Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File: p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier: Idpabi9pwLOaS3825GOqFnDIzqBOHFzqjNo/LV+M13E=
Subject key identifier: 98:FF:69:59:23:41:2A:1C:6B:C6:55:31:48:A5:A8:7E:CF:2B:6E:8E
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer: /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial: 019F94369A87F0237505313603DA9B707C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number: 16D9
Signing time: Fri 24 Jul 2026 13:00:34 +0000
Manifest this update: Fri 24 Jul 2026 13:00:34 +0000
Manifest next update: Sat 25 Jul 2026 13:00:34 +0000
Files and hashes: 1: 2U0mDkF6k188FlI68TZ1uJWmy1k.roa (hash: 7JEOUa3UIN+/J9E0Zd5VhYU2fI+uSkBnOTYRU58DUPc=)
2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: yKPdg7rAcN80FgUecjyhvA+zKUw0g0UfxisJk04Obos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:9a:87:f0:23:75:05:31:36:03:da:9b:70:7c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Validity
Not Before: Jul 24 13:00:34 2026 GMT
Not After : Jul 25 13:00:34 2026 GMT
Subject: CN=98ff695923412a1c6bc6553148a5a87ecf2b6e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:b3:a7:6e:31:c3:70:50:18:0b:6b:dd:ae:
a3:28:c0:91:4c:fc:07:33:aa:1d:a8:7b:7e:e1:85:
d8:fa:63:37:4b:9a:0c:35:cd:b1:6c:c2:73:62:4b:
d9:26:e4:fc:17:3f:c1:49:8a:51:bd:28:74:d3:bd:
13:23:61:f1:21:ad:72:36:24:e1:01:05:09:21:0b:
50:bc:76:a9:5a:50:95:25:8d:bc:c6:05:6c:d3:3c:
36:7c:67:09:72:7d:fa:b1:25:d2:1a:7a:1f:db:37:
e9:0c:cf:0c:16:8d:4f:1c:cf:3d:0c:ea:2d:4a:4a:
9c:f2:d7:93:00:0f:d6:d1:8c:a6:9a:e6:0d:5d:b6:
60:73:59:8d:c3:ed:07:31:2a:f4:e9:e0:a7:23:b1:
d8:bd:cc:b2:f3:d3:2f:53:7a:53:a2:fb:2f:0f:77:
a1:a2:1f:4b:47:1d:e2:01:dc:d7:ab:8c:dc:56:5e:
0f:b4:39:17:09:20:3e:bf:03:8e:7d:8a:2e:dc:13:
5b:ef:fc:ba:6d:ba:34:91:38:0e:ab:b0:d0:8f:5b:
22:12:94:b3:fa:b6:f7:8b:d3:f3:40:62:3b:97:e6:
e7:cb:24:84:52:d7:51:f3:03:9e:71:ee:81:dd:6d:
81:7b:64:cc:ed:fe:e2:b8:76:8a:c1:5b:58:93:e5:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FF:69:59:23:41:2A:1C:6B:C6:55:31:48:A5:A8:7E:CF:2B:6E:8E
X509v3 Authority Key Identifier:
keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:81:d5:7c:4b:6c:bd:9d:2e:ef:b3:07:ca:85:66:34:1f:e3:
da:71:86:e5:30:0a:81:f1:89:2d:a8:7a:7e:c5:71:ae:f4:2e:
1f:44:69:4c:f6:e7:62:e8:a1:c3:fd:64:0b:aa:82:22:42:50:
27:cb:6e:50:a1:23:45:35:7f:6f:ee:45:34:f4:15:50:7c:eb:
71:b6:12:5b:69:14:d7:9c:d1:c1:e5:55:9a:03:0c:87:8e:03:
f3:95:45:98:f9:12:14:05:c4:22:a7:79:9d:e9:40:4a:26:1d:
7e:a8:bd:e3:a8:fb:92:7f:b2:ff:47:01:5b:a2:30:87:4f:8e:
c2:f7:dd:e4:a5:1c:8f:ca:85:f4:92:bd:bc:92:18:21:90:85:
a1:e6:69:34:e1:26:57:f0:8e:a1:d9:6e:ae:5a:ac:32:5d:a6:
30:57:ac:67:c9:09:d0:da:d7:51:08:5c:33:50:c3:ad:7e:03:
62:96:02:5a:7f:00:fa:ee:65:b0:64:ac:ab:9e:fe:5c:62:c1:
3a:13:a9:a5:cd:8e:6c:51:90:22:0e:75:b8:d0:87:6b:1d:d9:
ab:19:d6:b1:c2:ca:1c:72:24:34:63:cb:4a:a1:07:45:bb:8e:
f5:2a:37:3a:e4:92:a1:3d:3f:6c:95:f1:97:e5:d6:17:2a:32:
1d:21:98:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:35:44 2026 by rpki-client