
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
File: 7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft (raw, json)
Hash identifier: vR89oPxKTRuG+GZfF+7nmIjEz6W6stbG8638Fg8EZvc=
Subject key identifier: 7F:01:F3:52:5B:CC:22:23:B3:AE:60:FE:DA:3D:F5:10:8C:86:CD:15
Authority key identifier: ED:86:11:91:5E:16:51:AF:17:E7:BF:1F:7C:AB:90:D5:5D:C1:DD:88
Certificate issuer: /CN=ed8611915e1651af17e7bf1f7cab90d55dc1dd88
Certificate serial: 019F85D77E4A38BA0BF427C62A7D886691F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:02:00 +0000
Manifest this update: Tue 21 Jul 2026 18:02:00 +0000
Manifest next update: Wed 22 Jul 2026 18:02:00 +0000
Files and hashes: 1: 7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl (hash: R1VxJyW7BvJBJj7s+XSJzyKnDPLLwoYHon1JPK6sJFA=)
2: Df_oTOu_EP4d50D-2XA0QPqfKjk.roa (hash: +VGVc2qalWbQy0rJrmFcx94atdweW3ZFDDwOq9nPIVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:7e:4a:38:ba:0b:f4:27:c6:2a:7d:88:66:91:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8611915e1651af17e7bf1f7cab90d55dc1dd88
Validity
Not Before: Jul 21 18:02:00 2026 GMT
Not After : Jul 22 18:02:00 2026 GMT
Subject: CN=7f01f3525bcc2223b3ae60feda3df5108c86cd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:57:76:04:d1:0c:a6:e8:09:b0:5d:6c:2c:
1e:bc:8b:f3:57:93:90:3f:96:07:39:f9:c9:d6:b1:
30:b4:d0:e0:1c:26:47:7a:71:3f:9f:2f:4f:fe:48:
f2:03:37:66:57:23:b6:34:bf:18:4b:98:96:a4:4f:
ce:7b:05:ff:6d:78:4b:0b:8b:35:28:63:1a:45:14:
1b:c9:94:4a:a6:85:6e:f3:13:0b:8f:08:2f:f9:bd:
78:a8:69:be:ca:6c:d0:17:33:d3:ea:f0:ed:2d:a1:
97:77:ba:e7:f7:9a:69:6a:24:fb:77:fb:90:ae:8d:
f2:65:b0:69:ed:8e:aa:f6:a3:a1:45:e8:f8:00:53:
b7:4f:36:14:78:b0:68:ae:92:06:c8:ee:5f:d8:37:
59:78:1a:e5:8b:90:9a:02:cf:a2:a4:05:75:86:09:
28:f9:19:a0:a7:dc:dc:b7:40:76:a9:83:75:49:b2:
c9:72:2c:b0:6c:b0:25:da:86:c5:6b:f5:d5:54:fe:
c5:eb:af:0c:20:ad:17:e0:d0:da:cb:b8:d4:91:6b:
9a:f2:a3:2c:c6:a5:a1:8a:e5:77:0b:26:80:35:44:
33:aa:05:c0:64:9b:7d:b1:32:c7:70:d1:12:bc:e2:
a0:33:e1:e3:3b:73:42:25:d3:4c:c7:9e:7f:69:ad:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:01:F3:52:5B:CC:22:23:B3:AE:60:FE:DA:3D:F5:10:8C:86:CD:15
X509v3 Authority Key Identifier:
keyid:ED:86:11:91:5E:16:51:AF:17:E7:BF:1F:7C:AB:90:D5:5D:C1:DD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7a:9f:68:48:79:5c:37:bc:74:6b:4a:48:dc:33:21:e0:21:
e6:3c:ef:cb:ea:77:1a:d9:92:18:77:16:4c:c8:8b:7f:8e:86:
18:02:80:e3:8b:e8:10:1c:2c:d8:2f:69:fb:f3:f0:69:bd:84:
56:e7:c6:50:46:84:8c:22:76:f3:4b:41:25:6b:d7:7c:0d:0a:
17:20:f2:90:75:6f:28:e1:cc:45:51:83:4d:1c:a6:29:01:0e:
41:77:08:aa:53:d7:7b:65:de:2c:65:ac:20:91:b8:6e:c5:60:
c0:18:59:8a:42:db:37:2a:f3:c5:df:84:97:3a:52:2f:a8:87:
3d:dd:5f:c5:58:1b:db:0c:ca:10:65:1f:0d:e2:80:ef:19:cf:
39:77:49:ac:ba:83:b3:b0:f7:67:8f:e5:32:91:a8:ca:96:10:
ee:56:c3:30:78:49:38:10:d8:a3:4c:a3:2c:9a:99:bc:49:37:
43:e3:27:ae:c8:7d:12:b6:98:da:3b:1e:75:8c:75:0d:97:1a:
52:83:13:69:2d:0e:ad:cd:b2:f7:ea:10:47:23:2f:db:e2:1d:
f1:2e:56:d8:25:85:8c:4c:66:89:e0:62:08:1d:41:54:6a:af:
11:4e:f3:36:60:6c:10:97:f6:ef:7d:3b:dd:27:3a:70:c1:f6:
a5:87:29:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:14:23 2026 by rpki-client