Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier: nur1ede1mxJlTTG0zWKZL2pMFjPRweaBb2PgQ092liI=
Subject key identifier: 4C:51:49:E7:FD:AC:7A:94:21:96:17:8B:5F:F7:22:C2:32:0C:43:1D
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial: 019F9F28BB795229E6141DB83BC6248EC937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number: 0B0C
Signing time: Sun 26 Jul 2026 16:01:14 +0000
Manifest this update: Sun 26 Jul 2026 16:01:14 +0000
Manifest next update: Mon 27 Jul 2026 16:01:14 +0000
Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: TL008FJhL9ORabGPoZbNTGPS8JMgdPxxxfFjqyAV2sc=)
2: UlZluMg72w3OGQ7yVXSws-uTL0A.roa (hash: ZbBL16EPSfeFJDsY/7W353hLaYPwOpiK4otGlBdRF9Q=)
3: r6bLmGYRXJA6GUfCZnH4ebCbXYU.roa (hash: Q+Z0jJyseu+MqQA03xeTfakfDGrq+7+0HE8bf99rEXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:bb:79:52:29:e6:14:1d:b8:3b:c6:24:8e:c9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Validity
Not Before: Jul 26 16:01:14 2026 GMT
Not After : Jul 27 16:01:14 2026 GMT
Subject: CN=4c5149e7fdac7a942196178b5ff722c2320c431d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:7c:fd:c6:d9:a3:24:57:34:3f:ac:ae:94:
7c:a7:d0:93:c5:e6:a7:92:9c:35:83:88:46:ac:f1:
cb:bd:bf:63:60:ff:47:ed:4f:ec:71:a4:74:1e:c4:
03:1c:94:f5:67:b6:fa:85:32:a5:7e:09:2b:73:e8:
5d:34:01:1b:d3:60:64:2c:b0:d5:bf:c2:19:b2:43:
5b:cd:a2:51:25:1d:c0:ea:8a:ca:97:d1:d0:4b:27:
96:b9:9d:28:ee:b7:cd:b9:0d:80:2a:55:7c:7c:83:
79:e1:a2:bd:ee:9f:79:19:48:ce:c9:eb:97:5e:64:
70:c1:d2:3b:57:cf:76:c0:60:0c:81:be:fd:ac:9a:
da:8c:2d:a9:e6:e0:88:0a:9b:df:51:f6:c9:fb:27:
06:25:b5:3c:b2:f8:eb:f4:7e:d4:b3:b2:79:ce:7d:
e1:49:41:51:23:b3:b6:11:f6:e6:82:e2:e8:8b:9a:
da:72:84:3d:25:af:a8:e7:0a:63:93:dc:bc:95:92:
08:18:0b:8a:82:6c:44:2e:19:b5:d5:bd:45:dd:90:
35:f3:cd:f0:45:eb:49:cb:eb:5c:26:14:69:5f:50:
64:2a:b6:a8:4c:41:05:7a:05:a8:fe:52:71:89:7f:
ba:a6:76:32:2a:c2:31:a2:a7:7a:b1:2a:40:af:b9:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:51:49:E7:FD:AC:7A:94:21:96:17:8B:5F:F7:22:C2:32:0C:43:1D
X509v3 Authority Key Identifier:
keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:71:c7:dd:1b:12:48:3d:77:c8:62:56:ff:a4:81:61:41:cd:
1e:79:d2:5a:72:43:54:73:e7:9b:e5:44:cc:6c:82:73:49:ce:
aa:12:e5:fd:63:e8:a1:bf:b5:9b:aa:fc:e7:3e:63:c0:01:b5:
e7:23:7a:11:cf:d1:b7:05:d8:bb:59:fd:4a:e5:56:91:2f:4a:
09:3f:70:ed:fe:0b:13:45:3e:d1:06:78:23:06:bc:a2:27:93:
73:25:34:1e:35:7a:53:5d:3b:09:8f:d4:5a:3c:39:6f:d4:99:
d0:c1:63:7c:50:4f:01:00:56:41:f4:bf:9c:be:2f:18:d8:ec:
9c:b1:8a:af:1a:6a:ce:54:d9:8a:41:6c:a4:da:f1:9d:24:83:
89:90:eb:84:6c:1e:e6:9d:64:9b:d5:2d:c8:d2:d8:ed:5c:d6:
be:f7:a4:25:db:0e:9f:c4:21:a2:c1:e0:5a:f3:47:40:13:c9:
37:bd:6a:77:32:05:c3:66:f3:60:6f:13:9b:e2:39:43:b3:55:
60:9f:a7:00:90:23:74:2a:e7:aa:c4:8d:70:6d:a3:32:03:41:
91:f3:2f:93:bb:39:af:27:ab:78:7a:20:a0:70:e8:38:84:2d:
4a:f4:0c:89:f7:6f:bb:66:eb:ae:a8:fc:51:c1:b0:71:38:6c:
0e:8d:e1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:55:18 2026 by rpki-client