Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: qfWrXS5OCoGpPwjizghvHJLiJLpZUZ0Cu9cPS2z5W3E=
Subject key identifier: DC:D4:2E:4C:B3:F2:F3:2A:EE:E8:5C:60:99:76:0E:CF:EB:A7:D8:28
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 019F9324366049AA0FA4377F040094D310A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 07BA
Signing time: Fri 24 Jul 2026 08:00:51 +0000
Manifest this update: Fri 24 Jul 2026 08:00:51 +0000
Manifest next update: Sat 25 Jul 2026 08:00:51 +0000
Files and hashes: 1: KfWydckPfiqGOF337NlzjDPQl00.roa (hash: 4ha/Pfwft4tserJ5wBf8nDoQ8MRbjhW1BTAI762DC0o=)
2: T-fVHEDNZq7F9-utYfRKMAdoFhQ.roa (hash: yBrzfuoQ7PjM0FJTl5FcbusQvv4aZ8BnPQEBmHRMImE=)
3: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: UZhi0JCJ5NkQopUIlGn2ZKUlsXXtbuSiZH4E82Sr0S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:36:60:49:aa:0f:a4:37:7f:04:00:94:d3:10:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Jul 24 08:00:51 2026 GMT
Not After : Jul 25 08:00:51 2026 GMT
Subject: CN=dcd42e4cb3f2f32aeee85c6099760ecfeba7d828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:80:f6:ba:dc:01:f5:26:d4:68:3b:08:20:09:
9d:94:02:e3:f9:cb:1d:3d:ff:43:fb:63:f3:da:4e:
19:78:bb:84:dc:38:05:4d:e3:25:7f:75:89:72:bd:
97:61:47:f5:34:0a:87:ce:9d:9f:88:56:26:6e:17:
20:fe:54:cb:0a:62:a4:46:1e:b7:0a:2f:bf:8c:5c:
8a:f6:20:66:f5:07:89:1d:90:59:83:6c:87:99:43:
78:1a:70:ed:a9:11:01:39:07:13:a5:fc:67:46:a9:
d8:4e:44:c2:3c:c4:ed:28:20:ed:36:be:23:75:e6:
e6:7c:d4:8c:30:d4:b3:93:cd:11:22:45:28:fe:28:
49:9e:f6:c9:5e:9c:b8:ab:7b:a5:21:f2:a3:df:1b:
a0:1b:c7:8e:11:9a:f2:fc:92:1d:74:35:09:38:5d:
fe:fc:d2:ae:a1:88:ba:10:a5:0e:97:62:ef:09:0a:
b2:c2:b3:29:6e:0f:c0:f8:aa:88:55:9e:8d:06:45:
72:d7:32:67:40:ed:87:15:34:ed:3f:1b:2e:54:46:
f4:f7:3f:ca:1e:7a:06:d5:1f:f0:a1:28:a2:d1:70:
1a:6f:b0:cc:92:5e:36:07:93:bf:a0:65:2f:5c:02:
2c:30:da:43:9a:fd:2e:c0:ca:99:19:38:6a:5d:54:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D4:2E:4C:B3:F2:F3:2A:EE:E8:5C:60:99:76:0E:CF:EB:A7:D8:28
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:71:57:67:09:a3:2c:38:8a:2e:0f:8d:fb:f0:fd:0c:24:7b:
b4:84:f3:64:41:ea:bd:f9:37:e4:cf:ed:8c:96:ba:7b:64:30:
e4:7c:27:4f:c7:28:c0:52:e5:8b:2b:ad:d4:d2:52:4b:d3:70:
7a:1b:c2:cb:b6:a4:07:b2:e4:6c:8e:2a:7a:4a:fc:5e:1e:35:
dd:a0:45:ba:97:a6:b4:7d:e6:3a:67:19:34:44:0f:e4:c7:18:
24:3f:c3:a7:09:03:a3:6a:d7:21:e8:fe:d9:53:f8:53:ef:d1:
6b:de:a3:bb:b8:b6:47:d5:2d:04:4b:a2:b0:92:41:7a:34:a0:
a8:34:fc:8c:ab:91:15:cc:b6:b6:49:92:c5:12:5f:e3:7e:62:
3f:7d:b0:ca:81:b9:aa:aa:c9:bb:ea:4c:7f:f3:00:0a:42:fb:
01:fa:9e:13:df:66:23:d3:cd:05:d6:d3:3d:98:f7:0c:ea:3a:
fe:06:d8:b4:12:58:66:d2:64:bc:c1:11:b3:86:db:a8:8f:72:
66:1e:7f:2c:3d:cd:78:76:8b:26:2a:5e:d3:a9:16:b8:d9:6c:
f4:b6:b7:99:fa:38:e6:48:e5:55:2b:69:25:f6:1f:09:12:26:
f0:bd:79:34:b7:a7:20:25:e0:75:bb:e9:a0:dc:20:f7:3b:96:
f7:2e:7a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:52:14 2026 by rpki-client