Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File: 7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier: CV1vU8fz9DN6TMKFF79befUkmQ3RCFAnRuNAbtQ5B9U=
Subject key identifier: E2:9F:28:98:85:FE:69:91:84:7C:F0:C2:7D:5D:31:5F:8C:9F:CF:F5
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 019F83B0DA30DEB73D6581ECA99279CF019C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number: 0AF5
Signing time: Tue 21 Jul 2026 08:00:33 +0000
Manifest this update: Tue 21 Jul 2026 08:00:33 +0000
Manifest next update: Wed 22 Jul 2026 08:00:33 +0000
Files and hashes: 1: 1-OYnNzXr6Vo5v0tdTY5uXPebeXE.roa (hash: HvTSCO8dnKWpIGNv0ZhtPHvjO7rUBO8uy6VJMUgGVj0=)
2: 5DTG2pQHtM0QiGmSH96_4M3Hn5k.roa (hash: ITY7NiqI6LopyqA5OlrdJTOTC/MthEeeabjTB3wyEhU=)
3: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: Aq27q6gP0h0t9vCb33zI6KLOH1JpxPtgWK7DtMtQVkE=)
4: RM00pEOnjdUoQZ1uOORIvICjLRc.roa (hash: 1q7noK5WwG38lLIIHMiI0dpQ1QOgidIvosSPHpVKMS8=)
5: Rb9KBoBLJn6K8gQhZg2wL_hnX2Q.roa (hash: Pnn1XhHhvI1FVLr7IXQzdyTXVT364mukcsmYH/cxMhg=)
6: djl4yLaR492a1MyY0DtkNwyzb78.roa (hash: ej60VYUqOdqHjFm3piE4ykWKGCUfy0gAqtpywAR05qI=)
7: n6Q7Dz0YljZRgjb4Ej38nYOG1kE.roa (hash: A8op5Re6jPP6C2oorXQWf6MTZbk9dP/pw1d5qjwWEks=)
8: x8PuWJNPJBC35K_SG-mLe9gxJtA.roa (hash: i+jPp0P0KxStb0wvP/NjPbGbfQidMuZ2R8mV3ecH7IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:b0:da:30:de:b7:3d:65:81:ec:a9:92:79:cf:01:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Jul 21 08:00:33 2026 GMT
Not After : Jul 22 08:00:33 2026 GMT
Subject: CN=e29f289885fe6991847cf0c27d5d315f8c9fcff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:04:24:68:59:39:c5:ed:ef:2f:4f:9b:fd:
32:7f:04:a4:c6:c4:ed:8b:d1:9a:b2:38:92:60:ce:
d5:af:fa:af:33:f2:ef:0f:b1:cb:41:90:9d:8e:7c:
62:1c:7b:c2:d6:28:6f:8d:87:88:51:c5:12:75:9c:
76:79:14:d9:ef:bc:9a:0f:46:99:e1:5f:d6:f5:b5:
7b:9f:67:b6:43:65:13:0c:58:17:f2:02:42:2a:b8:
c7:65:a1:d5:2b:e1:77:ef:cd:aa:f7:37:15:be:c4:
43:d9:7a:8c:2c:f5:27:fb:fc:04:22:d5:d0:17:75:
ab:b9:e3:61:7e:c6:53:5d:4c:40:0f:13:89:5d:68:
de:f9:87:b0:02:30:aa:90:11:09:69:be:ec:f7:9d:
23:42:15:70:6d:01:75:74:80:af:3d:d3:c9:cb:94:
84:e6:4c:57:5a:4c:42:3e:c5:a2:29:a7:9f:cf:f5:
93:11:dc:1e:a3:41:d0:8d:e0:6c:76:fb:6e:9f:ce:
a3:d3:4c:4a:11:b7:0a:e4:ae:37:e9:6a:ca:92:9b:
e7:f5:b3:72:8f:11:89:52:a4:b0:f1:b1:4f:11:68:
f5:82:f1:57:f5:2b:bd:cf:bc:94:d2:b7:56:bc:90:
34:0c:b9:5a:84:8b:98:75:10:5c:12:9d:ff:39:2b:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9F:28:98:85:FE:69:91:84:7C:F0:C2:7D:5D:31:5F:8C:9F:CF:F5
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:df:d0:ec:c8:07:3e:15:d3:8e:e1:b0:46:2b:40:c9:cb:bf:
00:0a:49:e0:98:c5:fe:05:fc:dd:d4:4c:db:64:d5:78:69:53:
f1:9a:4f:55:dd:b8:04:0b:b6:1b:fd:ca:e4:a3:33:95:7a:15:
44:ae:e2:ea:9b:00:7c:c9:91:e9:0c:cf:20:9f:ed:24:98:c8:
68:ad:a6:b5:cf:d5:cc:72:09:c7:70:7e:43:b2:67:81:2b:dc:
4e:25:c3:8f:c3:21:44:0c:f4:30:41:fd:f7:a3:39:ba:42:c3:
0c:9a:d9:6d:95:0a:ad:84:49:62:e0:07:c1:ef:63:1b:e5:be:
f9:9a:7f:66:27:6e:26:31:95:2c:fb:be:e4:55:4d:fe:3a:72:
99:64:7e:16:a9:9e:e1:00:92:f7:e8:a5:7f:cd:0c:7a:7c:ad:
dd:08:1b:17:b1:d8:75:8b:eb:3d:b5:e5:bf:0d:06:6f:69:dd:
2e:89:e4:db:d5:24:54:6b:72:da:00:44:e7:e9:bc:37:04:23:
99:9b:9e:4a:1f:09:fc:ee:f7:e5:32:0c:61:8f:48:6c:cf:3d:
14:73:7b:0a:2b:37:74:e0:71:95:ad:7b:e0:fd:3e:cd:71:86:
66:ef:16:b3:c0:ed:44:30:a8:00:fc:0a:91:8e:74:ba:75:a6:
c9:6f:e8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:27:05 2026 by rpki-client