Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier: M5dEkfyyNx+lWmgz644kNvOPg74ajqgPZmkdwiqcYzQ=
Subject key identifier: 4F:5D:23:E8:D4:59:35:C0:3B:5E:7F:FB:B0:2F:A5:F4:44:48:A9:E7
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial: 019F9436AB89C3BB871A0C83FB778256DA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 13:00:38 +0000
Manifest this update: Fri 24 Jul 2026 13:00:38 +0000
Manifest next update: Sat 25 Jul 2026 13:00:38 +0000
Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: D+DsKDRPWetX/cuZXjDOcuxtam4sM3SpOGufmKtbqzc=)
2: TPFA9ANmjeizoRraD4Ig8TEK1SU.roa (hash: kT6UPV2xN7mmP7EqC+AR1+y3Fgn76QDWPblq40BQx1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:ab:89:c3:bb:87:1a:0c:83:fb:77:82:56:da:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Validity
Not Before: Jul 24 13:00:38 2026 GMT
Not After : Jul 25 13:00:38 2026 GMT
Subject: CN=4f5d23e8d45935c03b5e7ffbb02fa5f44448a9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:00:4f:27:a0:08:15:20:de:79:1c:c4:f2:
66:c8:38:6b:ce:03:bf:10:07:c3:e2:68:f6:04:22:
36:a8:41:7f:20:60:83:49:1e:f1:38:1c:4a:fa:e3:
13:24:9a:1c:74:4a:f0:5d:c8:01:9b:b7:eb:5c:9f:
16:2c:05:8c:30:59:07:90:32:86:f6:59:09:34:d0:
a7:96:c9:6b:24:6b:9e:b7:74:5f:97:25:29:8d:79:
0e:e1:b0:83:8a:e1:54:ba:3a:32:00:1d:4a:08:b5:
06:ac:95:6e:63:c6:90:0e:f2:a1:f8:f2:bd:97:e9:
3c:76:b0:f2:f6:7e:e5:64:ef:83:fc:1d:c7:2f:c6:
9d:62:dc:64:26:d5:b2:f1:64:d0:ce:49:71:09:56:
f8:33:9f:45:5a:01:4d:cf:23:17:3b:24:ab:d4:b1:
da:f8:4c:da:44:90:60:f0:85:04:4d:2c:ed:c6:02:
e0:f9:37:7b:e5:52:5e:c7:08:b9:c1:90:37:0c:c1:
bd:af:e0:39:75:6c:25:22:2a:44:60:5a:8f:22:8b:
84:1a:4c:6b:71:83:d5:28:63:63:43:6c:95:b2:db:
2e:68:62:ee:dc:74:23:4f:9a:a0:30:7d:47:fb:00:
57:9d:29:62:87:a6:eb:0a:51:38:4d:9b:69:37:60:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5D:23:E8:D4:59:35:C0:3B:5E:7F:FB:B0:2F:A5:F4:44:48:A9:E7
X509v3 Authority Key Identifier:
keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e8:77:56:69:cf:04:8b:a9:8f:a1:cf:de:c1:2f:ef:84:c9:
53:a9:c6:b6:2e:b2:f0:b5:e0:fe:98:3e:52:4b:85:fa:bc:eb:
9c:f2:f6:3c:28:8f:b1:02:64:23:b2:a2:5d:cb:4f:05:8b:b1:
85:a3:73:89:c3:be:58:50:2e:29:f3:cd:d9:d2:3a:74:3e:40:
83:dc:71:e8:4f:6d:0b:3a:a5:c0:60:17:f7:04:38:e5:85:c3:
6b:30:66:b2:a9:d4:8d:12:84:4c:f3:91:91:dd:ff:a9:8b:21:
28:2b:aa:82:dd:17:84:06:6d:5e:fb:cd:bf:96:e6:a1:40:eb:
01:e8:c1:ec:5e:2e:91:14:6b:29:2b:43:bb:25:22:05:69:5d:
d6:95:66:1c:6e:eb:52:c4:29:19:ef:42:f9:d5:b4:64:e3:d6:
76:85:05:ce:0e:be:1f:32:14:27:e5:e6:1c:7f:08:44:c3:e8:
a7:67:19:a5:77:9c:c6:09:c3:d4:03:da:d5:e5:30:f2:58:ef:
b8:13:49:61:81:68:92:ef:34:a9:32:bb:ec:6d:63:16:96:78:
9f:e2:31:32:81:a9:6b:71:c1:ec:3b:10:ab:d4:e8:86:fd:75:
cc:13:ed:6c:b3:2b:4b:af:56:fe:56:54:1b:a4:52:25:32:b4:
bd:28:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:42:06 2026 by rpki-client