Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: Sicu68TBPmPJdfgfcDSshlHMn19Tp0wBdi7b4c6PQpw=
Subject key identifier: 30:82:BB:3B:42:8E:8C:97:E1:81:45:FB:26:1E:0A:53:E6:42:A1:9A
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 019FA3056C42F719D28F8B26B70AFF139B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 10:01:09 +0000
Manifest this update: Mon 27 Jul 2026 10:01:09 +0000
Manifest next update: Tue 28 Jul 2026 10:01:09 +0000
Files and hashes: 1: 6CjF8Jlu6tuK8zsCRGmRKkMW1aY.roa (hash: cbJEUas+h/1ENIgGWWNamGqYchFhfCj4L7NJTrlZrxc=)
2: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: 5nqqkuRQmfY3OOmNvS8ACE6g2Ov1Kgci3YXyeY+V5ew=)
3: sW8W0-8WOsG0evmu2fYzqrWdI9U.roa (hash: aDuewNAM6XmzF96K8nKeS1R/6Pbon3faWwSXg53klfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:6c:42:f7:19:d2:8f:8b:26:b7:0a:ff:13:9b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Jul 27 10:01:09 2026 GMT
Not After : Jul 28 10:01:09 2026 GMT
Subject: CN=3082bb3b428e8c97e18145fb261e0a53e642a19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:86:34:cb:d1:17:8d:02:74:1c:4d:f6:96:25:
0c:25:fc:4f:86:7e:70:34:4a:23:98:06:51:9d:f9:
8d:47:2d:04:80:c1:7d:ab:8b:0d:12:86:34:4b:c1:
89:32:14:5d:9d:a8:69:23:5f:fa:05:c9:11:70:83:
99:68:77:5f:f2:8b:a8:c3:e6:49:43:1a:e1:09:c1:
cd:1c:ba:fc:46:a7:cc:0d:67:37:8d:56:3e:84:78:
f3:59:40:60:a5:89:d2:de:d0:ba:83:2f:f3:1f:23:
f7:24:ba:27:12:61:a7:5c:8b:42:ab:bc:7a:70:35:
70:fd:a4:04:68:b0:93:c1:aa:a7:e3:e8:1a:6a:c5:
63:ca:71:a7:7b:55:f0:9d:5b:bb:2b:e2:4a:12:a7:
b7:d2:a1:6c:e4:fc:64:3e:3e:c0:a6:9f:a4:82:82:
84:c8:49:b6:6e:9b:24:19:80:09:d0:73:d9:fc:27:
7a:37:91:48:18:f3:45:90:fd:d7:af:07:1d:01:01:
b0:d8:7d:21:fe:4f:cf:8c:ce:71:f2:e0:0b:e3:06:
d7:25:c0:47:b7:18:e3:f0:d3:80:b0:23:c1:5f:bb:
0a:0e:23:ae:67:07:4c:8f:8a:44:3c:4a:87:ac:18:
90:f3:eb:78:e2:c1:08:18:e6:48:01:4b:99:1e:61:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:82:BB:3B:42:8E:8C:97:E1:81:45:FB:26:1E:0A:53:E6:42:A1:9A
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a5:27:6d:7f:0e:7b:52:06:56:b7:05:75:a6:c6:97:62:40:
18:44:8b:af:f7:c5:74:a8:8a:12:5a:29:fd:48:28:26:ce:1a:
21:6f:f5:29:cb:13:02:3e:8f:c6:c3:d2:ae:6d:c6:58:67:0d:
bc:86:c5:ae:6a:45:ea:e1:39:41:df:ec:c9:85:6b:2b:01:20:
c4:4f:8c:4f:28:ef:02:d4:10:fb:36:4e:66:ee:49:e8:29:3d:
12:5c:6c:e5:ac:cd:20:12:83:09:e7:19:b3:02:f5:3d:1f:31:
41:b6:a6:63:40:18:75:91:4a:15:38:b1:5d:69:1b:44:15:e5:
3a:ec:b4:01:12:c8:98:5e:69:5d:b5:81:3b:2d:6b:26:b2:4b:
3e:ef:5a:09:ee:65:0e:16:e3:11:0c:ec:41:e9:a5:67:02:e7:
9a:9a:14:d2:94:0c:22:a7:1e:2a:c9:cd:ce:ca:74:c5:15:ba:
14:56:d1:b3:55:fa:8c:6c:2c:89:12:11:f0:b9:37:0b:57:ae:
ad:b6:f1:2a:25:1b:64:07:c7:9c:84:a0:c2:21:7c:57:12:ac:
22:21:09:f3:e2:eb:e8:ee:88:69:55:77:5b:58:c2:c6:b5:dd:
fb:d8:5e:50:93:2e:5a:8e:c0:c8:1c:37:83:1a:9a:45:55:65:
ab:c7:8f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:04:16 2026 by rpki-client