Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
File: 7N86SgXzcFD3wDedNPT0gUvSCd8.mft (raw, json)
Hash identifier: Jb1KXe9F+7Ij2W1TaDmlgwyFS7mC99l2D1IG+X4jkDY=
Subject key identifier: FB:0A:FA:C9:67:82:AA:B3:2E:EF:40:C7:F5:F9:F4:E6:79:F1:68:C7
Authority key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
Certificate issuer: /CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Certificate serial: 019F91A3D8A73867B06FF29B7805679028C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
Manifest number: 0520
Signing time: Fri 24 Jul 2026 01:01:01 +0000
Manifest this update: Fri 24 Jul 2026 01:01:01 +0000
Manifest next update: Sat 25 Jul 2026 01:01:01 +0000
Files and hashes: 1: 7N86SgXzcFD3wDedNPT0gUvSCd8.crl (hash: opWcTrjlshpJWOh+eH7JxYZGuV9fK0n6h/wARHRhukg=)
2: HRNjMQScROeFTp_2rmfTV1Pqr40.roa (hash: 66mHtRw/URStOe2xC3SxpwCWQ3KY1R/KgZMB+PrJKAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:d8:a7:38:67:b0:6f:f2:9b:78:05:67:90:28:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Validity
Not Before: Jul 24 01:01:01 2026 GMT
Not After : Jul 25 01:01:01 2026 GMT
Subject: CN=fb0afac96782aab32eef40c7f5f9f4e679f168c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:fa:07:b1:4a:a9:96:1e:fc:dc:52:88:3a:
a1:09:6a:e4:81:a9:54:2b:91:12:35:38:2a:58:d1:
80:c5:52:d9:b2:00:b5:59:68:0f:16:ef:bc:f0:67:
a9:36:f2:2d:51:26:c2:fa:37:d3:c0:fe:a9:58:28:
9f:82:27:2a:f9:eb:49:6a:2e:fd:12:88:bd:76:87:
b2:e7:a9:81:65:47:f6:7a:6d:57:fd:d8:df:54:e6:
08:bf:83:e9:a6:9e:b8:e1:ba:31:2d:a6:71:be:1f:
f4:e6:9f:d3:94:71:b7:3b:7a:c1:0b:13:99:b8:25:
a7:c3:ec:84:fc:29:42:da:ca:08:cf:96:fb:1e:63:
dd:e9:f0:5a:20:c8:59:37:64:fa:07:f9:8f:c6:5e:
39:29:73:fc:43:e5:83:2e:d0:77:7a:a9:bd:d6:e9:
70:d0:e5:23:72:16:01:8f:78:32:c2:8b:7b:d6:47:
80:29:fe:d6:11:a0:df:21:81:f4:f3:b3:9c:ac:c3:
a6:0d:c6:9e:c1:20:81:5b:23:7b:5a:c0:a6:32:b0:
6c:9d:ea:db:89:fd:aa:5a:7b:40:8d:c3:2f:3d:cc:
e8:7c:c2:34:42:f7:83:b5:73:2f:2b:42:97:8c:1e:
06:b9:79:82:58:6a:09:13:85:c7:05:a4:7e:87:1f:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0A:FA:C9:67:82:AA:B3:2E:EF:40:C7:F5:F9:F4:E6:79:F1:68:C7
X509v3 Authority Key Identifier:
keyid:EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0a:8b:2a:1b:04:34:6d:cd:36:4c:b1:ba:52:cc:91:33:8e:
9f:b7:6c:e1:38:3e:84:f6:93:51:71:af:69:3d:3f:f2:18:57:
f7:33:3e:6b:e3:10:ab:45:0f:c7:d8:73:ca:c0:84:0b:79:c2:
12:fa:4f:ab:8a:69:e3:91:45:8a:22:b6:d1:e8:4d:0b:37:90:
9f:7b:72:3e:72:9c:bc:eb:2a:e6:71:27:8f:fd:92:63:a8:53:
e0:92:76:af:9c:7c:5f:06:f1:27:f4:c0:c5:e2:a0:a1:0c:8d:
fe:b9:5a:b3:b5:8a:44:33:fe:e9:36:05:4b:a9:a6:50:c0:fc:
93:b3:12:90:d5:78:90:6b:ca:d7:89:23:8f:fa:d3:a0:e3:66:
16:c9:3d:03:c0:ed:cd:3f:ea:63:de:4c:71:e9:a5:7a:42:52:
ac:e4:e3:d5:a9:26:19:a2:95:b4:95:cf:69:15:7d:85:84:49:
ca:f7:18:57:2c:06:6f:c8:3b:59:71:0b:c9:1c:29:9a:29:6e:
bc:74:d1:7e:b3:18:25:13:2e:65:51:07:31:34:f7:37:57:30:
05:31:de:a9:7e:56:cf:29:0a:7e:78:61:fe:62:83:b6:1c:14:
24:e1:95:4b:c2:f0:a9:64:6c:b2:ff:19:fd:f1:59:b9:b7:00:
6a:d1:03:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:22 2026 by rpki-client