Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
File: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft (raw, json)
Hash identifier: i5KvP1cvd/3MgoqOQFIOeZptgO+lmZXRIFmSzluhuTY=
Subject key identifier: 8C:DD:2A:2A:37:B6:3F:46:3D:A2:17:40:A7:0A:1B:77:94:BB:52:AB
Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
Certificate issuer: /CN=ed32ef0caf0a057529fb928f76962a7425390dba
Certificate serial: 019F8FEBC32F29FDC0A78CFDAE8FAE833D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
Manifest number: 047B
Signing time: Thu 23 Jul 2026 17:00:20 +0000
Manifest this update: Thu 23 Jul 2026 17:00:20 +0000
Manifest next update: Fri 24 Jul 2026 17:00:20 +0000
Files and hashes: 1: 4ck5stj-Nruh5mOMgR2qNBplGK4.roa (hash: pnWvPZcJH3rubSBQDARfPzyblV+Aac+zG4Cuud9DAE8=)
2: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl (hash: XpdKGvKL5JNaGjPzE1WQullnct02HACGzBRzRPrZbm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:c3:2f:29:fd:c0:a7:8c:fd:ae:8f:ae:83:3d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba
Validity
Not Before: Jul 23 17:00:20 2026 GMT
Not After : Jul 24 17:00:20 2026 GMT
Subject: CN=8cdd2a2a37b63f463da21740a70a1b7794bb52ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:1d:67:a1:aa:25:13:ef:6e:e9:da:3e:ad:
6b:63:44:5d:86:6e:9c:12:e2:cf:b6:e0:8a:23:32:
44:8a:30:e3:9a:73:a6:de:45:82:50:97:78:0c:e0:
4e:05:1e:31:5e:ab:0c:7b:3e:73:fd:9c:97:0a:ae:
97:fc:84:14:3f:13:1d:a3:b8:93:8f:f9:9c:9d:f7:
20:6a:95:93:b6:46:92:b0:d8:02:bc:7a:08:ae:c2:
a6:82:a9:62:aa:4f:8f:75:a9:fc:13:a4:2f:e3:a3:
15:c9:4d:79:88:bf:c9:49:e3:66:5a:0f:10:ca:2e:
76:55:ad:9a:71:e1:40:c5:4f:14:8e:c0:78:ff:c7:
c3:78:3a:55:10:95:41:11:a1:00:cf:77:a2:7e:17:
c3:0e:66:2a:95:10:ca:d3:77:f8:ec:66:7a:f4:24:
28:eb:ce:cc:f7:e6:a5:0c:8e:6d:0b:ea:a8:d1:5f:
76:16:dd:43:63:37:8c:ce:0b:f8:6c:f2:eb:2e:45:
f9:ee:72:25:8e:a1:6a:83:55:db:5d:45:78:62:0f:
09:1d:e7:c3:40:6c:e1:c6:ac:6f:9a:85:a5:d8:1c:
89:40:e6:cb:ad:a6:7d:96:3e:e1:22:65:1b:fb:04:
45:30:eb:e4:40:63:f5:bb:ef:83:bb:b6:88:f2:75:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DD:2A:2A:37:B6:3F:46:3D:A2:17:40:A7:0A:1B:77:94:BB:52:AB
X509v3 Authority Key Identifier:
keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ef:38:11:1e:d0:89:ac:94:b7:47:c8:43:aa:6a:79:8b:fb:
fe:17:fd:5d:f8:05:16:37:d1:02:87:04:0d:a0:dc:01:eb:ca:
