Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: AM5qetjdxp9fd/H7MveSEbHYl/FlUiRVUCiHMnUtH9k=
Subject key identifier: 6F:B3:C5:37:6B:64:22:5E:F6:5F:CC:51:A1:AD:36:C0:A9:45:85:10
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 019F189DF9AE050C99106BAD452B80B95B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 13:00:33 +0000
Manifest this update: Tue 30 Jun 2026 13:00:33 +0000
Manifest next update: Wed 01 Jul 2026 13:00:33 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: hf5LG+1TpOceQLaH9QssBa+hobwlF0jMdMD+TNh8HJA=)
2: x6n822Rpr9x_ujzRReAoyI3uWJE.roa (hash: xHlOIj9K0jyV1cDKqnDaDCInd6n4ZibqQVDDfE1qwao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9d:f9:ae:05:0c:99:10:6b:ad:45:2b:80:b9:5b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Jun 30 13:00:33 2026 GMT
Not After : Jul 1 13:00:33 2026 GMT
Subject: CN=6fb3c5376b64225ef65fcc51a1ad36c0a9458510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:24:37:5c:12:ce:7f:c8:af:33:94:d0:fe:
42:50:9b:6b:bf:84:b5:8e:af:28:65:14:93:a8:b5:
1f:4f:5e:b6:d8:14:eb:52:b5:7d:a4:cd:71:e9:1c:
e6:9a:ec:4c:95:dc:8e:05:b7:95:f4:12:e6:c8:bb:
25:3c:3a:4d:66:bc:5b:a6:f6:6a:7f:2b:a5:37:06:
63:ce:f2:1e:7c:e7:49:69:be:bc:41:2b:00:f9:93:
06:a9:81:2b:9b:c2:6d:2e:63:cd:9f:20:30:40:d6:
0c:25:d3:2a:12:eb:83:d7:9e:3e:ca:eb:72:c4:13:
14:38:fe:5b:81:5f:fd:86:6f:c8:5a:cb:66:75:0e:
86:c6:00:f1:1e:2e:ad:de:52:c3:14:d7:80:87:72:
fa:c2:af:1d:03:8b:a3:74:84:26:35:f1:de:24:01:
44:bf:fd:06:bf:1f:ee:32:86:39:ea:09:a8:da:34:
15:87:c1:3e:f0:b8:94:09:76:18:90:25:46:99:5a:
99:0f:8d:b7:fe:1d:53:d0:d5:37:5c:87:f2:34:7f:
c9:df:7b:4d:80:d7:7a:86:5a:88:59:19:3e:bb:32:
38:2f:b6:ed:25:d1:7c:a7:fc:eb:b0:d3:19:9c:e5:
30:df:5f:0f:91:16:7f:85:3d:16:00:e4:44:0e:d5:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B3:C5:37:6B:64:22:5E:F6:5F:CC:51:A1:AD:36:C0:A9:45:85:10
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ec:d5:4f:ad:20:22:9e:9a:17:af:f3:58:90:2a:4e:04:fe:
bf:b3:6f:eb:74:d2:dc:c2:e5:fb:ad:d2:b9:68:f8:1b:94:dd:
c8:90:00:60:e7:f2:ad:4e:ca:e8:a4:c7:3d:69:dd:95:eb:fd:
4b:21:bc:5e:b8:6d:29:f2:51:e1:d8:00:2e:a9:f2:8b:7d:da:
e6:63:c1:27:48:b2:36:48:64:b4:24:e1:cd:52:93:5f:e3:cc:
2f:e5:bd:e9:35:7b:27:1c:33:b4:22:22:ff:b1:9f:59:cd:b1:
ea:b0:de:4f:6d:21:b4:37:a4:11:66:83:4c:29:83:17:14:cc:
79:37:11:9f:77:22:bc:56:9e:e7:a0:04:39:14:87:9a:ed:a6:
44:85:18:e9:90:25:72:31:c5:3e:a2:3b:b9:3f:bb:99:19:c7:
ca:78:a9:bf:e9:60:be:5e:7c:33:85:0b:72:a5:33:c2:f4:9b:
73:2b:bf:b5:7e:8b:ee:49:30:8c:58:06:2a:c1:98:0f:c9:be:
ac:d6:95:3f:5d:46:95:7a:4f:9d:b7:69:84:f9:2b:dc:29:0d:
7a:5f:4b:de:0f:a3:0b:10:83:ac:03:50:58:c2:d7:98:81:7d:
47:37:51:06:e0:c2:ec:d8:df:c3:56:c7:1c:91:e7:68:4b:6a:
05:61:09:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:39 2026 by rpki-client