Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
File: S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft (raw, json)
Hash identifier: Lyqh31F4M+3KJxtmbJozF+8Zslrn0pq8ueBlGcpJmRU=
Subject key identifier: C0:38:5B:07:EB:D1:18:A4:D9:A5:A4:EC:EF:59:06:D7:87:07:F5:BF
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial: 019F190CFB5C1B78D8CC3FE1977A0C5B84B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 15:01:48 +0000
Manifest this update: Tue 30 Jun 2026 15:01:48 +0000
Manifest next update: Wed 01 Jul 2026 15:01:48 +0000
Files and hashes: 1: 0Zc__kN3HwhsJoBnO7wdin2RQss.roa (hash: CXzPpL1BSz7J6w6QJARe0QxvknuDCjM8a8ZeWT+w+XI=)
2: 8NpquuKtmcdUrFKy47Sj9fT29Os.roa (hash: JUFOjZ1XBHrYKPUOA3cAyXpp/9fbGuZHL5PKFslhQ7k=)
3: S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl (hash: 4StoNhiiJ6QpUtF2363wVB6okS4QSMzYwhDpzGwIc7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:fb:5c:1b:78:d8:cc:3f:e1:97:7a:0c:5b:84:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Validity
Not Before: Jun 30 15:01:48 2026 GMT
Not After : Jul 1 15:01:48 2026 GMT
Subject: CN=c0385b07ebd118a4d9a5a4ecef5906d78707f5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cd:d2:2c:4a:fe:9f:a7:fb:fd:f3:1c:15:7c:
2d:3f:2e:31:d3:c2:a4:7d:13:a1:d7:43:65:10:a2:
3b:30:39:0b:0b:f4:ff:13:39:e2:ef:38:99:81:f7:
16:fc:af:7f:96:fa:28:c0:14:6c:ad:71:f3:83:62:
38:a5:a8:41:66:19:17:87:b1:24:4f:4f:23:8b:da:
55:05:99:0e:da:b8:bd:3f:53:dc:64:cc:d6:c0:23:
c7:c1:38:aa:f8:cb:cb:3f:07:63:d0:df:f0:25:2a:
12:63:09:17:af:e5:b7:cf:1d:ff:3a:27:b8:cb:ff:
90:92:c7:e0:53:54:26:f1:ed:ed:3d:41:52:e4:d2:
57:b6:a9:c8:a5:b1:43:00:d0:4b:75:cd:da:87:39:
e7:e6:e3:c8:ce:f2:3a:24:45:17:a9:92:f3:75:89:
8a:9f:66:7e:6e:ce:27:ff:7b:45:4d:c9:62:e9:4f:
ba:b1:35:bb:a4:94:69:40:c8:0d:d3:c5:dc:52:e8:
04:9c:72:03:7a:55:2a:9f:7a:00:7e:a9:d0:7f:44:
15:67:f8:47:12:c2:53:f1:ec:43:c3:74:c0:71:a4:
ad:d4:d6:f8:03:85:db:0b:90:9e:1a:03:2e:d4:88:
d9:98:91:1a:f2:65:09:8b:7a:de:20:97:d1:2e:f6:
62:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:38:5B:07:EB:D1:18:A4:D9:A5:A4:EC:EF:59:06:D7:87:07:F5:BF
X509v3 Authority Key Identifier:
keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:75:75:0d:d5:b8:fd:82:f0:13:56:c0:b5:d1:18:7b:85:af:
1b:c5:7b:77:b0:9f:55:9d:f0:00:64:b6:d9:53:2c:3d:c2:1c:
18:13:7d:9c:6e:3a:4a:fb:32:7d:43:40:29:e5:44:a9:6c:22:
3b:de:02:b7:b2:ea:73:af:0a:26:9a:50:1c:60:43:e9:e1:5a:
1d:07:08:4b:ed:ab:f8:0c:3f:ff:97:12:ff:34:72:dd:3e:86:
eb:d0:fb:95:53:33:9f:e5:fa:57:d6:82:18:e7:cb:c9:53:ae:
95:23:3a:3e:fa:13:77:96:68:0c:21:3e:73:f2:70:be:79:ab:
24:8a:af:78:20:ed:64:0c:ab:c3:fd:57:95:11:e8:ac:09:11:
72:54:09:a2:53:c1:a7:59:18:69:dc:f7:41:bb:01:94:d5:b7:
31:d2:7f:65:b1:3d:15:a6:0f:f9:8b:b5:b7:22:37:ee:91:bd:
ff:c0:ee:b7:39:20:99:c0:1c:24:7c:f6:4e:8b:b3:04:29:2a:
16:d0:b2:1a:04:54:98:7d:c6:92:d9:7e:15:00:fc:6d:00:48:
5d:c5:af:2a:22:33:3e:8f:84:ac:86:f5:b1:5f:d8:c6:20:84:
ec:f8:c8:44:af:fe:29:c9:6e:aa:d4:f8:35:9c:c1:90:73:af:
5f:07:6c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:20:33 2026 by rpki-client