de:f7:c8:bf:1a:3c:07:19:04:cf:3b:e8:83:55:47:4a:b9:35:
a6:e5:d7:ae:b1:52:f3:73:31:a9:46:fd:84:cb:4e:cb:54:0d:
a8:06:34:9b:fa:77:7d:62:5f:52:82:b6:46:f3:83:31:82:52:
98:6a:27:93:91:87:50:ca:92:1e:c2:3a:87:13:15:a8:14:48:
f7:e0:8b:f7:a2:2d:2a:39:5d:bf:08:d4:6d:57:be:a4:96:81:
95:19:c4:8e:e0:25:ee:b3:be:c3:de:94:a8:43:4e:fa:13:4b:
07:ae:fd:c7:ef:69:26:fc:5b:0f:22:05:cd:b0:bf:66:1e:41:
18:43:28:fa:75:e8:fd:db:75:5d:f5:92:53:eb:73:44:c9:8b:
62:55:ab:e1:41:eb:8b:1a:59:42:96:20:a6:bd:c5:75:8c:b8:
bb:6c:2e:34:31:ea:01:7f:03:02:84:b2:8d:cd:53:f6:50:3f:
5b:7e:c2:3f:85:9d:28:dc:de:98:49:62:ab:fe:b2:36:7b:cb:
68:cc:b8:2e:3e:dd:d8:62:2b:bc:dd:4f:e4:26:2a:18:36:a0:
74:da:a1:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P68MvKf3Ap4z9ro+ugz2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMzJlZjBjYWYwYTA1NzUyOWZiOTI4Zjc2OTYyYTc0MjUz
OTBkYmEwHhcNMjYwNzIzMTcwMDIwWhcNMjYwNzI0MTcwMDIwWjAzMTEwLwYDVQQD
Eyg4Y2RkMmEyYTM3YjYzZjQ2M2RhMjE3NDBhNzBhMWI3Nzk0YmI1MmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyIdZ6GqJRPvbunaPq1rY0Rdhm6c
EuLPtuCKIzJEijDjmnOm3kWCUJd4DOBOBR4xXqsMez5z/ZyXCq6X/IQUPxMdo7iT
j/mcnfcgapWTtkaSsNgCvHoIrsKmgqliqk+Pdan8E6Qv46MVyU15iL/JSeNmWg8Q
yi52Va2aceFAxU8UjsB4/8fDeDpVEJVBEaEAz3eifhfDDmYqlRDK03f47GZ69CQo
687M9+alDI5tC+qo0V92Ft1DYzeMzgv4bPLrLkX57nIljqFqg1XbXUV4Yg8JHefD
QGzhxqxvmoWl2ByJQObLraZ9lj7hImUb+wRFMOvkQGP1u++Du7aI8nXgtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzdKio3tj9GPaIXQKcKG3eUu1KrMB8GA1UdIwQY
MBaAFO0y7wyvCgV1KfuSj3aWKnQlOQ26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RMdkRLOEtCWFVwLTVLUGRwWXFkQ1U1RGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81ZjYzMmYtZTI1Ni00ZjI2LTgyMWEt
MWRiNTMxYzlkMmQ4LzEvN1RMdkRLOEtCWFVwLTVLUGRwWXFkQ1U1RGJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81ZjYzMmYtZTI1Ni00ZjI2LTgyMWEtMWRiNTMxYzlkMmQ4
LzEvN1RMdkRLOEtCWFVwLTVLUGRwWXFkQ1U1RGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALu84ER7Q
iayUt0fIQ6pqeYv7/hf9XfgFFjfRAocEDaDcAevK3vfIvxo8BxkEzzvog1VHSrk1
puXXrrFS83MxqUb9hMtOy1QNqAY0m/p3fWJfUoK2RvODMYJSmGonk5GHUMqSHsI6
hxMVqBRI9+CL96ItKjldvwjUbVe+pJaBlRnEjuAl7rO+w96UqENO+hNLB679x+9p
JvxbDyIFzbC/Zh5BGEMo+nXo/dt1XfWSU+tzRMmLYlWr4UHrixpZQpYgpr3FdYy4
u2wuNDHqAX8DAoSyjc1T9lA/W37CP4WdKNzemEliq/6yNnvLaMy4Lj7d2GIrvN1P
5CYqGDagdNqhDA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:02 2026 by rpki-client