Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File: 7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier: daagk4+y/Cn3bvxf1wFpEX9LTIseQ5xIjZbnMH1qsBk=
Subject key identifier: 99:04:68:56:D8:06:B6:93:56:39:4D:7E:2C:73:21:13:A3:23:F3:F9
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial: 019F92489C0D8083360BB3F70C45FFAEB37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 04:00:59 +0000
Manifest this update: Fri 24 Jul 2026 04:00:59 +0000
Manifest next update: Sat 25 Jul 2026 04:00:59 +0000
Files and hashes: 1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: xn6VdvvE8pkI0NPNg5TL3uIsU5UFxCLOUFcGSd3y5YQ=)
2: dDrbN1EnOvhkFc0_xZRFXvcNr40.roa (hash: 4F6zFoAlaZyrQw6r2Sapl4Rve7y38xHZ2sxhWgQcUxI=)
3: vqQIJ63USJ6tNbfIvkmeDNaWV-8.roa (hash: OsN69G3y8PdNZsFJ8bznX8F2lLtEi2mXTwt/+VGM68k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:9c:0d:80:83:36:0b:b3:f7:0c:45:ff:ae:b3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Validity
Not Before: Jul 24 04:00:59 2026 GMT
Not After : Jul 25 04:00:59 2026 GMT
Subject: CN=99046856d806b69356394d7e2c732113a323f3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e0:a7:94:2c:91:a7:84:ea:19:b6:f9:77:ba:
42:f2:16:ed:b1:5d:e3:2b:96:8c:ff:70:15:50:7f:
dd:db:e0:8b:c8:12:06:8e:71:ff:26:84:cd:6e:43:
3a:f5:a8:59:04:fd:a0:18:c9:47:78:83:1a:0d:0a:
39:ba:5f:ad:84:99:a4:35:7c:bb:62:70:c7:68:95:
ad:40:65:9e:ae:37:dd:ac:58:c1:f3:44:72:36:99:
f4:cd:25:c5:64:55:68:14:59:53:fa:8f:6e:16:47:
a7:f8:0e:a6:70:2f:90:e0:91:4f:57:58:69:82:1a:
b9:bb:60:2e:0b:22:78:4b:7d:34:aa:a2:37:26:63:
f2:e6:78:3b:a8:7d:3d:a8:c4:22:eb:c0:7a:65:90:
2b:8e:76:0d:39:9d:62:b4:84:7d:5a:97:26:c6:90:
5a:97:e3:f6:67:f8:7f:20:0c:6c:00:4c:02:a9:e5:
13:f8:5a:20:af:09:f6:dc:dd:4a:b1:0f:e3:f5:f6:
fd:4a:a0:5c:a0:0c:10:f5:2e:72:44:c4:07:2b:57:
c0:e9:56:f4:c4:fd:47:44:34:11:33:cf:1d:34:bc:
6c:c5:40:69:c3:bd:df:13:5f:85:fe:13:63:fb:f6:
04:53:1b:0b:c9:ee:5f:e5:f7:f7:e7:d3:49:f0:fd:
87:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:04:68:56:D8:06:B6:93:56:39:4D:7E:2C:73:21:13:A3:23:F3:F9
X509v3 Authority Key Identifier:
keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fe:a5:93:15:cb:09:48:5c:cc:ca:a6:ce:ed:03:0d:cb:ae:
e1:b7:b4:92:ed:e0:ec:77:1e:59:dc:96:96:09:fb:94:f6:0c:
2b:df:d8:c4:4c:65:42:f6:9d:8c:69:d2:b4:9a:0b:e7:0d:d5:
4b:ae:94:b3:26:84:ec:f4:95:31:2b:5a:82:4a:8a:75:29:9b:
d7:cc:4a:5b:cf:27:aa:71:d0:22:4c:d3:6d:37:15:f7:9c:ed:
c0:80:2b:4d:5a:a6:a9:d0:62:ef:f1:cf:2f:44:d4:1a:89:6f:
45:81:98:41:de:d5:63:90:03:8f:d4:af:be:0c:24:8d:61:6f:
99:b9:39:e1:5d:fe:40:09:c3:6a:67:0b:5b:46:8c:0a:26:37:
f0:2a:7f:cc:c9:b3:f0:32:c5:01:d0:14:fe:0c:fd:9a:e8:ad:
01:3e:60:78:4e:74:55:3a:9a:d9:af:ee:12:a0:6d:74:2a:74:
04:ff:12:a5:63:41:78:d2:fc:90:4c:a5:df:70:79:49:6c:e8:
70:a4:e1:b7:4a:c1:a2:ff:d2:75:52:aa:5a:45:7d:5f:3e:92:
f1:97:7e:47:85:74:73:e0:8e:55:4d:c5:38:5b:14:17:77:59:
c2:e5:15:8b:2f:91:41:ca:85:f4:2d:6e:76:02:2d:ea:23:d6:
79:03:b9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:55 2026 by rpki-client