Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier: s9FF9n5stsDK0AMQGV1jHhree/2TS71aOC/+Dcpl73U=
Subject key identifier: 66:95:C3:7C:16:03:FA:1B:43:04:6F:7A:20:FC:0D:33:1A:A0:FB:79
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 019F190C67241DFA9C87D3C5787812E1CBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 15:01:10 +0000
Manifest this update: Tue 30 Jun 2026 15:01:10 +0000
Manifest next update: Wed 01 Jul 2026 15:01:10 +0000
Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: 5aySlsGmxCHJdMUnrF7wh9V+31ouYktYLWuLqWk7btY=)
2: RwU9zWthyfSOUWuvsWlsVhpMbmQ.roa (hash: 74TavDCjufR6GUNTwdp6AJnNFnxix31gx+8KWS5C2g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:67:24:1d:fa:9c:87:d3:c5:78:78:12:e1:cb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: Jun 30 15:01:10 2026 GMT
Not After : Jul 1 15:01:10 2026 GMT
Subject: CN=6695c37c1603fa1b43046f7a20fc0d331aa0fb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:53:51:d4:4a:a0:5f:ff:63:25:04:79:23:
8e:49:58:38:4b:b6:90:b3:cc:d6:d6:1e:35:23:48:
39:42:42:7f:50:c5:4e:9b:ac:a2:ad:cf:1a:49:3a:
d0:f1:d6:d9:e6:bd:23:6a:02:06:2d:9a:37:f0:b2:
95:41:80:2f:07:10:05:71:ce:fe:50:e1:ea:58:42:
12:ed:21:2b:5f:5c:ae:13:09:51:0d:68:ed:89:cb:
13:02:e6:8b:34:18:1a:47:ab:6f:06:80:7b:c5:4a:
81:e3:cd:82:a7:d7:55:99:12:66:f9:17:bd:11:43:
c9:11:f4:0f:b1:3f:76:fb:35:f7:4f:9a:52:33:eb:
c5:1c:4f:d1:8c:d0:54:01:73:b9:ce:a1:2b:17:db:
b2:43:44:a6:e3:54:e3:e6:f7:f3:22:a2:fe:32:b7:
d9:dc:01:9e:2d:13:d0:cf:b7:c6:8f:4a:6f:ff:d6:
8a:cb:c7:c8:83:b9:58:ea:fc:4a:40:a0:c4:6b:36:
25:06:aa:8a:84:9f:6c:80:bf:a4:26:e7:c9:35:f3:
e0:33:46:82:94:1d:30:54:57:49:b7:2a:0b:d5:11:
3b:1f:f9:c6:e3:a1:48:2a:99:65:e3:4d:48:0c:45:
ce:3b:65:24:42:58:93:ec:38:a1:c4:40:15:02:34:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:95:C3:7C:16:03:FA:1B:43:04:6F:7A:20:FC:0D:33:1A:A0:FB:79
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:47:eb:0a:e2:bb:38:d1:b0:64:05:db:76:7f:80:2f:c9:a0:
d3:50:bd:66:50:6a:9a:71:d6:6f:87:1e:ba:4c:2b:93:34:52:
9e:fb:1d:de:3b:a8:8f:0b:6c:48:98:47:fc:1e:38:a9:e3:b7:
32:ab:38:93:a1:74:7d:5c:2f:eb:8c:72:6c:7f:3e:3f:d4:54:
92:5a:9e:71:9a:40:2b:b5:2f:a9:34:96:91:3e:e1:13:44:23:
5e:51:c1:f7:5a:3d:c7:71:a6:6e:20:f5:18:0f:a1:23:6a:ac:
7b:a7:3c:d1:fb:fb:3e:d5:cc:ec:28:e3:7b:bb:66:07:b5:b1:
f4:b4:b3:44:05:3f:14:28:f1:eb:2c:af:a5:f3:64:0e:69:b6:
60:ff:97:a7:a4:da:cb:47:99:9e:6e:92:01:ab:ae:50:b0:9f:
0b:dc:95:7e:be:22:7f:8d:dd:b4:89:1c:16:e1:48:50:40:cd:
db:c2:b4:33:2c:44:57:51:40:b0:e2:c6:b7:e6:73:70:ca:e6:
8a:4f:7e:40:87:0f:e1:52:1c:2d:ea:b3:00:1f:1a:42:59:33:
2e:16:6a:5a:04:9f:db:2a:6d:d0:7f:6a:bf:28:cb:9a:7b:ce:
1e:aa:dc:57:eb:78:de:c3:1f:a7:d6:34:ad:de:ba:0f:13:d0:
1d:c0:1c:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDGckHfqch9PFeHgS4cukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMzFhMDU0ZmM5ZmI0YjE0N2U4YTk4YmRhN2U3MWM4MWFm
MGJjZmQwHhcNMjYwNjMwMTUwMTEwWhcNMjYwNzAxMTUwMTEwWjAzMTEwLwYDVQQD
Eyg2Njk1YzM3YzE2MDNmYTFiNDMwNDZmN2EyMGZjMGQzMzFhYTBmYjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwRTUdRKoF//YyUEeSOOSVg4S7aQ
s8zW1h41I0g5QkJ/UMVOm6yirc8aSTrQ8dbZ5r0jagIGLZo38LKVQYAvBxAFcc7+
UOHqWEIS7SErX1yuEwlRDWjticsTAuaLNBgaR6tvBoB7xUqB482Cp9dVmRJm+Re9
EUPJEfQPsT92+zX3T5pSM+vFHE/RjNBUAXO5zqErF9uyQ0Sm41Tj5vfzIqL+MrfZ
3AGeLRPQz7fGj0pv/9aKy8fIg7lY6vxKQKDEazYlBqqKhJ9sgL+kJufJNfPgM0aC
lB0wVFdJtyoL1RE7H/nG46FIKpll401IDEXOO2UkQliT7DihxEAVAjQd4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaVw3wWA/obQwRveiD8DTMaoPt5MB8GA1UdIwQY
MBaAFO8xoFT8n7SxR+ipi9p+ccga8Lz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3pHZ1ZQeWZ0TEZINkttTDJuNXh5QnJ3dlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80YTkyMjQtMzdkNC00YjIzLWE0Mjct
MjcxMzYyZTNmMjVhLzEvN3pHZ1ZQeWZ0TEZINkttTDJuNXh5QnJ3dlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80YTkyMjQtMzdkNC00YjIzLWE0MjctMjcxMzYyZTNmMjVh
LzEvN3pHZ1ZQeWZ0TEZINkttTDJuNXh5QnJ3dlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0frCuK7
ONGwZAXbdn+AL8mg01C9ZlBqmnHWb4ceukwrkzRSnvsd3juojwtsSJhH/B44qeO3
Mqs4k6F0fVwv64xybH8+P9RUklqecZpAK7UvqTSWkT7hE0QjXlHB91o9x3GmbiD1
GA+hI2qse6c80fv7PtXM7Cjje7tmB7Wx9LSzRAU/FCjx6yyvpfNkDmm2YP+Xp6Ta
y0eZnm6SAauuULCfC9yVfr4if43dtIkcFuFIUEDN28K0MyxEV1FAsOLGt+ZzcMrm
ik9+QIcP4VIcLeqzAB8aQlkzLhZqWgSf2ypt0H9qvyjLmnvOHqrcV+t43sMfp9Y0
rd66DxPQHcAcIw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:08 2026 by rpki-client