Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: KuKbRTy/ctRlbEP8UteQAPFqQbvLGf7zgztIvCTcPzs=
Subject key identifier: 85:F0:9C:2A:83:CD:B2:78:4D:73:7B:7A:9F:8A:EB:65:65:9F:69:5A
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 019F9090BE97432E99A4CDF3995FFDDF85DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 17CD
Signing time: Thu 23 Jul 2026 20:00:32 +0000
Manifest this update: Thu 23 Jul 2026 20:00:32 +0000
Manifest next update: Fri 24 Jul 2026 20:00:32 +0000
Files and hashes: 1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: zewMk+f0jN57z+OwbKNPlYlTMDsciQEonBF8S+Ql8wI=)
2: CM5yTRt39UsRzQIWzuT7HO7bzSE.roa (hash: RH4eRmyLdVDmBQ+RCsFz+zVNIdYG+Aj2Xj1CkOhS/oI=)
3: LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa (hash: bMz5HXK6775JKPVW+G1i9ymi7O9XK+msuKRHy3NE0Qk=)
4: psWOMQeMbdYZeEJwNKNEAJmZbBU.roa (hash: Kwf/BATNuOaMCMQQKCC+7fI7j3/5LLVOOW7HAw/+s1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:be:97:43:2e:99:a4:cd:f3:99:5f:fd:df:85:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Jul 23 20:00:32 2026 GMT
Not After : Jul 24 20:00:32 2026 GMT
Subject: CN=85f09c2a83cdb2784d737b7a9f8aeb65659f695a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:49:99:8b:a7:af:a2:85:40:b5:ed:06:1d:
6d:ed:b6:93:31:36:cb:16:df:25:18:51:d9:24:16:
91:9c:4d:fb:14:3d:d9:b8:54:81:ab:a1:40:85:27:
e9:75:92:2f:ff:ac:e2:50:69:e0:10:4e:7f:a6:f9:
bf:04:c7:46:9f:d3:cc:9b:e8:e0:6a:38:d0:3f:50:
64:df:7a:d3:11:4c:2c:b0:c4:8b:e7:92:1c:36:22:
f6:68:61:64:53:52:a1:f7:fd:82:22:3c:0f:95:3f:
55:6a:5c:bc:c6:eb:c2:e0:71:06:12:0b:8d:56:41:
39:66:ee:67:0f:32:60:e7:a5:aa:5b:51:4f:ff:0c:
c8:d5:4d:77:31:7f:9f:5d:1c:5d:82:c4:f2:be:82:
aa:29:c1:8e:8b:ec:6e:a7:21:c1:5c:7a:9f:dd:ec:
fe:c5:2f:48:df:78:52:28:84:73:ee:3d:3e:23:9b:
ef:9e:0b:3b:8b:3f:37:9f:38:86:00:d9:42:86:b6:
0e:cd:ce:43:57:45:00:96:52:b1:c5:eb:45:f9:d2:
52:95:a0:71:c1:b9:78:a8:36:84:63:c1:94:87:24:
3f:bb:0c:64:2e:23:88:c7:37:de:9d:67:ca:96:7f:
e3:a0:01:4b:40:d7:c5:ff:66:88:16:b0:b1:a6:1d:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F0:9C:2A:83:CD:B2:78:4D:73:7B:7A:9F:8A:EB:65:65:9F:69:5A
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1c:86:e4:cd:23:65:4d:79:ca:3d:36:d4:d1:38:b2:6c:8e:
24:02:bf:19:4e:0e:46:8a:fa:3e:54:4f:11:d0:69:0a:cd:00:
cc:d3:56:ce:0d:30:0e:26:b3:80:5a:b7:60:68:e0:7d:33:ce:
75:f7:fd:e8:28:44:30:b5:96:a4:22:79:19:32:a9:d7:78:5d:
63:d3:19:6c:20:50:e4:85:bb:7a:be:23:1f:b9:b4:0c:4e:ea:
10:5f:b3:4b:23:cc:ac:07:ae:49:2d:ba:02:2a:bb:bd:c2:b1:
72:e8:a8:67:4d:a9:66:93:54:b8:b9:b7:0c:25:e8:79:2f:58:
81:8e:77:1d:24:42:f1:da:5a:e1:05:bb:0d:d3:92:f6:31:52:
f2:38:92:f8:59:9e:3c:5b:47:df:ad:81:ce:26:5b:bc:e1:7c:
0e:47:e9:8b:80:17:80:01:7e:27:5c:cc:49:9b:8d:56:dd:7b:
6d:7b:ac:91:38:d5:12:20:22:44:c2:5a:29:ee:1a:22:ea:b5:
10:44:0b:c5:99:d3:7b:8f:d2:be:b2:28:c5:ba:f1:ec:c6:bd:
e6:09:78:fb:0e:b9:b6:24:db:54:0f:93:e1:ee:3a:81:dd:66:
97:12:66:41:04:59:21:f7:e7:89:48:ae:2a:28:b0:a8:04:76:
7d:2e:2b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:32 2026 by rpki-client