Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
File: 7w7IG5xlO440BQj_hI2wZuNncrA.mft (raw, json)
Hash identifier: I9FBx0oBgtG776+HqHrHgI5XHTzovhRBSS7YXNOEgt4=
Subject key identifier: AF:34:0F:29:69:1E:0C:9D:F1:CB:19:33:47:03:FD:B2:FC:04:D0:DE
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 019F9135A46C54E90008486A709348F306AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
Manifest number: 09F8
Signing time: Thu 23 Jul 2026 23:00:39 +0000
Manifest this update: Thu 23 Jul 2026 23:00:39 +0000
Manifest next update: Fri 24 Jul 2026 23:00:39 +0000
Files and hashes: 1: 1-iYojE0-bkqoV5dZTp5mESZkuMc.roa (hash: IBrMOBEILaJ3aIFlHGFpIPbUN6/UuC5r0K5zqJd+Mnk=)
2: 7w7IG5xlO440BQj_hI2wZuNncrA.crl (hash: QuLEs0eMqQ87KbTFJkUgDO3TVpn7wxgsxxP6fp8kE5g=)
3: atHWqvE_ZaHJPo5qCwW1PGxUw7s.roa (hash: jkDG3raOa2YgMVxrQwlxDz2jPOeQPczc27crizlM5xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:a4:6c:54:e9:00:08:48:6a:70:93:48:f3:06:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Jul 23 23:00:39 2026 GMT
Not After : Jul 24 23:00:39 2026 GMT
Subject: CN=af340f29691e0c9df1cb19334703fdb2fc04d0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:09:0a:60:82:0f:94:27:e5:8f:16:c4:e8:
fe:eb:0b:55:e6:ca:32:73:75:cc:dd:8a:70:7a:7a:
3f:89:41:13:3e:24:36:f4:40:97:9b:b5:0c:5a:c1:
af:14:b6:87:c0:b2:8e:1c:f5:5b:20:7c:39:79:7c:
da:36:08:28:ec:cd:00:00:1e:48:4c:32:c0:9c:aa:
90:86:d0:be:ce:3e:7a:9f:81:40:41:58:4a:61:37:
fe:c7:a0:01:2c:42:66:b0:17:61:be:65:63:12:b8:
b5:c3:f6:b1:9e:22:1f:5f:9c:d7:3a:0c:c2:be:d7:
9e:9e:02:8e:4a:c4:bf:bd:27:56:86:e9:cd:7a:95:
f7:49:57:ed:67:d6:de:05:a2:9d:81:8b:f6:bc:ec:
1d:a5:4c:d9:01:d1:b9:66:ef:78:fc:ce:a6:c2:4c:
98:bc:f4:e9:ae:0f:b6:fd:2b:32:16:93:3d:b7:54:
2c:11:04:5a:b6:09:eb:0c:e0:b2:29:72:b0:c7:28:
78:4a:99:a3:2a:08:ec:d3:50:87:36:d2:f4:78:56:
89:73:50:ff:87:20:ce:d1:ed:4f:f1:fd:05:76:94:
57:c8:bc:73:d9:d8:79:11:55:a4:f9:a7:7e:f5:1e:
6e:de:60:7b:24:45:ff:48:d1:01:bc:25:b7:e4:10:
04:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:34:0F:29:69:1E:0C:9D:F1:CB:19:33:47:03:FD:B2:FC:04:D0:DE
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a7:07:19:9e:91:64:e5:55:5e:29:65:df:d0:14:a4:d8:cf:
0c:92:75:d0:bd:1e:b0:c3:f9:29:a1:10:4c:a6:5c:b2:f8:25:
08:97:aa:b4:63:c0:34:99:9a:91:ec:d1:43:95:33:49:da:83:
98:e4:b2:ac:11:b3:eb:a6:6a:d6:62:5a:81:80:fb:90:be:fb:
44:2d:6c:74:e8:3e:71:8a:3f:81:fb:f5:4f:db:2b:34:80:75:
00:cc:75:6c:9a:47:ac:be:24:2d:92:cb:b2:5a:69:92:1e:c9:
74:e4:61:32:e3:7f:fe:db:5a:74:19:a6:10:f0:71:1b:c1:29:
ce:24:7f:06:9b:a0:62:d8:af:1f:d9:1e:fd:53:b5:05:93:b6:
07:76:c8:93:be:d2:1d:d6:23:60:52:34:34:75:fe:de:c8:1b:
8e:c3:f3:cb:e8:03:12:59:cb:55:ac:30:dd:7f:b0:f1:0d:36:
b3:02:e2:c0:ab:70:e0:72:64:c5:4c:63:c9:cb:15:96:5c:4d:
b0:06:41:5f:32:9a:7f:c7:cb:92:4d:02:65:4a:4a:b6:1b:8d:
16:b4:f5:56:a5:bb:d5:78:8d:a2:2d:bf:b4:5a:a9:c8:ec:39:
68:b0:db:5d:f3:7b:ef:dd:d8:8d:c7:d7:87:c2:78:eb:0e:68:
b2:64:2b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:54 2026 by rpki-client