Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: fNtgwBof0oqxvPQyCbHg9xD8DE3cK/apmDIH/9PhlOg=
Subject key identifier: 06:57:57:21:26:04:1B:50:51:36:13:53:10:2E:CA:6E:21:40:5F:0D
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 019F9211AAE5CF0D67A6B37739E42ACA3091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 1194
Signing time: Fri 24 Jul 2026 03:00:58 +0000
Manifest this update: Fri 24 Jul 2026 03:00:58 +0000
Manifest next update: Sat 25 Jul 2026 03:00:58 +0000
Files and hashes: 1: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: CGET9N80i79faJ9ZACanhjV8f3z7YJ2gW6cpSDirWF4=)
2: GJC0hK61YfoTGiu4_BgSpKpEET8.roa (hash: WwyFHk/cwNc1twKhKndoqjGYh79zgc/kHaQHCW2vww4=)
3: XmgvodIVZlwmFpJZFx9OEb_S0YI.roa (hash: U77Nh8N61bX2SG2LWG51QmpxAadiZWSFMU1pOMYXXLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:aa:e5:cf:0d:67:a6:b3:77:39:e4:2a:ca:30:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Jul 24 03:00:58 2026 GMT
Not After : Jul 25 03:00:58 2026 GMT
Subject: CN=0657572126041b5051361353102eca6e21405f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5b:d5:a7:41:87:8f:7f:64:22:1f:c2:5e:7e:
08:fb:fd:ef:b9:bc:f1:fc:33:46:3c:83:80:19:18:
12:0e:62:3d:8e:cd:d5:2a:33:61:21:9e:f1:bb:d0:
2e:df:52:ae:01:c2:27:95:71:59:39:7b:6f:aa:a7:
08:dc:eb:a9:70:91:b9:6e:e2:e0:94:d3:c6:57:cb:
52:16:77:92:00:3d:5f:24:27:aa:69:19:1b:03:12:
69:9f:e4:58:a7:29:65:1f:32:b9:01:50:7f:1e:1b:
b2:cb:b7:a2:98:d8:2f:75:5f:06:a8:aa:3a:2a:cd:
4e:9a:58:b9:04:81:cc:1d:a3:80:37:9d:84:3b:08:
07:b7:a7:99:9e:c4:29:45:ee:a5:f3:ab:c3:46:d5:
6c:1f:47:fa:d1:39:58:29:d5:c4:40:0e:5e:58:ad:
4a:d4:2a:09:88:13:ca:4b:29:87:f4:7a:e3:19:91:
b7:43:a8:b1:7f:c4:c5:c1:30:85:ae:c2:58:84:73:
ae:67:b0:c5:6b:d6:f6:27:8f:d4:09:f5:3a:7f:11:
de:67:03:53:55:0f:4f:ee:8e:aa:03:09:98:c0:6f:
a2:b6:01:e5:e8:8e:68:36:2f:29:ae:25:1d:71:34:
de:c3:27:4a:11:e1:f7:18:fa:60:b9:da:0f:4c:3f:
72:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:57:57:21:26:04:1B:50:51:36:13:53:10:2E:CA:6E:21:40:5F:0D
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cc:12:c2:fb:a4:b0:61:49:48:90:0e:34:8e:5e:1c:73:11:
5b:ce:9e:f3:a4:de:57:02:5c:e8:75:f3:4c:bd:25:8a:7c:35:
a2:c0:4a:e8:79:6e:f0:2b:be:34:7b:ea:40:ce:26:d3:e3:b9:
8e:a8:b0:0c:a4:26:cd:ad:84:83:34:00:d6:8a:c7:da:af:88:
c1:87:1c:0d:72:57:2c:42:32:54:be:e7:5a:74:b2:56:8f:94:
0c:0c:05:75:c0:cd:7a:4d:f6:a6:c2:19:fc:71:03:5e:56:40:
78:94:91:82:f6:eb:80:05:11:28:64:32:83:c8:86:08:0e:65:
52:5c:c5:88:70:7e:38:f9:20:61:c4:ac:ff:00:e9:c2:ec:39:
02:75:f7:ff:13:f6:3e:41:fa:3c:68:48:75:b5:af:55:bd:37:
83:d3:96:77:8d:69:b3:47:25:23:5b:4e:d4:7c:af:a4:56:3f:
27:ef:11:fb:10:24:e1:81:89:b1:a1:4e:56:59:3f:6f:e8:ee:
28:f2:b1:a3:13:02:a3:6c:f5:f5:5b:f3:bb:a4:d3:fa:c5:47:
29:19:30:68:21:67:b6:5a:4b:b7:38:2c:b2:3e:54:26:57:30:
f1:34:3d:ac:9a:36:d5:10:fb:ce:61:4b:08:b0:84:c8:6f:d3:
3e:c0:67:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:40 2026 by rpki-client