Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File: 7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier: Qux8/Gav87zHqPmtwixGHSSIh4q7le/utNigrTy8EqE=
Subject key identifier: F4:C5:00:1E:84:AA:98:A8:1D:EF:DD:12:7F:D9:6D:43:49:76:09:92
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer: /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial: 019F90912C99D6629AF7670D971DE171A3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number: 195A
Signing time: Thu 23 Jul 2026 20:01:00 +0000
Manifest this update: Thu 23 Jul 2026 20:01:00 +0000
Manifest next update: Fri 24 Jul 2026 20:01:00 +0000
Files and hashes: 1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: 7v9G9/yHFZbmFbGQV5dYfTOKBC/E0JvI118srQzv6dQ=)
2: guibBNdYNmYjs3BhZ4d37Us7C4k.roa (hash: ERVCfgK3qCQAc++yH8oVuuxPI5EAT0LJxo2iXgCuAbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:2c:99:d6:62:9a:f7:67:0d:97:1d:e1:71:a3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Validity
Not Before: Jul 23 20:01:00 2026 GMT
Not After : Jul 24 20:01:00 2026 GMT
Subject: CN=f4c5001e84aa98a81defdd127fd96d4349760992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4c:3a:d6:64:d7:0e:33:3f:e0:a9:21:f3:84:
c4:50:65:b8:a2:a1:ee:79:66:3f:d4:e7:f3:65:08:
57:f3:cb:b4:ea:13:fe:48:35:c1:24:64:69:3e:10:
c5:01:fd:7d:70:bf:3b:d9:c5:95:ad:a1:37:06:ab:
50:c3:af:5d:97:09:6f:4f:96:74:54:4c:4a:95:4f:
1e:e4:32:e6:8a:a8:40:95:3d:d8:b4:75:43:b9:07:
2a:7f:28:a6:03:5f:8d:6c:54:d1:56:43:c4:97:d4:
09:83:ce:51:c0:37:08:ed:dd:62:77:65:23:d7:d6:
37:87:ad:e2:b8:bd:a5:4f:f9:52:56:dd:b1:ae:33:
7f:95:c2:f4:46:d0:4e:02:e0:4e:b0:04:f9:a3:17:
67:62:b3:dc:af:c3:52:a5:2a:e1:61:6c:36:be:83:
a5:61:e6:23:4a:ab:03:98:81:85:f2:98:60:4f:81:
b9:26:10:a8:ef:3b:73:26:28:93:a3:6d:9a:17:41:
f1:31:07:63:11:20:b3:55:35:4f:1a:09:6a:6e:3b:
3b:30:11:a3:2c:6b:9c:89:d4:d5:ea:26:4b:df:e2:
36:da:b8:d1:a3:2f:cc:47:64:0f:a8:17:e9:94:b1:
01:d2:04:ee:d6:47:21:a2:d5:a0:1d:b5:64:ff:30:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C5:00:1E:84:AA:98:A8:1D:EF:DD:12:7F:D9:6D:43:49:76:09:92
X509v3 Authority Key Identifier:
keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4a:ef:73:fe:8e:9f:c4:1d:93:db:81:bb:4a:c3:8b:5e:db:
dd:f8:7e:c8:68:b8:2f:29:1e:8c:7f:ef:e0:4f:a0:2a:ec:4c:
fc:23:40:ac:92:d2:b6:00:00:a6:e2:bb:41:63:0b:8d:b1:eb:
39:ef:12:9b:3c:b0:c3:bf:86:67:85:73:32:3a:dc:c9:8f:95:
8e:c1:ac:d7:a8:b3:e6:d2:cb:80:f2:1d:95:28:ba:72:9b:1a:
91:66:6f:6f:91:53:7c:ff:09:1d:32:af:52:eb:b2:57:5d:13:
49:93:f1:37:8b:cf:a7:86:69:6a:c1:c1:ba:12:17:2f:a2:c9:
cb:51:d5:cb:40:d6:f2:42:a1:74:3f:e0:e2:eb:94:76:28:65:
27:bc:a6:a0:d2:ab:7e:67:73:fa:c9:6f:db:ac:5a:b2:f3:9e:
27:c7:ef:b9:fe:ee:e7:62:7b:c7:82:b4:75:c1:d6:6b:ca:26:
d6:3b:d4:f0:66:44:15:d3:38:14:14:12:d1:6b:42:f1:1c:8f:
db:36:ae:52:74:40:26:ee:e5:a5:79:b0:68:44:a3:c0:03:45:
8e:a3:46:4d:24:35:be:ea:64:91:cc:fd:3f:82:6d:85:e2:43:
af:46:c6:0c:8f:9d:e6:af:13:aa:ba:26:ae:bb:18:15:9b:34:
10:9f:70:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:59 2026 by rpki-client