Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier: G49a+QmRJrRMElfEh1PKeZqDXQYZoCNCpsfHKy0fL3U=
Subject key identifier: 7C:1D:6E:A7:7F:61:F5:B7:D2:9B:7C:99:37:B8:81:88:25:D5:CA:4F
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 019F8F7DD6FD074F31882A927517C1BF4D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 15:00:16 +0000
Manifest this update: Thu 23 Jul 2026 15:00:16 +0000
Manifest next update: Fri 24 Jul 2026 15:00:16 +0000
Files and hashes: 1: 16IES9haatKMkP-HejVSazJdMkY.roa (hash: mQPtnV+K2FeabOm74g9Ubv3nHZo4wLPT4wK0cMDSkes=)
2: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: XU8GE+uUi4YcoogjBr9tGFv3L5y93LrIxjsiq4zGqtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:d6:fd:07:4f:31:88:2a:92:75:17:c1:bf:4d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Jul 23 15:00:16 2026 GMT
Not After : Jul 24 15:00:16 2026 GMT
Subject: CN=7c1d6ea77f61f5b7d29b7c9937b8818825d5ca4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:13:38:cf:51:c4:4c:8a:1d:a5:bb:2f:e4:b1:
9d:0a:da:bc:af:bc:e0:98:68:4a:dc:c4:6e:98:67:
9f:24:de:79:78:f2:e9:45:2d:bc:3b:2b:b1:79:22:
ca:71:5f:cc:ae:fd:64:15:dd:86:9d:b4:24:95:67:
25:ef:f2:7c:5b:31:4d:9a:e2:6f:27:82:b0:54:d8:
66:96:a9:d6:a7:d0:6f:1a:46:61:e5:1c:fe:af:26:
c1:73:61:85:01:48:54:7b:a5:7b:af:3a:e8:19:b3:
c1:8d:ed:ec:8d:b4:fc:d9:eb:f7:05:f6:88:96:23:
13:70:a7:f4:d9:8f:fd:70:ba:7e:af:58:54:a0:ef:
24:70:84:8b:2b:bc:9d:d4:9b:3c:19:29:bb:23:79:
b4:01:ab:f6:5c:4e:4c:24:78:49:33:d5:ef:51:b6:
78:34:f0:21:4b:31:db:3d:e1:a0:e2:f2:67:59:7e:
2d:1d:91:c7:17:64:83:58:42:57:51:11:ed:fd:72:
40:c1:fd:93:36:85:e5:50:73:01:d1:44:34:5e:f7:
10:84:f4:3a:48:5e:2f:49:a7:09:eb:d1:51:7e:13:
e0:54:09:8f:07:ff:3e:de:d2:a3:d0:19:78:a5:31:
cf:9c:4e:69:33:55:6e:c9:09:86:7d:d8:77:84:a5:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1D:6E:A7:7F:61:F5:B7:D2:9B:7C:99:37:B8:81:88:25:D5:CA:4F
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:24:26:5c:df:46:91:d6:81:17:db:f6:fc:09:0d:18:1e:9b:
69:fa:2f:fb:bf:8b:96:86:eb:31:45:1f:d2:7e:97:f6:79:0b:
ff:77:79:22:4c:12:8c:72:91:4a:de:58:b0:c7:30:a6:7b:1f:
32:e1:bb:a8:2f:04:a0:ba:af:6e:56:f6:fa:53:45:a5:11:8d:
fa:96:ae:44:ba:ac:ba:cb:ae:9b:01:c4:cd:6e:1a:49:be:a1:
d2:73:7c:c1:3e:33:f4:80:ce:64:43:e3:b7:e1:cf:d6:d3:0c:
8a:c0:4d:4d:f6:40:6f:59:35:fa:ac:52:b9:d7:e5:dc:21:91:
b1:3c:cd:54:14:b2:94:52:a5:01:9b:49:80:aa:b1:1f:0b:a3:
e6:95:b8:f4:74:33:02:c5:b7:f5:bc:82:77:72:b9:0f:c1:ed:
24:17:2f:84:51:e1:b6:e9:6e:4d:9a:a3:27:f8:74:27:72:98:
9c:08:68:67:d6:98:ae:95:ca:4d:bc:c6:41:ef:76:41:28:91:
47:0d:a8:af:19:00:ac:2b:55:b2:10:25:f2:5e:80:12:07:b1:
77:e6:fb:29:64:7d:a6:47:b5:4b:8a:a0:94:ed:4a:ab:4b:d7:
4b:cf:1b:61:c6:ed:e1:29:64:fd:a6:60:35:8d:0c:76:ba:77:
35:71:57:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:40 2026 by rpki-client