Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: lK1JkKhj+7ORazHDwATPe8FExYG1iF5wXqb8ealVjPE=
Subject key identifier: F0:2A:A1:78:83:98:90:1C:F6:57:E6:22:CC:5C:3C:7B:BB:15:6D:68
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 019F190CC153B2760374A33F64E2D7A5796C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 1771
Signing time: Tue 30 Jun 2026 15:01:33 +0000
Manifest this update: Tue 30 Jun 2026 15:01:33 +0000
Manifest next update: Wed 01 Jul 2026 15:01:33 +0000
Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: fTE7OGJv19XMGmmWdbZEYhtDs3ebCSXvmQ0mmk8FcfQ=)
4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:c1:53:b2:76:03:74:a3:3f:64:e2:d7:a5:79:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Jun 30 15:01:33 2026 GMT
Not After : Jul 1 15:01:33 2026 GMT
Subject: CN=f02aa1788398901cf657e622cc5c3c7bbb156d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:53:19:77:e8:f8:cd:c5:d1:57:42:63:b4:
c8:60:01:35:87:09:8b:9c:d9:08:f1:ba:db:8f:48:
50:c8:21:ae:b0:a2:72:5a:ab:fd:00:39:28:eb:96:
0b:ac:ba:87:95:d0:f8:15:bc:3b:65:fd:f2:9d:b3:
3c:dd:0b:83:e2:69:17:dd:01:9d:78:00:c3:cc:8a:
89:e9:57:05:0e:a0:0e:21:7c:68:1d:23:4d:eb:cb:
81:80:14:df:f5:f1:d8:11:4e:2c:44:87:20:01:ea:
2e:02:e8:6b:71:83:b3:c9:fe:f3:6c:ec:5d:40:0f:
d7:b6:9f:3b:bd:45:4b:50:3e:f8:88:15:79:22:50:
46:5f:81:11:fc:bd:02:96:35:0d:d1:e4:97:dc:05:
39:d5:94:a3:3a:70:b8:30:cb:0d:2b:75:c9:27:28:
11:d8:e3:7e:fe:0b:c3:c2:c5:6b:09:86:2b:a2:e5:
5f:1f:5d:03:6c:78:50:04:7a:a3:62:38:39:75:48:
56:00:1a:09:0a:26:a3:93:40:5c:dd:18:27:03:1d:
78:16:6c:d9:7c:d3:8d:e0:78:54:c5:b6:94:a1:11:
32:df:35:b8:f5:7f:7c:c1:7d:df:27:93:b5:f7:61:
24:33:38:bf:cb:48:68:12:d2:52:97:1a:8c:0d:7e:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2A:A1:78:83:98:90:1C:F6:57:E6:22:CC:5C:3C:7B:BB:15:6D:68
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f2:b4:37:95:eb:34:80:d6:8d:f7:76:e9:30:3f:f6:2e:4d:
1d:82:71:c7:a3:c0:e6:d0:c5:a6:ac:5f:a1:d8:e7:f7:ae:d2:
17:20:c9:22:eb:70:36:8c:a1:aa:b3:b9:bf:4f:c0:65:0d:7f:
53:12:dd:b5:ed:6c:32:6e:50:0d:bd:e6:d6:6a:14:39:61:7c:
3e:53:93:c1:93:8e:b0:84:fb:af:e3:0e:ca:cd:d7:4c:0a:35:
51:63:f3:84:a1:7c:d9:99:e2:70:7e:37:27:38:cd:6c:8a:5b:
83:26:52:44:b9:64:8d:4a:6e:88:36:8f:34:54:54:54:83:b7:
dd:fb:a0:4b:c5:96:dd:c3:04:ff:35:96:cb:b8:dd:05:d9:dc:
1a:7a:14:b8:0b:8b:02:5c:50:5a:5a:1b:4f:c2:bb:82:38:7b:
a3:a6:c8:6f:7d:5c:21:b1:bd:0a:12:ac:3b:d8:4a:b9:5b:84:
76:c6:18:9d:85:4a:f0:80:e9:93:39:46:e2:bd:1b:a0:cd:46:
e4:08:53:a6:1b:c3:d0:48:3a:c9:43:29:3a:7f:c9:89:42:d8:
47:d2:1b:72:eb:97:8c:99:60:77:be:a9:15:b7:9d:12:45:be:
2c:92:c9:59:60:9d:51:f4:b2:d0:a2:07:04:6d:46:8d:f5:60:
ba:fa:26:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:57 2026 by rpki-client