Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: x5h70NmsxQmeHawv0NP2d04RcHMcVc46MW9y4xDy81Q=
Subject key identifier: 6B:9C:52:80:63:25:60:F1:A6:25:AD:90:F0:36:34:E0:2C:41:44:2D
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 019F927F5CB32F5BBA803065C86EB7FE56FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 19D1
Signing time: Fri 24 Jul 2026 05:00:48 +0000
Manifest this update: Fri 24 Jul 2026 05:00:48 +0000
Manifest next update: Sat 25 Jul 2026 05:00:48 +0000
Files and hashes: 1: O0zdzMf69p1geR9BzbHj8H6216Q.roa (hash: gB3ykbY7Zy2yOIDfRVoU3HqEBAgziuKZvTGr//ZJWIo=)
2: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: afMfEdA1m1OWwyDAQZ8TLpA5yYjpgPGBnhG1vIzlDx0=)
3: sYgcwFmXC21qQr4HaIkoLUDZGq4.roa (hash: o16QA0TxR5R2SVkQH4tgiDW7/Tyeif3rP5L2akN0sow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:5c:b3:2f:5b:ba:80:30:65:c8:6e:b7:fe:56:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Jul 24 05:00:48 2026 GMT
Not After : Jul 25 05:00:48 2026 GMT
Subject: CN=6b9c5280632560f1a625ad90f03634e02c41442d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:01:f4:07:8f:a5:39:34:a1:c9:00:10:1b:
8b:39:c2:f5:97:26:b5:3e:ad:29:1f:ed:a3:4d:ef:
45:f7:49:71:83:d6:03:6e:c5:94:18:a9:7d:e5:2f:
cf:77:59:c6:9d:64:a0:ed:22:11:1e:75:c1:7d:b1:
e2:e1:d3:24:9c:79:47:0b:9c:b5:4b:6e:5a:1e:2d:
26:5d:e1:02:8a:ce:cd:2e:58:ed:2a:3e:6d:58:6a:
59:20:87:04:96:09:3d:92:d7:ec:ce:3c:3f:89:f5:
91:f4:5a:de:de:ca:75:37:81:46:c2:b6:d6:7f:92:
db:d2:93:7c:25:4e:ab:9f:8d:7c:67:32:02:d5:4b:
52:e9:f3:36:de:5f:f4:35:0d:e9:4e:15:bd:3d:ad:
98:f3:d9:29:06:b2:35:30:f0:11:80:11:ec:42:3a:
0d:24:66:c5:87:40:8d:7e:ba:69:0b:90:e7:8a:4f:
36:a8:a8:c4:de:52:83:50:0c:c7:2b:43:93:d5:75:
6e:46:bd:43:44:8c:90:72:0e:3f:32:9b:2e:40:d6:
58:00:4c:96:0f:fd:e7:41:78:2b:a2:8b:5a:e0:b6:
52:4e:41:ac:b3:ff:13:0d:01:fc:7e:71:e3:41:41:
ca:b8:a2:db:84:9d:28:fb:36:7c:dd:a1:a9:e9:4d:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9C:52:80:63:25:60:F1:A6:25:AD:90:F0:36:34:E0:2C:41:44:2D
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:46:e9:69:98:77:60:e7:d1:f8:b2:b5:eb:eb:39:01:20:1a:
a8:64:64:b7:8b:1e:cc:06:90:04:82:6c:e5:a6:5e:71:e6:96:
94:b8:50:d7:43:94:db:77:72:40:93:14:6c:ce:18:01:42:96:
9d:c4:25:85:44:4c:a1:8a:83:3d:2c:29:13:8f:cf:d0:db:06:
35:93:aa:f3:75:b3:bb:46:11:fc:bb:05:6d:1b:5d:13:44:02:
db:ee:1a:b0:eb:9c:92:4c:0d:d5:ea:07:6d:fb:02:99:aa:13:
18:07:65:f2:68:e2:03:09:62:1e:f6:5c:b8:20:ac:d8:bb:91:
c7:ab:9b:8a:dd:70:b1:bf:2d:ae:ec:f0:95:7e:ae:38:ca:aa:
37:0a:a0:44:0d:fe:dc:68:8d:c1:3a:2f:91:7f:a3:29:3e:4d:
9f:12:ef:6e:a0:f4:d0:ba:f3:1b:1c:fa:51:c8:0d:9d:1a:73:
38:8b:81:88:2a:7d:67:3d:76:61:53:15:3b:49:65:35:97:69:
2e:9a:5e:9b:1c:bd:a6:09:a5:77:be:e3:d4:d5:9f:74:08:97:
b4:4c:0e:99:9f:2b:a5:c5:18:c5:36:0d:3a:67:bf:f0:db:b9:
b7:0f:fb:74:ad:08:27:c4:e6:05:93:db:b2:62:26:81:91:29:
54:c3:0f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:29 2026 by rpki-client