Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: h2qBBYPd4vVjrfQiZ4zGSI4KnUsAuHS5QIyYdywFMAE=
Subject key identifier: EE:A4:25:3D:CF:8C:9A:73:2D:C0:CD:20:3B:C9:0F:EC:F5:8C:DE:9E
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 019FA2CE4D1539913445EFFE1CC6D47B30B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 1750
Signing time: Mon 27 Jul 2026 09:00:56 +0000
Manifest this update: Mon 27 Jul 2026 09:00:56 +0000
Manifest next update: Tue 28 Jul 2026 09:00:56 +0000
Files and hashes: 1: 3wC4iAYIU6RjN3EGUKVhlIp3rko.roa (hash: r6BtCtLIRGTbjhqdmmeh1e+4MWSh7VLtqxWzoKISutU=)
2: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: BbMs/IEp5TYoApPS598WLmnEGVYGbt5JkZZeltkcBbI=)
3: H6GA7joAUfNPurokrgS1LJjNtfY.roa (hash: FKRThdMjAtwcwfUfR10ZtwzWVg2CFJr5Omg8dgAq7bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:4d:15:39:91:34:45:ef:fe:1c:c6:d4:7b:30:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Jul 27 09:00:56 2026 GMT
Not After : Jul 28 09:00:56 2026 GMT
Subject: CN=eea4253dcf8c9a732dc0cd203bc90fecf58cde9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:61:81:c0:b8:b7:97:5a:3f:91:03:55:27:
57:3a:55:2e:91:d1:f4:ab:5f:a8:c8:54:53:ca:2b:
0d:31:fc:a1:40:c4:2e:9c:e1:76:4d:f0:cd:d0:df:
80:08:f5:4a:ab:38:49:02:37:0d:09:35:86:92:bb:
2a:53:de:e5:36:37:ec:7b:28:89:c7:45:5f:24:41:
04:87:5d:28:58:49:c7:83:de:ac:65:81:d7:73:ad:
be:2a:e0:6a:84:b9:41:80:d2:4b:ca:41:9e:33:88:
90:64:ee:2a:a3:22:4d:57:2c:18:33:5f:65:6c:0e:
2e:4b:62:82:eb:bd:92:d0:8b:f1:86:e0:44:b3:97:
1a:3f:e8:4d:f3:be:e8:fe:09:69:62:f5:cd:4a:3e:
26:22:34:e2:7a:22:8b:bb:c8:4f:83:be:fd:3d:2b:
d0:02:a1:92:85:fd:18:fc:3b:71:ba:9f:60:a4:e1:
39:1c:62:2e:eb:e6:2b:04:c3:e3:f5:37:f2:d7:8a:
ce:3e:26:9f:50:43:63:85:ad:5d:02:c5:5a:85:ff:
f6:3b:4e:ab:d0:85:a8:e0:a9:c3:99:d4:04:c6:cb:
23:4b:cf:4f:8e:7c:a8:93:ff:a1:5a:29:7d:81:d8:
e1:fb:3f:47:17:ef:88:6a:a3:cc:f6:aa:71:66:99:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A4:25:3D:CF:8C:9A:73:2D:C0:CD:20:3B:C9:0F:EC:F5:8C:DE:9E
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:42:e1:db:8c:7a:2d:f9:46:68:3e:4e:03:b7:35:75:bd:3d:
63:08:87:05:13:77:5d:49:51:48:20:26:c8:80:c4:1f:f3:0f:
32:25:16:08:88:a0:91:28:06:d2:e5:d5:81:ba:35:b2:79:c6:
81:19:38:a4:ef:3b:2a:b8:38:b1:93:d9:67:48:2d:d1:90:72:
b5:30:e1:7d:37:aa:c7:44:06:97:df:62:eb:44:2d:b9:d1:de:
e6:46:6f:ea:8a:ff:ee:80:5a:78:77:a5:a8:b6:13:90:ca:9b:
1a:73:8b:d5:3c:85:29:c8:cb:08:9f:e6:37:f3:92:6a:8a:fe:
08:4f:3b:06:74:51:84:c3:83:15:92:65:de:75:d5:5a:1d:e2:
bf:19:ff:e1:8c:7e:2b:3f:10:52:14:ee:4f:83:e7:18:34:ab:
9a:68:5a:91:97:f7:43:14:67:8e:74:9a:fc:b7:b6:30:cd:fb:
27:70:61:d8:fc:a8:38:c7:00:7e:3a:07:45:ba:a1:7d:16:9f:
8b:e6:3c:14:d3:51:3b:ad:28:79:a3:98:32:3b:c6:36:39:7f:
8a:2b:d7:bf:4e:14:c7:d8:46:e8:d4:f0:ff:71:75:44:e1:06:
34:52:ec:63:c4:0a:38:0e:fb:8b:ea:7d:31:da:29:42:29:b4:
e9:12:fa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:00:53 2026 by rpki-client