Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: QkKi97erXJE8WeIPp4670o3Oez+d3beYOkzwE8dgRyk=
Subject key identifier: A2:8D:E6:C0:DB:42:94:15:67:CD:D6:56:67:8E:51:F1:23:7F:0D:59
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 019F86B21D7805307B42FF44CC919896FD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 0877
Signing time: Tue 21 Jul 2026 22:00:47 +0000
Manifest this update: Tue 21 Jul 2026 22:00:47 +0000
Manifest next update: Wed 22 Jul 2026 22:00:47 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: 3xL1RiolNEllKmq1SLVu9o851yaz84xzRbCup9eFG74=)
2: QanxQFNXzm9WZ4FLagQm8rqjYVg.roa (hash: z/pk9haxpoiUwaj9wllu1rSy4e1+a+aVccYlUM/WIn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b2:1d:78:05:30:7b:42:ff:44:cc:91:98:96:fd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Jul 21 22:00:47 2026 GMT
Not After : Jul 22 22:00:47 2026 GMT
Subject: CN=a28de6c0db42941567cdd656678e51f1237f0d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:bb:b0:fa:15:c2:5a:22:a5:b8:06:25:36:
45:e9:9f:a7:83:d2:65:f7:c9:1e:fe:a9:ba:34:2a:
f0:bd:4c:cd:cc:7c:f5:43:b1:9b:ac:24:d2:ef:87:
d7:ef:1d:a7:0c:eb:73:c0:5f:84:02:8a:60:02:f6:
d9:f9:3c:e8:5c:a7:a0:bd:5e:60:d9:76:f0:3e:15:
f6:7a:0a:0a:1a:39:bd:ab:fd:f7:8c:85:a1:58:4b:
34:eb:6f:be:7d:9e:ba:f1:b1:8b:6a:d9:6d:92:32:
2c:76:7f:d3:bf:bd:52:8e:20:9e:c9:4c:34:6f:89:
05:00:11:4c:ce:bf:78:ea:50:42:5c:1c:b9:9a:6e:
95:6e:3e:89:aa:e7:45:6e:1d:a1:12:aa:b6:90:b8:
09:90:6a:e7:a6:99:6c:cb:1d:1d:40:b3:c4:d1:95:
94:b2:cb:dd:81:9d:1f:9b:97:5d:8d:5b:0d:2f:38:
a8:28:00:c0:5d:5b:3f:0b:93:14:d0:dd:59:86:7c:
1a:0d:df:90:ff:18:fe:ad:5e:7b:41:84:7a:80:be:
11:97:45:a2:e2:52:df:c1:a8:28:09:de:11:01:8d:
42:68:30:bd:b7:8b:7b:ba:f5:83:7d:74:35:0e:6b:
e8:24:1b:9d:45:cf:2f:9a:3c:81:96:0d:aa:9c:07:
18:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8D:E6:C0:DB:42:94:15:67:CD:D6:56:67:8E:51:F1:23:7F:0D:59
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2a:df:b2:e4:ec:60:da:48:ee:ca:8c:4a:2c:85:60:16:b1:
af:24:41:a8:a0:2b:dd:f7:94:fd:23:c5:3e:db:6c:a6:8f:f2:
c3:61:5a:68:29:cc:d6:f5:af:94:49:16:59:59:89:72:24:32:
5b:03:64:54:0e:8a:8b:5b:79:c6:e4:e3:0e:d6:f4:b1:8d:62:
3e:ae:da:f3:57:dc:4e:32:42:f5:8d:e7:2c:65:e8:fa:1a:f4:
19:cb:0e:25:61:3b:f1:28:0e:fa:63:b3:71:5b:6a:e9:48:77:
b4:63:29:09:1b:2f:cb:c1:69:5c:b3:4b:09:de:03:da:99:12:
a7:72:11:f1:12:49:cb:de:04:25:89:91:cf:16:90:9e:d0:e3:
68:9a:17:b7:f9:87:be:72:19:1c:49:0d:5d:ef:8c:6d:59:61:
67:6e:9a:c0:b3:8c:19:ed:4d:ca:58:53:f5:6e:c7:2e:9c:f3:
36:b4:c2:fe:c7:64:b1:78:87:2e:27:4b:56:c8:f5:ff:f8:b9:
05:28:a6:4d:eb:21:3a:94:79:4c:94:41:bc:40:dc:28:e4:26:
19:0c:1a:e1:8a:6c:7a:9e:4e:26:c5:e6:d1:c6:9b:5e:db:20:
ae:ce:d6:f1:1d:4d:ed:45:2a:f9:55:bf:dd:58:2c:ef:b3:63:
2f:75:04:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:21:28 2026 by rpki-client