Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
File: 7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft (raw, json)
Hash identifier: ZYfZ+AT8s8kEbs9chlhXc4NkHdZ/D+lZ+KHY6cWpu8I=
Subject key identifier: 99:91:2F:C6:E5:AF:5C:9E:03:CE:3C:34:45:6A:69:9A:48:4F:2C:12
Authority key identifier: EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
Certificate issuer: /CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Certificate serial: 019FA2CE889C14616872D5D63E267BC251BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
Manifest number: 0161
Signing time: Mon 27 Jul 2026 09:01:12 +0000
Manifest this update: Mon 27 Jul 2026 09:01:12 +0000
Manifest next update: Tue 28 Jul 2026 09:01:12 +0000
Files and hashes: 1: 7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl (hash: vk/oTA8zzICCP0ko1Y7GDUsmVYgqrBbx9nKbUpeNIzM=)
2: rBifEteMiJ25R5DQDU12NebJRS4.roa (hash: zud/trrJppI6pE83KUPt6r47Ql1iRfoDUPjneuGZTLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:88:9c:14:61:68:72:d5:d6:3e:26:7b:c2:51:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Validity
Not Before: Jul 27 09:01:12 2026 GMT
Not After : Jul 28 09:01:12 2026 GMT
Subject: CN=99912fc6e5af5c9e03ce3c34456a699a484f2c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:c9:fd:d1:8c:e3:81:e1:72:92:dd:72:40:
cb:3f:ee:8d:f1:c1:45:df:4f:9a:44:39:55:d4:82:
41:bb:9e:d9:27:bb:1f:4a:4b:1b:10:d1:03:0b:f9:
2e:41:42:2e:ab:09:6f:2a:30:ba:a2:e6:87:eb:82:
82:b5:15:f2:c4:26:8c:08:2c:0c:96:df:13:44:46:
86:d7:a8:f3:97:87:80:f4:41:cc:da:46:71:ab:10:
5b:6a:70:75:7a:ff:83:a1:61:36:67:20:30:29:53:
9f:6a:0c:cc:6e:22:9e:b5:f8:8a:d1:24:9c:9b:16:
ad:7c:61:2d:f6:d6:8e:15:11:31:6e:d0:16:d1:fb:
da:f7:a0:52:b1:e2:e2:ef:0b:69:30:9c:71:1e:5b:
65:fb:ab:44:88:71:df:cf:ef:1e:24:71:6e:27:65:
dd:89:57:48:7f:be:b6:c3:ff:a5:13:3f:6f:1c:59:
af:84:4f:ad:1a:da:29:34:de:8d:c1:c8:87:53:4b:
15:c9:5f:5d:e9:08:86:16:42:42:82:1a:93:9c:46:
87:43:c9:dd:c5:3f:cd:14:9d:96:f0:07:5d:c6:d1:
96:0c:77:df:50:aa:a5:ac:0a:a2:4c:a4:c5:44:a3:
89:36:40:5b:59:d5:03:11:5e:a7:3c:ec:f3:0c:0f:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:91:2F:C6:E5:AF:5C:9E:03:CE:3C:34:45:6A:69:9A:48:4F:2C:12
X509v3 Authority Key Identifier:
keyid:EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4c:c6:11:ba:4a:42:39:12:41:0f:ae:a9:ca:6d:ad:8e:80:
a7:09:1c:3d:27:8d:88:80:46:4f:42:c2:a0:ec:f4:c7:01:fd:
21:8f:80:5e:d0:9a:6f:c9:a4:c6:29:d8:cc:6d:db:60:51:29:
75:b8:22:64:ca:02:c6:9c:d4:68:dc:ec:d6:2b:6f:32:a7:fb:
56:0a:2f:0f:43:27:e4:dd:02:01:48:f6:68:08:66:03:cd:1f:
1f:82:4a:7c:32:fa:f8:af:7f:26:98:5c:7d:61:6f:1c:e8:a9:
59:c0:27:5b:d0:ff:31:80:b8:de:0d:6e:a2:a3:7d:88:d1:f2:
f5:53:30:ec:de:91:7e:bd:10:26:1f:2d:5b:63:52:fd:e0:c6:
7a:9f:7e:fa:f5:4c:43:30:29:91:7e:4b:90:56:d5:4b:88:40:
f0:62:7d:c5:ad:8f:7b:ea:a0:f8:72:4a:84:b1:a3:e4:2e:32:
16:f0:0d:c9:15:86:7d:a4:01:05:39:20:e0:5a:42:1e:ef:ad:
b8:ba:ba:61:61:7f:23:42:43:37:81:e9:bf:01:3b:61:7a:fd:
09:ce:e7:d3:f2:66:84:90:86:59:d8:7d:f4:32:2d:ed:e8:00:
4c:54:74:3c:08:0e:b6:a1:14:c7:82:6c:d2:41:a4:49:6d:2b:
05:46:33:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:46:33 2026 by rpki-client