Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
File: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft (raw, json)
Hash identifier: 9O1Nr/UWw2+NdjtrAwiP6Rn5cDHRuv9cE6/bR2UU7fQ=
Subject key identifier: 14:91:6A:0A:7F:2B:AA:D0:E0:5E:9B:B8:09:C2:82:77:2F:B5:71:84
Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
Certificate issuer: /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Certificate serial: 019F916D801BAB42455C38EF84B97B483CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
Manifest number: 0C80
Signing time: Fri 24 Jul 2026 00:01:40 +0000
Manifest this update: Fri 24 Jul 2026 00:01:40 +0000
Manifest next update: Sat 25 Jul 2026 00:01:40 +0000
Files and hashes: 1: 2v4YgEEU5PZAEx9kaov0Dt0r6ZE.roa (hash: yvRtNPx1WUhuCSJ0MLLVNvVm/bVKPnCTaAl6EEupAH8=)
2: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl (hash: Mpyl8Qzo/qbeOeisLSLfiiMOncHXG2R4xHBYCnVevDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:80:1b:ab:42:45:5c:38:ef:84:b9:7b:48:3c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Validity
Not Before: Jul 24 00:01:40 2026 GMT
Not After : Jul 25 00:01:40 2026 GMT
Subject: CN=14916a0a7f2baad0e05e9bb809c282772fb57184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:0d:9c:70:5e:d9:0d:f7:95:f2:05:c4:1a:
08:92:35:b6:8c:9f:e9:6b:9f:a2:a7:4a:96:c4:b1:
78:a9:d2:a9:3b:a4:81:f7:58:fd:55:33:b2:b2:e3:
fa:de:d2:13:85:23:27:86:c9:4d:21:ce:60:55:37:
3c:21:18:f6:b7:86:c8:6e:85:5c:5b:13:dd:df:11:
93:6c:18:b0:0f:d0:5e:7d:40:78:4a:f0:e0:a7:be:
47:e5:82:a6:8d:f4:30:11:cb:df:b8:5e:75:d0:1e:
26:53:5f:0d:8f:17:3b:b8:77:2a:97:69:d9:86:1b:
61:1b:50:ad:8d:95:cc:22:ed:1c:25:91:2d:9e:c0:
21:4b:36:4b:93:f2:0c:0f:21:c3:9b:e2:3d:ac:8d:
f4:cd:24:76:9d:52:b9:82:20:80:5a:1e:63:8b:73:
71:1f:b4:7d:91:e6:d1:02:ea:93:00:2c:c3:a0:50:
40:b1:f4:bc:fa:57:59:14:0f:4c:bf:25:34:27:a6:
40:4d:7c:f8:07:91:c8:49:e8:b8:2a:26:8c:84:d1:
2a:e3:b5:58:4a:4a:8a:17:cb:f8:a3:88:75:88:9d:
1a:10:b6:37:59:f6:58:61:3b:7f:d3:9a:cf:7f:f0:
76:94:5b:84:37:92:d2:e7:3b:e8:a5:86:48:95:35:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:91:6A:0A:7F:2B:AA:D0:E0:5E:9B:B8:09:C2:82:77:2F:B5:71:84
X509v3 Authority Key Identifier:
keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c3:49:63:df:82:be:2a:ce:b2:e1:43:46:df:39:37:c7:28:
bc:6b:71:bc:fd:e9:80:ba:9a:17:42:66:c6:ac:94:c5:be:3a:
b3:d6:0e:22:83:dc:6b:76:e6:c0:82:57:a5:7b:77:07:dd:61:
9e:4d:a5:47:38:c6:01:44:77:85:dc:ed:15:da:f0:48:8c:f6:
ed:91:4b:37:eb:43:b5:68:5b:db:2d:96:04:1d:38:50:a9:d3:
87:b8:95:c6:03:8b:92:1c:a3:9b:52:6b:c1:a6:a0:2f:e3:59:
7d:00:23:7a:d8:ca:53:02:3e:2c:f9:c8:b9:82:f4:13:33:d9:
da:94:88:0c:3f:13:57:8b:bd:dc:69:be:ad:fb:7f:7a:b1:4b:
5b:29:e5:74:c8:c3:0e:da:6e:66:0a:0f:36:0c:f2:d1:6f:75:
4e:66:ae:b7:bc:a0:7a:42:2c:fd:0a:ab:1c:a6:4f:fb:b3:f9:
b3:dc:8c:96:69:2d:04:35:dc:01:53:a0:05:72:fe:ac:6d:f1:
81:1d:7d:4c:7a:3e:25:1e:bb:83:30:55:79:ff:cf:f0:6f:ea:
10:26:9c:29:fb:3d:57:bf:95:9a:36:3a:7f:0e:ff:70:73:1b:
32:d8:0f:89:fd:1c:7b:42:96:7a:21:46:4f:da:db:3b:83:49:
7e:d8:cb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:01:28 2026 by rpki-client