Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier: tGkcQD9yLQj+8gtiVvYbUtFsKSeM0jiPbtOpjXDcoK4=
Subject key identifier: 41:42:94:28:DD:04:04:1E:DF:26:88:38:B0:38:77:A6:30:7E:3A:B1
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial: 019F8FB5A8C69C67782C9A8B7462D5A8154C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number: 0DD4
Signing time: Thu 23 Jul 2026 16:01:14 +0000
Manifest this update: Thu 23 Jul 2026 16:01:14 +0000
Manifest next update: Fri 24 Jul 2026 16:01:14 +0000
Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: I6OzrzAiaxUusDgMyeO/ISK9F2fs/FrjXxTTdzz3B6o=)
2: BLLh5nNCz1s5if2pHYByIfYWqoE.roa (hash: EPJ+RLaqu85xGvwiEKDRnHSjYD9ruTYxv3tR7VjbDJs=)
3: E7Yzs4RQ5PAWanrzJaRetL_vIW4.roa (hash: ZfDaAmo4Ze/Cj58O8IkcEHyg6puoaRdc7XWQV2TfV6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:a8:c6:9c:67:78:2c:9a:8b:74:62:d5:a8:15:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Validity
Not Before: Jul 23 16:01:14 2026 GMT
Not After : Jul 24 16:01:14 2026 GMT
Subject: CN=41429428dd04041edf268838b03877a6307e3ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:73:76:b7:55:8c:91:32:20:dc:99:c0:cc:59:
ce:4e:49:14:e0:60:7a:54:f6:79:39:bc:bb:9c:93:
99:de:23:91:ab:7a:cc:29:59:87:7f:1a:67:77:40:
10:5e:7f:67:c4:bc:4f:aa:2c:d5:93:1e:ee:38:c0:
2d:11:5d:73:d4:46:55:c3:55:08:d8:63:f6:1e:5a:
c3:a6:ad:2d:12:db:03:7e:bd:e4:44:16:05:4f:c7:
85:10:44:8f:34:4a:e4:a6:8c:16:2b:bf:b3:e0:40:
9e:0c:bc:28:49:37:e4:a7:58:83:63:5d:86:2a:92:
f7:ee:a8:fd:8d:76:31:c1:e0:72:be:e8:eb:50:6b:
d9:22:13:95:f6:62:9d:bb:1e:b2:d2:c2:dc:22:2c:
44:43:18:a5:0a:ba:20:ee:78:e8:74:69:c0:f3:77:
4e:19:50:0b:f7:d4:72:52:63:73:1b:5f:12:5b:c9:
12:69:fc:1e:0c:5a:b9:c5:2e:ef:fc:59:33:70:66:
0f:60:cd:83:9b:db:8a:ac:a2:ef:5c:af:1e:9d:3e:
4e:73:9b:dd:b1:40:f2:a5:89:3a:0b:4b:d1:97:f4:
d1:11:0e:72:00:3a:37:08:30:1a:6a:aa:4b:0b:2f:
f5:5d:de:5b:b9:65:75:90:35:aa:b8:99:c1:26:95:
53:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:42:94:28:DD:04:04:1E:DF:26:88:38:B0:38:77:A6:30:7E:3A:B1
X509v3 Authority Key Identifier:
keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7a:99:37:59:8f:48:5e:44:e0:89:bb:84:78:35:d3:70:a8:
ef:5f:e0:1d:68:8a:49:2b:a4:9a:25:65:1f:31:fb:ff:ef:c2:
66:47:4e:56:51:f1:e6:a5:ad:94:1f:88:25:5a:8c:64:f1:23:
a6:bb:f9:1c:db:28:ca:db:7b:b7:0f:0a:8c:fc:d5:fc:61:fc:
21:7a:8a:79:30:72:f8:79:78:6f:86:3d:1d:dc:8e:9b:36:a4:
95:97:a8:b7:07:42:88:7d:3f:35:c8:ff:b0:66:32:3e:8b:df:
7a:e5:9e:31:6b:e5:cd:b3:25:34:7d:50:8b:a7:24:54:18:05:
5e:af:49:db:d0:27:2f:d8:5f:d4:d6:e7:13:06:58:a7:d2:92:
29:5c:e4:bd:ef:0d:38:ae:d1:5c:d8:e5:99:b3:20:31:97:16:
5b:17:2c:66:be:41:e7:08:4c:a3:8c:3c:a0:48:38:aa:b9:33:
51:2b:c9:64:d4:cf:21:92:b8:23:b3:ab:ca:00:28:a6:57:5f:
39:74:42:5f:84:20:4f:50:19:d2:67:36:10:52:13:e0:37:5a:
df:51:2b:34:cb:55:80:ea:9d:87:7b:22:9d:d9:08:d7:81:72:
ae:9f:db:e6:01:a3:1d:a2:8a:94:22:fb:f1:0e:39:f4:fd:d8:
bd:89:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:27 2026 by rpki-client