Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File: 7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier: +4BcYP/fpeTfS3FEmLkhWW/mrGAil0LZQiyorVceiRc=
Subject key identifier: 7E:37:C1:B2:30:8E:2B:D8:26:88:EC:3E:DB:F6:DA:C2:C9:28:39:7F
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 019F81C3089EC956B2BCF7495FFD59EFC6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number: 19C1
Signing time: Mon 20 Jul 2026 23:01:09 +0000
Manifest this update: Mon 20 Jul 2026 23:01:09 +0000
Manifest next update: Tue 21 Jul 2026 23:01:09 +0000
Files and hashes: 1: 6ukkUq47_d2FjDn2mGzCVotpwug.roa (hash: BSpIOmqaO5YAgsvsZQqH6+DD7MhtSJv4k++NTBFYMhA=)
2: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: p/UlRHwnQB5/q0rL/aTpAyoOegnyAqwcMUpa4MFd14Y=)
3: lOdlGRTCbIpEqR9qatoRPkmZsSo.roa (hash: puduhtYoMCBO2MogdQIQ/qqMbhZcm/6N0DD1bqrK4NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:c3:08:9e:c9:56:b2:bc:f7:49:5f:fd:59:ef:c6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Jul 20 23:01:09 2026 GMT
Not After : Jul 21 23:01:09 2026 GMT
Subject: CN=7e37c1b2308e2bd82688ec3edbf6dac2c928397f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:e8:2f:0c:a7:b4:68:71:ff:97:fe:cc:50:
ed:74:84:ff:d4:7b:4a:11:3e:63:53:fb:31:31:ba:
49:07:5b:b4:14:d5:3a:a3:b3:19:e0:e1:b2:28:28:
94:f7:86:29:fc:e9:80:f9:3d:50:cc:e2:6c:66:81:
eb:d3:2e:f8:31:c6:e2:bc:57:94:a3:20:45:0f:a1:
98:7f:14:3f:ae:27:ec:78:e0:cf:0d:d5:51:0a:3e:
c3:4d:e2:2d:a1:fb:74:77:bc:5a:21:2b:bb:2a:fd:
eb:d7:0e:8c:3f:3a:a2:a8:c1:78:43:f9:33:2d:21:
ac:4d:7f:30:ed:ba:81:df:75:72:18:9a:15:65:64:
8d:f4:17:80:d2:4a:6b:85:eb:14:f9:d5:76:33:29:
7a:42:58:56:89:cc:6c:7c:a8:10:56:63:53:ce:e0:
4a:84:ce:6e:b9:8c:35:94:c4:3a:83:31:29:eb:76:
b5:6c:23:45:87:21:4f:28:78:47:96:6c:32:6d:cf:
c3:34:01:b8:eb:11:f9:48:6d:08:b2:53:72:4b:33:
45:da:39:91:e4:00:18:75:d6:6a:31:77:4c:d2:ef:
c3:fe:19:0a:34:a5:1a:cc:93:8f:7b:dd:bb:61:ad:
5a:e3:b7:a3:fd:14:4c:62:99:18:d8:89:34:17:64:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:37:C1:B2:30:8E:2B:D8:26:88:EC:3E:DB:F6:DA:C2:C9:28:39:7F
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:45:bf:6b:2c:1b:4d:42:b5:c7:9e:3a:30:e8:1b:07:95:70:
85:95:ba:ce:1f:ce:9f:77:5c:c9:21:f6:47:11:35:dc:70:78:
48:6c:1d:63:af:ec:82:f7:d6:d6:6e:d5:51:53:8f:a6:36:67:
fe:2a:c1:7e:6a:f3:5c:c4:87:93:9e:4d:68:73:60:e7:10:6f:
ce:aa:83:4d:3c:59:59:a3:c2:8f:cc:5f:ee:fd:a2:4f:e5:61:
98:39:b3:24:a2:bf:17:50:11:b3:e5:3b:85:63:3a:87:0d:b0:
7c:16:58:1d:ea:ca:74:d1:83:e3:a5:b7:fc:bb:11:11:1e:83:
19:da:f5:fd:58:74:49:d2:52:90:c7:dd:a6:39:2b:40:40:10:
e3:2b:fc:bb:87:66:b3:16:14:70:06:9f:b1:4f:0a:2b:e7:68:
c4:9a:d1:94:c8:33:a1:36:44:70:47:c0:0e:e4:1c:59:fc:c4:
5a:2c:98:6e:ec:8b:1f:19:51:75:69:9f:e3:55:a9:79:4d:ae:
f3:18:8c:2d:47:c4:fd:a8:2f:16:9f:b4:bc:49:99:91:da:5e:
48:fd:bf:6a:d0:4d:84:36:23:67:4f:20:f8:a6:33:76:4a:6b:
4d:2e:b8:1c:e7:db:70:be:f3:c2:89:6c:ef:eb:e5:d1:d7:05:
57:53:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:58:24 2026 by rpki-client