
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: 7mcPuLdtT1zITJnNdzGH6AlRTdphvRO78QPldAHwesY=
Subject key identifier: 0F:4A:1E:75:81:E0:39:7E:92:BB:C2:0E:E1:AB:CC:21:61:E4:78:A8
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 019F8F478B92689837ED16726A4AAA62E4CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 0658
Signing time: Thu 23 Jul 2026 14:00:58 +0000
Manifest this update: Thu 23 Jul 2026 14:00:58 +0000
Manifest next update: Fri 24 Jul 2026 14:00:58 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: FHUOt/Sy7nI0BGj9JCSlt4dxekgBfgwYeG6lROp6TgM=)
2: 9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa (hash: 0rqJmTL+IHF4zuPR+5EuCzywtP32Y0FzvoOjmasnRjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:8b:92:68:98:37:ed:16:72:6a:4a:aa:62:e4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Jul 23 14:00:58 2026 GMT
Not After : Jul 24 14:00:58 2026 GMT
Subject: CN=0f4a1e7581e0397e92bbc20ee1abcc2161e478a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:86:98:09:f2:0c:d4:96:71:bb:3d:12:cf:
c9:1d:bf:e7:ba:18:de:d5:c7:6c:28:6e:6c:9b:e3:
f7:ae:1a:72:07:34:7f:db:06:ae:ab:13:8e:d7:86:
b0:f2:b5:11:d0:62:4b:68:44:c4:dc:e6:2e:5a:5e:
8d:ae:b3:c3:46:2b:5b:c2:0a:ba:84:b2:0a:6f:ba:
1e:e4:4c:a0:fd:76:b0:91:b6:21:27:b7:d5:7f:66:
71:9b:af:82:b2:5c:01:fd:19:5e:07:3b:5c:69:df:
c2:8c:df:10:af:e0:97:5d:da:fd:14:e2:14:08:da:
fd:75:79:53:d0:99:31:2c:69:0d:c1:18:c4:80:9c:
aa:59:90:b1:98:f6:b6:fb:5e:29:09:07:e2:9d:c4:
83:b2:ae:b3:65:f4:63:1b:f8:37:76:c9:30:9d:ba:
53:9b:1c:87:9e:b4:80:b2:ec:ce:71:fc:53:e7:73:
6e:69:27:76:d3:c3:af:4c:53:7a:b4:36:8f:74:93:
be:82:44:0f:c2:7c:e3:0b:1f:9e:2a:83:dd:ae:ad:
19:67:06:91:0c:2c:35:e9:c0:27:82:06:2b:4a:18:
79:6b:85:0d:26:c4:c4:71:32:ec:da:23:f7:6c:04:
54:1e:98:61:f2:b5:1b:dc:14:f4:0b:48:ea:06:b1:
ed:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4A:1E:75:81:E0:39:7E:92:BB:C2:0E:E1:AB:CC:21:61:E4:78:A8
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c8:12:23:b2:fe:cf:b0:3e:1e:1e:ee:a1:b0:21:5a:aa:d9:
65:4a:9b:4c:e1:a2:d2:a7:9a:f3:af:ad:c1:be:b7:4d:e1:c6:
b3:1c:e5:e4:e3:d0:14:8f:f9:6a:86:c5:5a:6f:b5:63:bc:fb:
9a:c7:5e:43:07:52:14:96:de:8b:b8:74:ae:7d:d5:4d:bc:14:
a0:d5:2d:e7:36:cc:c8:92:5d:2c:6d:22:8a:af:03:91:fe:e8:
67:6c:8b:5e:b4:c1:88:5b:31:20:1d:96:00:dc:64:48:37:1f:
b4:0f:b5:ef:1f:79:6e:f3:ae:49:97:68:00:48:45:d3:69:12:
bd:ae:70:09:a3:96:2e:3c:96:db:23:4a:38:76:d9:08:7e:54:
01:9f:1c:d7:bb:ef:01:68:e2:f7:c1:5b:b5:b7:10:94:cf:55:
cc:aa:b9:ce:9d:fb:c0:eb:0f:2e:54:28:cf:c3:b9:be:ae:d1:
fc:8f:9b:35:72:de:78:4a:bf:78:ba:47:0e:eb:ae:5a:35:9b:
27:d2:d8:38:2d:eb:cd:e7:53:c5:2e:69:04:67:c2:a6:a8:45:
82:b9:ee:d7:49:a9:54:db:f1:2c:d6:10:40:d5:27:16:3c:ec:
d3:a8:fc:9b:88:78:b9:76:49:38:cb:05:af:98:13:f7:dd:77:
e4:3b:b6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:28:32 2026 by rpki-client