Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
File: x1es7dSIRbnr0Muqfb2ri8z9jWE.mft (raw, json)
Hash identifier: BqbYtM8T74hMLiV7EgLUTUTDKj/W+5regbNf9yYAodc=
Subject key identifier: 17:80:C5:E8:C3:93:61:B4:AF:DD:C1:A7:2C:BC:63:A6:F9:1E:6E:C5
Authority key identifier: C7:57:AC:ED:D4:88:45:B9:EB:D0:CB:AA:7D:BD:AB:8B:CC:FD:8D:61
Certificate issuer: /CN=c757acedd48845b9ebd0cbaa7dbdab8bccfd8d61
Certificate serial: 019F935AD5300B52F24BDAF9CE67CC5E68CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:31 +0000
Manifest this update: Fri 24 Jul 2026 09:00:31 +0000
Manifest next update: Sat 25 Jul 2026 09:00:31 +0000
Files and hashes: 1: 1-Urp8rAL1ZSmlkxaPOzl5pj6sR8.roa (hash: eq+9SCGsso6J0nmlRfLYKk2u+tOTbol21TaNCHcqDic=)
2: YBBatb3zVPdSOcJ9MpSHMK867-k.roa (hash: IlKGC7X7khejWn4GInerZOXh0TDt6Gd+xhqLmW0TfU4=)
3: x1es7dSIRbnr0Muqfb2ri8z9jWE.crl (hash: 7riPnISzEIR2LAOXKlsMA9sMnnh2VhrfDNKwJEUc38M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:d5:30:0b:52:f2:4b:da:f9:ce:67:cc:5e:68:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c757acedd48845b9ebd0cbaa7dbdab8bccfd8d61
Validity
Not Before: Jul 24 09:00:31 2026 GMT
Not After : Jul 25 09:00:31 2026 GMT
Subject: CN=1780c5e8c39361b4afddc1a72cbc63a6f91e6ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:aa:37:ff:25:a9:07:ef:9b:ea:a6:f0:a4:
5a:7f:7d:77:c3:25:b9:f5:73:c2:71:75:8e:b0:fb:
61:1f:6d:d6:49:69:b3:ed:bf:be:fa:91:aa:c2:db:
9a:a7:93:8c:36:df:fd:60:f7:9a:72:f6:85:96:d2:
6d:3b:98:bf:f3:74:3d:99:08:2c:65:1c:a2:7a:29:
00:ed:1d:9e:b5:19:5b:41:37:b0:04:69:bc:cb:35:
2c:c0:ca:f4:e1:72:4c:75:03:18:7b:08:d8:06:71:
7e:97:b3:1a:ae:72:fd:4b:23:24:0d:f2:b1:c1:18:
b7:4f:ac:24:ea:2a:05:78:03:a7:e3:c2:16:65:e5:
3c:cb:15:6f:93:49:8a:a1:9b:c9:48:88:7f:91:9a:
62:ff:9a:06:58:b0:49:d4:8c:e1:5a:fc:e5:74:70:
d1:e0:7f:58:06:ad:eb:41:11:f0:eb:bf:3a:9f:10:
23:f2:23:69:e4:02:28:0c:15:1c:da:98:f7:18:d0:
24:b2:39:54:42:8c:75:80:b7:4b:60:85:d4:db:65:
3e:4e:ac:81:a3:50:4e:01:e3:df:0d:03:25:3a:80:
ed:1f:de:89:18:91:74:a4:27:d4:c5:78:c9:6b:f5:
a3:c2:3e:2b:77:ea:ea:93:b1:c4:d2:91:3d:b6:54:
75:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:80:C5:E8:C3:93:61:B4:AF:DD:C1:A7:2C:BC:63:A6:F9:1E:6E:C5
X509v3 Authority Key Identifier:
keyid:C7:57:AC:ED:D4:88:45:B9:EB:D0:CB:AA:7D:BD:AB:8B:CC:FD:8D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c8:5e:ec:bf:37:2a:17:a4:c1:bf:a6:1f:42:58:a6:b6:6d:
9e:57:71:64:77:b5:06:e4:37:dc:a1:68:0a:73:be:4f:33:d3:
1a:80:82:3a:62:0e:62:aa:f1:3d:84:cf:fd:43:c0:f0:26:04:
56:4a:5b:b0:9b:5f:cc:cf:fb:76:af:fa:fd:17:bc:8e:1b:c3:
08:52:e2:c5:22:fb:df:5d:67:87:04:ae:83:68:ff:af:d7:d9:
72:7e:1e:e5:bc:2d:3e:19:3a:c7:7a:b5:13:61:16:e0:c5:fd:
d9:8e:68:43:a2:e0:93:07:dd:3b:b9:ab:9d:68:6b:05:1e:20:
9f:b3:73:f8:11:34:9a:f8:3e:39:d7:98:db:37:83:8d:89:ed:
30:d2:9e:19:a6:6c:23:12:f7:f9:32:b6:21:db:7f:dd:08:23:
c9:97:15:98:58:d7:f9:5f:62:39:93:d2:16:5f:12:9e:18:a5:
50:4b:8b:77:e0:ec:5b:0a:3c:0b:78:e3:de:f4:4b:34:c4:0d:
be:66:23:40:c0:b8:97:eb:0b:0b:97:3f:20:95:47:e0:f8:cb:
38:35:97:9e:eb:fb:df:39:15:3b:60:f9:a0:23:fb:8f:71:ed:
ca:f6:87:21:83:09:0d:79:a1:f8:67:71:0c:64:22:ca:18:89:
86:bf:85:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:15:23 2026 by rpki-client