Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: XpJLc8yftx7BXgiMshzdESCC97quPoKBS8FgbuXq9xE=
Subject key identifier: 2E:0F:F0:60:A1:9C:DE:0E:B5:F9:F6:AE:2C:0A:DC:1E:FB:87:7E:AE
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019FA1F2580C6279E13350A75283208A11CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 19EF
Signing time: Mon 27 Jul 2026 05:00:41 +0000
Manifest this update: Mon 27 Jul 2026 05:00:41 +0000
Manifest next update: Tue 28 Jul 2026 05:00:41 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: Y3cFM6jogn1CuqyuIl/kozUtFwl6PfRcIVrfjFtT+Ks=)
2: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (hash: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c=)
3: JnNygfiur-rHLJuAn1hkxLz25cQ.roa (hash: CEYmgo0zOa133sbdNYSecv5niw3ZeeRwnisUaeasxBY=)
4: UV-Za1MLDNSaG4DuH_q131i6c6o.roa (hash: /nY7i2nihg09pwfCz4ZETusOQgWbnKeEZAo2lp/8PQQ=)
5: XwwEduTGUdEUmzQ6Vn1Qh0lULKE.roa (hash: yP/C4oSHOkCL3b3u7lTD0ceM0Z9V/7tsggm9f4RRupE=)
6: bc8LaOm-Ug6E5hSvds9yGbuwrFA.roa (hash: RaZzZcOTQlGar1i6XUpTh++hxvp7YrNT3WX2Bc1Xmtk=)
7: gDu74A_Z1ksatoKHQD455fxsAx0.roa (hash: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig=)
8: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (hash: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:58:0c:62:79:e1:33:50:a7:52:83:20:8a:11:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jul 27 05:00:41 2026 GMT
Not After : Jul 28 05:00:41 2026 GMT
Subject: CN=2e0ff060a19cde0eb5f9f6ae2c0adc1efb877eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:df:c8:78:a2:fb:0a:66:aa:5c:44:20:78:
37:ff:70:f5:8d:ae:cb:50:fa:e6:fd:ac:ea:44:b9:
6d:85:7b:08:a0:7d:56:f4:57:b4:db:fe:b3:06:5a:
47:67:7e:f4:95:f0:d1:97:5c:6b:31:7d:a8:28:71:
84:6c:2c:e2:e7:09:fd:67:10:9a:2d:a5:a5:b8:0f:
85:8b:a0:fb:43:23:f2:8d:d1:87:56:51:5f:00:08:
9c:85:78:ba:be:e6:3c:b2:f2:53:99:d2:d4:e5:8d:
5c:b8:ed:78:cd:68:68:08:66:cc:18:33:3d:17:c8:
17:0f:47:ed:f9:9a:e5:26:c3:18:b3:19:7a:fa:77:
02:2e:2a:ac:38:25:f3:88:40:9b:ab:e7:fd:8e:a1:
47:17:bd:ec:bf:90:e6:83:ed:2f:34:dc:9f:90:60:
ab:d3:de:b8:7c:70:a8:ff:72:d3:9a:74:6d:29:81:
77:cb:89:22:cb:1b:d1:f3:d3:6d:a1:c8:f0:6c:1f:
bc:d0:d6:a5:24:6e:71:2c:0f:ac:ac:20:f9:31:1f:
40:3d:1d:44:57:ef:f7:c8:e9:0a:68:26:24:d6:7a:
ad:1b:60:c3:b2:d0:19:e5:4d:77:22:dc:fc:11:7f:
d4:4e:bc:fa:b1:a9:af:82:4f:30:20:32:ce:ff:7e:
f4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0F:F0:60:A1:9C:DE:0E:B5:F9:F6:AE:2C:0A:DC:1E:FB:87:7E:AE
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:61:cc:ee:f4:8d:6a:8e:30:9e:97:18:71:5a:86:db:68:20:
00:6d:56:cd:44:07:8a:fd:28:a9:d7:a6:f9:06:a6:83:d8:eb:
7a:08:c4:32:83:c7:46:16:75:a5:d2:6a:3e:ff:2f:b2:d5:25:
9b:ab:14:98:92:39:37:5b:f3:16:ce:fa:84:e0:8e:90:b7:cd:
ff:56:6f:79:5a:37:4a:43:c6:1f:cc:cc:84:3c:53:6e:91:82:
f7:07:dd:3c:ec:ed:30:14:c1:69:ac:7f:95:de:30:4f:f3:d0:
92:99:ea:9f:0a:38:52:31:64:3c:ed:92:db:1f:df:94:3e:a9:
dd:dd:af:7d:ea:ed:16:14:be:c5:85:51:21:02:4e:91:83:4e:
8d:97:e2:76:d9:7d:ba:61:00:a1:0b:e1:52:b9:50:68:1e:d9:
66:80:fb:95:35:88:bb:e4:99:fa:3b:d4:14:f6:e7:95:0d:df:
f0:2a:5e:d4:2a:f4:88:a8:64:b3:76:bf:30:df:11:0b:46:04:
71:bc:bc:9d:e8:fa:56:e0:46:14:c0:56:36:ff:f4:5d:14:00:
f8:28:27:41:53:db:75:f0:83:9b:4e:88:d8:7a:c6:49:9e:ec:
1e:36:63:3c:21:b3:18:f5:50:22:79:78:67:b3:a4:35:e5:f3:
2e:f5:2e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:45:03 2026 by rpki-client