:df:75:11:df:3f:44:3e:56:49:87:26:3b:ac:cd:0c:23:
97:1a:26:ca:23:18:04:db:ac:0a:58:0e:d2:90:7e:e7:61:82:
82:bc:06:0d:53:ea:ff:ff:de:9d:08:ac:5e:9b:29:9b:21:7d:
5d:c8:0a:9c:f4:d6:bc:02:a1:02:af:0d:94:ce:ac:d3:64:df:
47:4e:f7:13:9f:23:0b:a8:87:fe:e1:eb:55:b3:1c:06:4c:34:
48:0a:31:bb:32:30:57:c4:ca:7e:28:3e:0a:45:2c:ff:43:07:
1b:d6:45:c4:44:5a:fe:77:41:b5:12:09:16:b4:8d:e6:fc:9c:
75:89:ef:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbN2WyUZ8P5F0SEAoUVE8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI3MWM2N2UxY2MyODA3ODY5Nzk1MmFkM2Y0ZjM1NWY0
ZTEzNDEwHhcNMjYwNzI0MDAwMDU4WhcNMjYwNzI1MDAwMDU4WjAzMTEwLwYDVQQD
EygyNDYxYzFiYmZhNzQzNzdmNTJlYTQzOTJjNzY0NTFiYmI5MTUzMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JkkrdqMqwPxf2TjdvE9F0LdBZOc
g5EmZi/W2F5yarlTBBkYfXFDKjOYiK96ayXH/Q+CF9oQQ6tuCSnmIpNW0sZv7yn2
Jb2k/LMKyULRhP0by8sQ/xkpo7riSgjjWUGmmufX1vT3rq5BKSJFKd5ZZRDwTwXg
oysDtKsky/rL37kpuhbGQLdM3/RSK53QgJACuexl2+3RGV0tsASBJDcrs42tzicP
D77dz9jgG3terlKJCS/kPEYSfOKdrycP9U2qEsIgth4s/3s6pZ4xmOlkyIPCM/Pa
SM/jyDSJ9J8OACkvo3/7UHGc3r0b6+4wgDZYR8BJPbPYjgxQsEutjFlsSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRhwbv6dDd/UupDksdkUbu5FTEZMB8GA1UdIwQY
MBaAFOxrccZ+HMKAeGl5Uq0/TzVfThNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMt
ZDNmNmNkOGU0NDQ0LzEvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMtZDNmNmNkOGU0NDQ0
LzEvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7AgbQmf
ipbnqI80KkOdgzhCNWhx7Gf3tslJjWqBaLCK80DH9IKoy41tjVaDEzZg6Dxct6I7
fWQ3RsZwFb3T1EDqj1uBC/5PpbjCWA2SKbUdSUv55xp6/H1BPKC6SMwuFAcWEe72
A1iguaniHxTXr82RxGMmJxpRXtXnkG2kIcTfdRHfP0Q+VkmHJjuszQwjlxomyiMY
BNusClgO0pB+52GCgrwGDVPq///enQisXpspmyF9XcgKnPTWvAKhAq8NlM6s02Tf
R073E58jC6iH/uHrVbMcBkw0SAoxuzIwV8TKfig+CkUs/0MHG9ZFxERa/ndBtRIJ
FrSN5vycdYnv2Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:13 2026 by rpki-client