Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
File: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json)
Hash identifier: GaxRHfVnjY5ZU7uONM9SNTLDWk5892aOrHLfnPBP0WM=
Subject key identifier: FC:D4:67:E3:7C:D2:97:DF:D3:7A:79:DC:AA:43:5D:D9:0E:F6:32:B0
Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
Certificate issuer: /CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Certificate serial: 019F8F10DE3ED1D99EF2A672E6625A2D9346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
Manifest number: 1677
Signing time: Thu 23 Jul 2026 13:01:14 +0000
Manifest this update: Thu 23 Jul 2026 13:01:14 +0000
Manifest next update: Fri 24 Jul 2026 13:01:14 +0000
Files and hashes: 1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: C10P4a3CfNfSBfZHjGUqcHemGvodNyh6/OBfGKfuXV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:de:3e:d1:d9:9e:f2:a6:72:e6:62:5a:2d:93:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Validity
Not Before: Jul 23 13:01:14 2026 GMT
Not After : Jul 24 13:01:14 2026 GMT
Subject: CN=fcd467e37cd297dfd37a79dcaa435dd90ef632b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:ad:ae:bf:ca:8b:9e:cd:71:25:8d:9e:c4:
97:72:4b:88:48:5e:1d:8f:47:0d:ce:0a:73:90:83:
13:b7:66:99:bf:0e:f1:b9:55:49:8d:14:51:66:9f:
25:75:57:29:14:c3:9a:bf:6e:66:da:09:2e:f5:70:
82:32:22:3e:18:06:3b:d6:29:82:58:a4:f1:f2:ef:
c6:96:3d:ce:1c:6a:ae:9c:9b:86:48:cf:bc:75:2c:
7e:0a:d2:87:da:06:a3:24:4a:66:b4:1c:b9:fc:33:
c7:e6:df:52:53:61:74:ed:5b:3d:46:b6:c6:0c:e8:
b2:94:b2:67:0d:ab:c1:91:ff:80:2a:70:51:75:6e:
ce:45:09:73:f8:49:36:8f:5d:6a:42:67:10:d8:0a:
36:59:2d:66:06:6b:f6:1e:bd:95:7a:e5:02:0d:26:
e1:75:12:4b:cc:45:e3:2b:34:a5:4a:dd:94:0d:4e:
ae:6b:2d:c6:7e:24:21:67:97:c3:80:a9:3a:f8:b4:
75:57:4f:c1:93:3e:70:83:66:a6:67:94:50:17:05:
ac:77:e1:8f:88:5e:11:b4:02:e5:b9:d0:0d:04:30:
63:63:fe:20:55:b3:fe:c5:89:5e:af:16:ae:97:dc:
7b:5c:78:7d:27:6a:f6:fd:08:da:d9:4b:86:92:f1:
19:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D4:67:E3:7C:D2:97:DF:D3:7A:79:DC:AA:43:5D:D9:0E:F6:32:B0
X509v3 Authority Key Identifier:
keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:43:02:07:b0:7c:3f:c6:5b:b7:86:f4:fa:66:ed:b5:b5:bc:
fb:cb:37:f1:47:08:30:de:ca:d5:5a:37:43:2d:48:53:00:61:
87:ec:0b:5f:d8:76:f5:10:cd:99:03:fa:53:35:9e:99:81:14:
63:08:09:4b:a6:e2:6c:02:f9:6a:32:b5:81:c1:36:17:ac:71:
7d:52:7c:ed:d6:fd:c4:7c:3f:20:7b:cf:d8:2e:ac:11:fa:69:
2d:ba:65:79:56:ea:18:6a:13:af:93:4f:9d:a7:b0:4c:7f:ca:
28:ec:fd:00:7f:b6:43:5d:c5:bf:32:12:fb:45:1e:a6:16:17:
b7:b5:5f:0f:3e:74:8f:5c:b9:e8:ad:1c:9f:a7:8a:73:03:df:
83:bc:ab:9b:3a:43:4b:5b:4f:8b:62:2e:6a:22:90:0f:66:9e:
18:36:ce:5d:92:a6:2e:89:4d:e9:de:59:f2:77:fb:b6:34:ea:
e0:f0:e5:26:52:d4:7f:cc:f8:e2:a2:43:f2:22:1d:39:44:bb:
d0:15:01:63:59:d2:5b:e2:db:c5:1d:a0:47:a1:bd:34:27:a9:
8c:f5:cb:e1:34:d2:dd:cb:01:01:a2:4e:da:03:a5:29:b0:f1:
18:35:4f:6b:46:03:5e:09:9d:35:0f:24:92:87:43:68:c7:72:
cc:25:86:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEN4+0dme8qZy5mJaLZNGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjVkNTEyZjkxMDQ0Yjc4NmExNTU4OWE2MjRhOGQ4Y2I5
MjllNDgwHhcNMjYwNzIzMTMwMTE0WhcNMjYwNzI0MTMwMTE0WjAzMTEwLwYDVQQD
EyhmY2Q0NjdlMzdjZDI5N2RmZDM3YTc5ZGNhYTQzNWRkOTBlZjYzMmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbatrr/Ki57NcSWNnsSXckuISF4d
j0cNzgpzkIMTt2aZvw7xuVVJjRRRZp8ldVcpFMOav25m2gku9XCCMiI+GAY71imC
WKTx8u/Glj3OHGqunJuGSM+8dSx+CtKH2gajJEpmtBy5/DPH5t9SU2F07Vs9RrbG
DOiylLJnDavBkf+AKnBRdW7ORQlz+Ek2j11qQmcQ2Ao2WS1mBmv2Hr2VeuUCDSbh
dRJLzEXjKzSlSt2UDU6uay3GfiQhZ5fDgKk6+LR1V0/Bkz5wg2amZ5RQFwWsd+GP
iF4RtALludANBDBjY/4gVbP+xYlerxaul9x7XHh9J2r2/Qja2UuGkvEZvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzUZ+N80pff03p53KpDXdkO9jKwMB8GA1UdIwQY
MBaAFOz11RL5EES3hqFViaYkqNjLkp5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BYVkV2a1FSTGVHb1ZXSnBpU28yTXVTbmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zZDRkZmEtZmU0YS00NTYzLThjYmUt
YzE0ODFkZjdkYTQxLzEvN1BYVkV2a1FSTGVHb1ZXSnBpU28yTXVTbmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zZDRkZmEtZmU0YS00NTYzLThjYmUtYzE0ODFkZjdkYTQx
LzEvN1BYVkV2a1FSTGVHb1ZXSnBpU28yTXVTbmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEMCB7B8
P8Zbt4b0+mbttbW8+8s38UcIMN7K1Vo3Qy1IUwBhh+wLX9h29RDNmQP6UzWemYEU
YwgJS6bibAL5ajK1gcE2F6xxfVJ87db9xHw/IHvP2C6sEfppLbpleVbqGGoTr5NP
naewTH/KKOz9AH+2Q13FvzIS+0UephYXt7VfDz50j1y56K0cn6eKcwPfg7yrmzpD
S1tPi2IuaiKQD2aeGDbOXZKmLolN6d5Z8nf7tjTq4PDlJlLUf8z44qJD8iIdOUS7
0BUBY1nSW+LbxR2gR6G9NCepjPXL4TTS3csBAaJO2gOlKbDxGDVPa0YDXgmdNQ8k
kodDaMdyzCWGVg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:57 2026 by rpki-client