Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
File: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft (raw, json)
Hash identifier: 28g/AxTRsH4TheuyzdXPJuECiQxoz6TrrpnAKdXQvk4=
Subject key identifier: B7:C6:89:BE:CD:7B:BF:E9:8D:3E:D3:38:92:BB:B8:ED:39:92:39:C6
Authority key identifier: 7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
Certificate issuer: /CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Certificate serial: 019F841EB5CB2A25852AA8CDD02793D90A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
Manifest number: 02B6
Signing time: Tue 21 Jul 2026 10:00:32 +0000
Manifest this update: Tue 21 Jul 2026 10:00:32 +0000
Manifest next update: Wed 22 Jul 2026 10:00:32 +0000
Files and hashes: 1: 3gMylm_7kdY05Np-Gs1Ujn2TpUw.roa (hash: W5KGrcdaIcr77/oIsEbLhshZMJrc2jrTw0N4xA3kS0o=)
2: SHM9R3kXlAO8-e-rYuN_jsGmG6M.roa (hash: X06rQu41FDn+MhiPC2VMwGHMTFpmXVd6mlDBUP0P6FE=)
3: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl (hash: GVCnJDYr1RDUiQ8a6k1Cb95zz8Hy31sqU46PJPgKLwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:1e:b5:cb:2a:25:85:2a:a8:cd:d0:27:93:d9:0a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Validity
Not Before: Jul 21 10:00:32 2026 GMT
Not After : Jul 22 10:00:32 2026 GMT
Subject: CN=b7c689becd7bbfe98d3ed33892bbb8ed399239c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:ab:73:bc:fe:f7:a3:c6:75:45:34:14:4b:
39:a8:36:e6:ca:1e:c6:96:62:b4:dc:cd:15:58:f9:
9c:b7:d5:c2:6f:d4:7c:eb:e6:64:07:bc:2b:72:f3:
9c:dd:60:ec:20:47:ef:58:1b:5d:a4:5a:43:93:a2:
7e:69:cd:74:4b:58:78:1d:37:c0:81:c8:c0:2e:b7:
24:da:d7:6d:18:45:fd:a0:55:e7:b5:ad:9e:dc:c1:
0e:c6:39:f8:fe:42:9b:19:23:56:bb:71:11:b1:4a:
8e:10:13:97:30:47:65:f3:ed:ac:07:35:3a:9a:f5:
8d:b9:7a:23:3f:f3:ff:80:da:e1:84:ac:6b:b6:a9:
06:64:de:3d:38:25:61:b7:77:72:e1:be:12:b9:68:
8d:c0:03:e1:59:28:58:e4:23:2a:e7:6d:6f:49:2d:
d4:a8:fd:05:f2:81:64:c7:2f:69:8b:88:b5:3e:a6:
ee:76:90:86:92:f3:a0:11:50:42:a9:3f:b7:13:05:
bb:af:3e:20:29:5a:cf:96:3f:98:4b:c4:21:f9:1f:
fc:e3:8c:fc:b0:d6:c7:62:6e:cf:22:d2:e3:7a:f4:
85:7d:f0:82:4b:39:8a:a4:60:51:cd:99:f9:04:d3:
3f:68:3f:81:51:c8:a4:8d:0e:b7:ad:cc:45:c4:41:
ac:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C6:89:BE:CD:7B:BF:E9:8D:3E:D3:38:92:BB:B8:ED:39:92:39:C6
X509v3 Authority Key Identifier:
keyid:7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c7:41:05:ca:06:cb:13:ee:0a:c1:50:12:2b:cc:26:f3:e3:
ec:c5:5f:72:c5:ae:81:5f:8c:9c:6b:34:70:84:d6:e7:4d:bd:
f1:c0:74:f2:a2:2d:31:69:2e:82:48:17:af:e2:82:72:15:27:
c0:b8:5f:64:83:9a:54:54:4f:b6:e5:17:07:fa:84:9f:1e:ba:
2c:0b:36:ad:6c:29:a3:8e:6b:d1:67:1b:7d:ba:f7:61:1e:d1:
ae:f0:77:94:70:56:bf:c7:d2:80:22:61:5b:8e:45:f8:02:da:
7c:76:c2:96:2f:1b:35:5a:97:68:5c:72:25:46:0d:9f:b4:c7:
96:41:db:f6:fc:a4:21:c0:01:c3:cf:d6:98:af:dc:2d:5b:23:
5e:c0:fb:67:d5:e5:be:7f:0c:54:40:ef:b6:2b:43:be:90:b3:
5d:3b:f8:fe:42:1d:40:76:f8:a8:45:50:23:18:6b:f7:a5:8a:
80:5b:73:5d:fa:b5:85:1b:57:b1:ce:6e:b8:f6:d1:7f:df:43:
59:b5:f0:3b:8b:61:18:dc:12:56:d2:ac:65:12:17:07:cb:99:
74:2f:84:9e:65:7e:9e:b7:89:27:3a:69:fb:5d:5c:08:04:65:
e5:85:9d:8b:59:ca:ab:af:41:c2:c4:0d:42:59:1a:60:70:62:
27:4b:05:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:42:40 2026 by rpki-client