Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
File: 7iNCg3Pc6KX5f0XvxsKLn7581U0.mft (raw, json)
Hash identifier: G3cscy5BFwiwAJW+UZyi6BDsAlu25NtALe7u3RyGHSU=
Subject key identifier: 23:5D:AA:F4:71:18:8F:CF:5E:72:8C:38:1B:BB:5E:E2:9D:50:49:7B
Authority key identifier: EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
Certificate issuer: /CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d
Certificate serial: 019F8F7E5152795312339F845AEA29745459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
Manifest number: 032D
Signing time: Thu 23 Jul 2026 15:00:47 +0000
Manifest this update: Thu 23 Jul 2026 15:00:47 +0000
Manifest next update: Fri 24 Jul 2026 15:00:47 +0000
Files and hashes: 1: 7iNCg3Pc6KX5f0XvxsKLn7581U0.crl (hash: NKbbQR8QSrKtSJlyXEqQ8LWkI5gwkyVY6EPtJH00yEU=)
2: qwQxCub0ZLxdSIPTyyt0hid0rjE.roa (hash: 45em9x7vt23Yzt9V9VCNiHhaJfkIP4nZW7OBnn0WqDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:51:52:79:53:12:33:9f:84:5a:ea:29:74:54:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d
Validity
Not Before: Jul 23 15:00:47 2026 GMT
Not After : Jul 24 15:00:47 2026 GMT
Subject: CN=235daaf471188fcf5e728c381bbb5ee29d50497b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7e:07:b4:22:6d:a1:11:62:8b:a1:6d:0c:5d:
e2:02:66:fe:97:14:28:48:6d:56:e9:f4:7a:38:77:
7b:76:6e:9a:dd:38:d9:12:b0:2d:51:a8:ed:e3:3e:
77:6f:56:f0:c3:c4:56:b7:65:bc:be:b2:1a:b8:8c:
49:5d:ed:cb:5a:3d:05:30:0d:71:36:cb:e5:00:b7:
5c:62:b2:15:09:c7:62:f8:d8:5d:f2:24:c8:7b:72:
cb:b9:57:27:f4:cd:1d:85:44:57:be:08:62:68:fe:
f0:86:ec:61:f1:45:8f:a0:e7:70:01:92:38:30:a5:
0d:63:79:21:a6:a9:61:15:6a:3e:d1:98:78:6b:0c:
e9:5d:bd:8b:d8:5d:63:50:a0:5e:3b:89:25:d5:6e:
f1:7a:90:e4:32:dd:c1:3b:3e:8b:ba:64:2f:4a:7c:
d2:2b:34:66:72:14:12:a7:e7:3b:87:da:31:52:a9:
d4:21:34:4e:84:36:65:f1:4e:d1:29:3c:a1:b0:5e:
b0:37:f3:b0:25:02:ce:3b:33:97:d3:1b:21:e9:61:
0d:d1:80:b6:28:0d:88:f4:bb:8d:5d:c8:81:e9:45:
b1:37:c2:6b:b4:06:05:74:df:c8:3c:e3:88:8a:67:
76:66:e6:d2:14:c9:21:be:27:fa:55:43:67:23:34:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5D:AA:F4:71:18:8F:CF:5E:72:8C:38:1B:BB:5E:E2:9D:50:49:7B
X509v3 Authority Key Identifier:
keyid:EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:31:9d:0f:e3:a9:5b:a3:39:22:d4:2c:24:df:78:44:1f:58:
6b:95:95:ed:23:7c:37:81:ee:94:06:f2:ff:2d:02:63:67:1c:
ee:96:b8:56:af:2d:7a:81:68:d1:0e:ce:3e:dc:36:9f:ad:29:
86:a1:65:5f:23:1f:07:aa:07:97:95:7c:e8:f4:8a:de:91:c9:
16:ad:e0:95:04:20:b1:10:d4:e3:ba:8e:1d:ec:b0:e4:7a:5d:
3f:b1:2f:64:f8:28:1b:fd:ab:94:0c:d5:0c:2c:28:4e:32:46:
f2:e2:eb:d4:43:f1:74:36:06:35:7b:b1:9e:12:8e:d6:c2:c8:
7b:02:03:02:79:08:51:9f:d6:de:f5:cb:a8:4a:84:61:97:1e:
db:a4:55:71:44:ba:8b:a2:c9:ab:bd:af:f4:97:80:50:b8:75:
21:d3:49:0f:50:17:f7:9c:66:d7:3a:e9:f1:b8:1d:82:1c:2c:
41:2a:69:dd:72:3e:30:66:93:88:d7:95:f7:6d:c4:31:1d:01:
47:76:dd:08:77:42:c2:a8:4b:d6:b1:46:24:13:ee:69:13:93:
fc:80:a2:1c:06:f1:3c:24:31:5b:66:3b:10:c9:fe:ef:76:5e:
2a:46:1c:27:4f:bd:95:60:42:65:f6:96:e2:2e:80:8a:05:d8:
e3:60:95:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:30 2026 by rpki-client