
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
File: 7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft (raw, json)
Hash identifier: x5gYw/qQW8IUlaB2+gm2u5H8LiqHfoz6RjNMm8OIgXE=
Subject key identifier: 7A:87:E5:85:E1:AA:24:F6:1A:2D:55:71:7F:95:71:FC:5A:52:60:B0
Authority key identifier: EC:33:20:7D:14:4A:09:44:F5:2E:86:71:A9:18:39:A8:3A:C9:A6:FA
Certificate issuer: /CN=ec33207d144a0944f52e8671a91839a83ac9a6fa
Certificate serial: 01A0016FE3FF685669C34865C05D96CE8135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DMgfRRKCUT1LoZxqRg5qDrJpvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
Manifest number: 7A
Signing time: Fri 14 Aug 2026 18:01:45 +0000
Manifest this update: Fri 14 Aug 2026 18:01:45 +0000
Manifest next update: Sat 15 Aug 2026 18:01:45 +0000
Files and hashes: 1: 7DMgfRRKCUT1LoZxqRg5qDrJpvo.crl (hash: D3GkLEre2wNZ0kJ2SAvtYsY4uFYRyD9rHScHQDzFMdU=)
2: XbUrIbN32tx_I5q3CIy0eDpniyc.roa (hash: rSzXDaoG3c1rlucOs36GgG/tUP5/xd5PVZrM6moq2JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DMgfRRKCUT1LoZxqRg5qDrJpvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:e3:ff:68:56:69:c3:48:65:c0:5d:96:ce:81:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec33207d144a0944f52e8671a91839a83ac9a6fa
Validity
Not Before: Aug 14 18:01:45 2026 GMT
Not After : Aug 15 18:01:45 2026 GMT
Subject: CN=7a87e585e1aa24f61a2d55717f9571fc5a5260b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:9a:ec:d6:85:71:7b:9a:b2:3f:c2:66:e3:
d6:98:58:bc:23:d2:17:e9:f6:24:dc:c9:59:6d:0e:
b5:42:7b:65:ed:d4:df:8a:2b:d8:4b:58:d3:2e:83:
c2:20:e8:d3:ca:27:3e:47:18:04:b2:d0:1d:46:59:
28:cd:a2:25:e1:92:b2:77:ab:dd:14:07:15:77:65:
ad:de:59:9a:5c:59:a1:96:cf:3f:f1:0e:84:0b:10:
b4:e7:0f:1e:d4:15:55:67:29:a2:10:16:a9:8f:15:
a9:8f:11:47:4b:ed:00:22:e3:96:cb:6c:b3:3e:cb:
fb:3a:6a:25:b7:86:5b:82:d2:7a:d0:80:86:54:8d:
ea:4d:27:0d:e8:b9:a6:8e:48:a9:7a:98:22:f1:53:
ca:47:f2:f4:24:2b:6e:35:6e:13:93:e6:de:5e:f5:
2b:1e:90:28:e5:07:34:1e:f0:e2:25:9d:0c:8d:83:
21:28:ed:11:a6:88:3a:14:e5:52:c0:ee:96:8f:49:
32:99:c3:35:81:02:93:4a:16:4b:05:16:66:8a:59:
09:71:01:0b:e7:fd:b5:50:d6:bb:2d:23:1f:73:d9:
0c:40:59:b5:ab:62:4a:1d:87:5a:a5:74:90:d6:28:
20:84:b0:62:76:f9:16:8e:54:47:48:1e:0a:84:93:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:87:E5:85:E1:AA:24:F6:1A:2D:55:71:7F:95:71:FC:5A:52:60:B0
X509v3 Authority Key Identifier:
keyid:EC:33:20:7D:14:4A:09:44:F5:2E:86:71:A9:18:39:A8:3A:C9:A6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DMgfRRKCUT1LoZxqRg5qDrJpvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:67:f6:d6:bd:c5:e5:33:04:e1:f3:b1:0b:59:27:b1:86:db:
c7:dd:d8:c5:e4:c4:c9:8f:03:b4:40:c1:71:12:3e:0f:b0:cb:
63:d4:3c:40:2e:27:a3:2f:f6:bf:01:f2:87:3c:74:b9:71:56:
86:35:e8:38:4e:11:cd:7e:dc:8b:c6:d6:d3:90:28:99:80:01:
75:e9:61:c6:fd:3c:b3:eb:8c:78:66:7b:33:08:4c:33:9c:39:
b5:0e:de:5e:22:df:84:42:64:ea:aa:c7:f5:07:55:19:5f:32:
77:ce:cc:1e:04:87:80:f5:7c:97:dd:ce:32:18:9b:cc:93:82:
02:ff:93:dc:5b:9b:70:80:fd:bd:f0:d6:22:9a:93:2d:62:94:
72:51:9c:67:6d:22:73:97:57:17:e6:91:2a:1e:da:47:c1:5a:
0f:b8:80:57:92:07:be:cd:f6:97:46:e4:b5:a6:63:a6:6d:48:
19:c7:72:36:9a:02:73:91:a1:82:b4:70:1d:ed:15:63:11:fb:
dc:9d:34:58:60:f7:05:c1:df:31:41:e8:01:b4:b3:a1:d5:2f:
be:fd:54:bb:17:aa:16:a0:31:e0:5e:68:12:a0:db:37:66:28:
e3:99:df:6d:ae:0f:62:0e:9b:6c:2b:8d:19:29:78:6c:ec:64:
9b:b1:d8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:12:07 2026 by rpki-client