Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
File: h7kq03MXwzCg61kKFw0U9Rm3UrM.mft (raw, json)
Hash identifier: YQRcpRMXQd1tWhjmR6ZD9GEpOOOOiKqxEyp8/3JKnA0=
Subject key identifier: 03:33:22:4C:C0:D9:2B:C8:25:FF:B7:9C:E7:B1:DF:D0:57:99:0E:BA
Authority key identifier: 87:B9:2A:D3:73:17:C3:30:A0:EB:59:0A:17:0D:14:F5:19:B7:52:B3
Certificate issuer: /CN=87b92ad37317c330a0eb590a170d14f519b752b3
Certificate serial: 019F935AAFE7D80FD97647A6B77EA657FD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:21 +0000
Manifest this update: Fri 24 Jul 2026 09:00:21 +0000
Manifest next update: Sat 25 Jul 2026 09:00:21 +0000
Files and hashes: 1: h7kq03MXwzCg61kKFw0U9Rm3UrM.crl (hash: 5dOOLT0X9/vmUTaPMQSHVKzxdtKfraSTXkxrQajGXL8=)
2: l6h8cEy3vy8eHGUMk9ccO_E31gg.roa (hash: /rkHav/nq0FmDVvv83fpzsLSholUDtzomJfCggVqF3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:af:e7:d8:0f:d9:76:47:a6:b7:7e:a6:57:fd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b92ad37317c330a0eb590a170d14f519b752b3
Validity
Not Before: Jul 24 09:00:21 2026 GMT
Not After : Jul 25 09:00:21 2026 GMT
Subject: CN=0333224cc0d92bc825ffb79ce7b1dfd057990eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:02:59:57:5c:12:c9:1f:3c:5b:7c:0c:32:
63:49:d3:b9:37:2d:55:d6:9f:1c:13:bf:81:09:94:
6f:c8:0b:dd:33:b1:24:2d:13:ec:ed:be:e3:0d:fe:
cc:d7:88:5a:cf:9a:7c:cb:27:7e:02:55:87:e6:c2:
ba:12:1d:cf:62:b6:e7:ff:e6:7d:1c:ff:a8:42:85:
11:07:9a:e6:59:68:9d:a4:92:a5:89:6c:d4:2c:ac:
1c:14:55:9c:53:8e:d5:5d:34:63:4a:71:d4:55:9f:
52:98:de:31:19:83:71:a4:dd:e8:18:a5:6f:e7:7a:
9a:63:d8:c9:32:19:30:c7:7d:97:96:c2:c6:a9:37:
63:26:85:21:5d:21:fb:64:ac:74:eb:30:aa:22:01:
c0:c6:fa:8c:e1:f9:dd:08:d3:2c:03:c7:54:9a:b5:
35:87:e2:dc:02:b6:8a:85:48:18:ac:64:19:22:38:
3a:62:98:22:45:31:b9:07:d4:be:f3:0e:9a:eb:69:
2d:a0:eb:41:12:72:b5:dd:f8:9f:63:df:8b:99:58:
69:a6:ef:7b:2d:bf:61:ee:10:c6:cb:df:24:cf:55:
55:3c:53:e3:96:68:5a:75:50:e1:58:56:e1:fc:40:
ee:44:5b:49:61:fc:4f:95:e4:63:e7:92:f1:61:00:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:33:22:4C:C0:D9:2B:C8:25:FF:B7:9C:E7:B1:DF:D0:57:99:0E:BA
X509v3 Authority Key Identifier:
keyid:87:B9:2A:D3:73:17:C3:30:A0:EB:59:0A:17:0D:14:F5:19:B7:52:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:62:ce:1f:64:ab:ed:0a:60:6c:d9:36:01:3c:7f:c7:32:a9:
f0:27:98:e5:f4:dc:25:e9:d8:5e:a2:11:a6:5c:13:33:80:69:
17:de:5f:cd:5a:d4:be:99:71:fa:74:d1:58:dd:7d:ba:8c:91:
e4:8a:a3:98:36:86:de:d2:83:1b:0a:39:2f:ea:8c:51:ef:b5:
f9:3a:5b:70:c8:0d:47:42:5d:4a:0b:e9:2f:24:d6:d1:59:24:
a5:62:b6:01:d3:75:ca:f3:4c:00:f1:6c:c9:9c:d5:1a:5b:18:
9e:dc:2d:41:e7:4d:2a:6c:86:be:fe:1c:2e:7e:c1:d8:f3:6f:
25:2d:be:b3:a5:2f:a6:19:f8:2f:c6:99:4b:91:20:99:2b:da:
6f:6c:bf:b9:71:b0:8f:c1:b4:a5:d7:bf:54:82:93:5a:22:2c:
32:32:e8:0f:4a:a7:28:27:87:da:34:c8:21:22:d2:48:23:eb:
fd:37:75:67:d8:b7:67:95:8b:7e:61:4a:47:d8:82:d7:54:2b:
1e:6b:d5:60:ad:de:5c:79:84:8a:6d:d5:bc:be:f8:30:52:1b:
ca:58:b3:8c:c7:49:c4:25:97:b2:61:ec:46:6d:9f:37:2b:34:
09:c2:17:15:cc:85:21:f2:41:58:6b:28:1b:93:a4:81:35:fe:
49:88:93:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:35:56 2026 by rpki-client