Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: 1bU4n5gEM8t7HQkMT4UJvRO58QAhr7V7k0jVCZnZcLU=
Subject key identifier: 0A:D1:78:C5:2F:86:2C:9B:73:D7:85:33:3B:C0:13:C2:57:AE:5A:FE
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 019F38608D79F6D6E27C2E6E378FB3485EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 199A
Signing time: Mon 06 Jul 2026 17:01:19 +0000
Manifest this update: Mon 06 Jul 2026 17:01:19 +0000
Manifest next update: Tue 07 Jul 2026 17:01:19 +0000
Files and hashes: 1: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: BBMHw+SDXfN0HNqmmT3wBRBZa/jm9JqK9SBj7/p7aKQ=)
2: CXyMI2l8iEL8L83sjM9bkDZ8hS4.roa (hash: j/IQcIj8RO7TPRLNA/hKS2090AInnEPNtfaLrldabW0=)
3: VoUC5dLmrwvo5IVIUQ9reyXsBQk.roa (hash: qRjYhRjtRMqcpSCBbiNCNUBeAUXt7NZHib1uEHQNNXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:60:8d:79:f6:d6:e2:7c:2e:6e:37:8f:b3:48:5e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Jul 6 17:01:19 2026 GMT
Not After : Jul 7 17:01:19 2026 GMT
Subject: CN=0ad178c52f862c9b73d785333bc013c257ae5afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:92:2e:fd:c0:a1:ce:d3:a6:5e:f9:aa:3f:ce:
b2:5d:b9:bc:75:e2:93:4a:75:ba:ab:da:43:d1:2d:
2c:c3:37:d7:9d:9d:c7:c9:b4:03:2c:c5:c9:4b:94:
75:5e:dd:d0:c4:7a:62:e4:3b:9d:b2:e6:c2:4f:61:
2b:4a:40:59:51:8d:75:15:31:7f:42:2b:e0:b1:26:
0a:c4:f0:f2:c0:65:e7:b8:ea:38:f4:00:cb:bd:04:
d3:7d:cd:b8:df:03:7e:f3:96:da:92:8d:2f:39:ea:
11:25:e4:ec:79:8b:1d:22:ce:51:d9:d9:36:43:f7:
43:08:08:d0:42:ed:f8:1c:da:10:e4:98:f4:58:7d:
a9:d6:19:7d:64:7d:07:71:01:3f:1a:7d:00:9e:7b:
94:94:65:de:07:90:dc:3a:99:d7:89:92:71:72:5a:
7b:9f:a9:0a:76:7a:aa:14:b6:64:c8:e8:b4:2e:78:
8c:01:5e:ba:db:e3:cb:b3:d7:d3:4e:f3:16:c4:1f:
fa:d7:a7:83:45:a8:cd:c1:3c:21:fd:b0:cd:b6:ce:
fa:3e:26:7c:d1:1e:47:1e:3d:75:96:ff:36:ef:41:
ae:e0:28:88:d9:d5:7d:3c:35:7a:51:2c:fe:b1:c4:
c2:2c:f5:6f:6b:68:c5:c9:bc:47:8c:ac:71:0b:b6:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D1:78:C5:2F:86:2C:9B:73:D7:85:33:3B:C0:13:C2:57:AE:5A:FE
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7b:c8:ca:77:16:0c:63:c2:bd:9f:eb:9d:46:4d:1b:f0:0e:
4b:a0:27:ac:71:51:27:ff:84:3b:30:cd:cf:18:32:9f:d4:95:
9a:b9:c9:f8:bd:f4:e4:89:87:97:21:42:ba:76:61:26:17:33:
35:56:b7:d8:5e:55:b2:e2:02:4b:6f:33:c1:ad:4e:b5:a7:d4:
eb:e0:c8:94:f6:0b:65:ad:3b:4d:8e:62:2e:3e:e6:a6:0d:16:
f5:9a:ef:f7:d2:6a:58:f0:78:7b:8f:c6:b7:65:ec:a5:c8:42:
ee:5d:28:96:62:8a:7d:5b:00:4b:83:a3:24:eb:e3:dc:7a:fd:
b8:73:48:83:92:2f:f9:44:ed:dc:2c:39:ae:44:41:1f:21:67:
53:cb:b1:74:c0:fe:e1:bd:63:7a:6b:7f:83:4f:eb:98:78:da:
53:f5:88:cf:06:53:68:ca:0b:d0:a2:47:0d:4a:5e:2d:34:b7:
33:3c:8a:61:07:a2:45:8c:03:e3:4b:39:06:26:9f:c6:4a:ae:
bf:89:26:89:18:9d:de:67:25:b0:63:a8:fc:db:60:74:3a:37:
39:bd:cd:4d:13:5d:81:21:64:29:f0:5c:09:7b:9d:0c:bb:bb:
ec:63:f7:76:33:81:0d:cf:6a:d3:9b:fb:72:81:8f:7f:17:cd:
1e:3a:76:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:22:02 2026 by rpki-client