Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: JDU4egJ/Dxuh9e3lmxZLXHROZqcUSpWBjA0F7VEtm8U=
Subject key identifier: 38:CB:71:81:D1:61:07:88:C9:FC:5A:17:59:7D:AA:E0:C8:2C:E4:E0
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 019F190CE7B0CED8B62FFA60A5F97CFC3E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 10F8
Signing time: Tue 30 Jun 2026 15:01:43 +0000
Manifest this update: Tue 30 Jun 2026 15:01:43 +0000
Manifest next update: Wed 01 Jul 2026 15:01:43 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: lc0q7YifrNis1v6MsyiHB6MYZRrNQyAvGLRnsE018rU=)
2: seylKk68qXKxhoBzXl7E0-tTkU0.roa (hash: 14ms6tysm87Rxm8W+2zvydPUm5MTtyrDqlszeDC47Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:e7:b0:ce:d8:b6:2f:fa:60:a5:f9:7c:fc:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Jun 30 15:01:43 2026 GMT
Not After : Jul 1 15:01:43 2026 GMT
Subject: CN=38cb7181d1610788c9fc5a17597daae0c82ce4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:36:43:c0:a1:1d:55:b5:6e:cf:d1:0f:86:
41:2f:12:dc:bf:3c:7c:d2:6c:da:3b:63:23:7c:b3:
ef:e8:67:35:d7:7d:2c:82:35:e8:f4:b2:11:da:56:
f1:77:df:83:4f:90:a6:30:d8:63:92:a5:1a:ed:b0:
56:18:f8:9d:20:b7:f2:e1:c1:87:10:b1:73:41:2f:
9b:30:cf:4f:0f:1e:a6:15:72:a4:df:4e:cf:27:e7:
cc:c7:4a:18:49:e0:60:55:3c:da:61:0c:81:b0:72:
8e:5c:a8:0a:c2:0c:13:ea:3d:6d:e3:51:85:42:3a:
47:bb:1a:f3:9c:15:58:31:51:eb:72:8f:09:69:54:
40:b2:5b:3d:63:bd:58:1d:3c:4e:7f:7e:83:82:d9:
ff:ed:fd:0c:59:4e:43:7b:64:0c:5e:e5:c9:83:76:
af:e8:66:1f:ff:4d:28:90:57:96:26:da:9f:a1:31:
cc:04:24:96:17:d1:d0:3c:95:44:ea:21:d4:30:e0:
7b:d4:f7:b2:cf:3b:55:e8:7f:90:02:c8:dc:38:4b:
10:27:5c:f8:22:c3:b4:26:52:ad:2d:86:9d:4b:23:
73:01:a3:37:b8:70:43:87:67:91:91:8f:e2:f3:2c:
86:08:46:0f:4e:22:05:a6:20:db:16:2a:85:25:3c:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CB:71:81:D1:61:07:88:C9:FC:5A:17:59:7D:AA:E0:C8:2C:E4:E0
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:30:3c:3d:1d:79:5c:1c:60:20:33:69:d2:bd:7e:9e:be:d6:
83:d6:e8:2b:0f:0f:e3:67:55:32:d1:23:b3:97:37:1f:51:31:
ce:ef:70:2d:17:34:93:38:fe:85:b9:4e:fe:e3:ba:a8:26:14:
13:05:a7:15:cb:e9:81:3b:2f:de:0c:52:58:c3:f0:09:3b:c8:
7e:3b:90:80:28:01:5b:af:b1:3f:ce:41:b8:aa:22:07:97:51:
91:d7:d6:a8:dc:65:79:55:e4:a8:31:15:29:ad:bd:f5:04:86:
aa:2f:77:f2:b2:d9:0f:32:1e:72:33:07:a0:52:c0:41:de:62:
0e:2a:bf:3e:59:25:bf:f6:69:73:d8:d9:37:a9:59:fe:67:48:
65:0f:63:e0:0e:2d:13:53:3e:e9:d1:77:59:4c:0b:77:ad:4e:
65:06:ef:a7:11:66:92:a0:39:5a:03:dc:ad:e3:e4:5d:42:26:
17:c3:eb:91:1c:81:db:91:a7:9a:30:77:63:26:6d:82:1c:31:
03:27:de:12:29:39:15:02:37:4a:31:c7:57:df:02:43:e0:fd:
d5:87:b7:5e:ad:c0:4f:29:d4:63:e5:ec:a6:ec:48:d5:b8:e6:
17:6c:00:d4:8f:51:21:e9:81:21:cc:f5:92:3d:e3:5b:63:d8:
7b:f8:50:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:46 2026 by rpki-client