Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
File: 7XZO39sbgh1dJayLeggKapBvprA.mft (raw, json)
Hash identifier: /62G8SX8/3Ogcqi/dWeW2TKqiiJZdXixVilFcxAsRc8=
Subject key identifier: CB:9A:D7:76:B1:58:04:13:64:1F:C8:80:30:D0:16:C6:26:3E:B8:E8
Authority key identifier: ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
Certificate issuer: /CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Certificate serial: 019F190CDC8AA5866F98128C84F3460E6630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
Manifest number: 05D8
Signing time: Tue 30 Jun 2026 15:01:40 +0000
Manifest this update: Tue 30 Jun 2026 15:01:40 +0000
Manifest next update: Wed 01 Jul 2026 15:01:40 +0000
Files and hashes: 1: 5KdGE2jdbERGSAaTxotqmYnDHPE.roa (hash: kwZAjYwYGkcbs7JNQRRWwRi2Ovfq/Y4hHTxA0ovQfso=)
2: 7XZO39sbgh1dJayLeggKapBvprA.crl (hash: 248KOqK8U5vy9TzoQu4UY0KsLcdmhL2uJuv0VfBgD+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:dc:8a:a5:86:6f:98:12:8c:84:f3:46:0e:66:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Validity
Not Before: Jun 30 15:01:40 2026 GMT
Not After : Jul 1 15:01:40 2026 GMT
Subject: CN=cb9ad776b1580413641fc88030d016c6263eb8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:bc:64:56:11:1a:c6:e2:75:5e:2a:df:4c:
3e:75:49:89:3d:92:a3:cb:c3:84:42:8c:33:ff:dd:
91:96:46:42:bd:8b:2c:56:c2:af:55:0a:7b:be:0c:
40:01:24:e7:9d:bc:5a:52:86:0f:1d:19:55:01:1a:
40:85:e1:97:e6:88:6c:35:98:43:a6:83:b3:51:5d:
31:86:85:bc:1d:52:36:b9:f4:7c:7c:b6:54:c3:ea:
c4:36:c6:fc:d1:8f:a1:c7:c9:2f:a0:4d:0e:ae:c0:
50:05:a2:4b:53:0b:90:69:4a:f2:30:67:a5:e9:16:
91:a3:6d:57:91:f7:95:14:6a:3c:e7:67:bf:df:76:
91:34:8f:9a:5b:cb:02:a0:84:26:2a:5d:45:cb:82:
f2:43:3d:3a:3a:8e:6a:d0:cd:23:0c:40:d3:4e:86:
b9:e8:c4:a1:3a:cc:fe:d5:0d:45:2c:10:d9:43:78:
f2:6f:fc:08:b5:18:46:61:94:e7:d3:26:04:2b:ad:
42:62:57:66:ac:e4:67:10:5b:90:29:ba:b7:72:b3:
58:06:e6:71:dd:97:44:e8:a6:1a:03:18:ec:e2:b5:
83:09:e3:0f:1c:a1:79:85:f9:c8:66:62:8b:23:c5:
f3:0e:26:43:e6:40:74:42:7a:39:ad:1e:09:36:43:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9A:D7:76:B1:58:04:13:64:1F:C8:80:30:D0:16:C6:26:3E:B8:E8
X509v3 Authority Key Identifier:
keyid:ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4d:bb:f5:48:43:9c:2a:d6:7f:b8:b8:04:a6:6e:01:75:9c:
f1:3e:2b:c3:32:b2:39:2f:23:58:f8:75:9c:56:ee:3c:e9:4c:
78:ce:71:34:3d:33:ac:1a:b1:78:27:40:09:a7:9b:99:9e:38:
b3:7d:10:ac:26:f8:0f:f5:6a:4b:ad:62:a9:c4:5f:35:6d:91:
a3:ea:1e:af:df:81:b5:b8:bb:87:80:ed:30:d4:53:9f:22:95:
43:fe:d1:0a:a6:b1:22:15:cf:de:3c:5d:90:d8:14:41:c4:55:
77:44:ab:5b:5e:37:f5:f1:98:ec:b7:93:f5:5b:39:1c:53:4f:
95:ad:1f:05:3d:99:ff:a4:bb:7e:13:12:3d:13:91:b6:9e:5f:
7c:a4:33:c0:6f:0b:72:2d:87:fb:fb:2d:48:d4:46:85:4f:33:
16:cf:72:c4:28:b7:53:b5:e2:b1:d2:4a:e8:26:67:82:51:ea:
15:00:01:04:6a:e3:8f:01:a2:75:e2:8f:de:35:6c:7f:d0:0f:
b0:fb:d8:70:3e:48:2d:d1:a8:76:73:d5:d3:1b:11:89:bd:c7:
71:67:e2:21:fb:27:8e:b0:06:81:68:7b:4a:c4:65:74:94:39:
63:c5:37:b5:47:26:30:95:ce:18:c2:e1:92:0a:a9:94:c0:75:
0c:e9:08:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:21 2026 by rpki-client