Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
File: n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft (raw, json)
Hash identifier: Gkh0VlbRPW0+ybDENhO/6T89z0Ize7ZjJ10rMUs1bJw=
Subject key identifier: 73:E6:42:F2:AB:B2:95:BC:79:5B:44:F1:0E:53:B0:EC:51:B5:43:A9
Authority key identifier: 9F:B1:F5:0F:BF:83:94:88:29:2B:96:FD:93:21:6F:20:01:19:75:46
Certificate issuer: /CN=9fb1f50fbf839488292b96fd93216f2001197546
Certificate serial: 019F292532443AC7FF554D9FAB8E2FD02D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
Manifest number: 0A
Signing time: Fri 03 Jul 2026 18:02:11 +0000
Manifest this update: Fri 03 Jul 2026 18:02:11 +0000
Manifest next update: Sat 04 Jul 2026 18:02:11 +0000
Files and hashes: 1: Ts__go_5kraAxg_xlkVG1jwWF4s.roa (hash: SzNoYDdJ9H0cE2yBXjlxrXi58YXnSypRhyX9GFV3rA4=)
2: Ybqwvgb7jCczdCb2Qu8qDoLA0po.roa (hash: 93kNfuvYg28fBjqCkSjdY9sAKzd0yWZzLdceU613wsQ=)
3: n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl (hash: AgoBllEMJnDCB/o0P1NxUa6j73jsuEKGg54AkEzI0n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 18:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:25:32:44:3a:c7:ff:55:4d:9f:ab:8e:2f:d0:2d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb1f50fbf839488292b96fd93216f2001197546
Validity
Not Before: Jul 3 18:02:11 2026 GMT
Not After : Jul 4 18:02:11 2026 GMT
Subject: CN=73e642f2abb295bc795b44f10e53b0ec51b543a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:2c:43:f3:f7:b9:41:92:2f:03:cf:89:0f:
f1:52:2b:5e:f0:66:46:27:e1:ba:3a:8e:3e:61:6f:
b7:cc:38:46:d5:b3:26:55:20:11:9d:a3:ce:19:88:
39:12:2e:39:bc:27:f9:58:90:94:86:d2:fd:15:cc:
68:dd:52:fa:4f:9e:3e:59:53:7e:c3:d6:4e:5a:da:
21:fd:3e:e9:00:ef:a8:bb:68:c5:e0:ec:8b:fd:4a:
c2:9f:9e:92:c5:5e:d2:2c:70:9a:b3:c6:ec:f2:cc:
88:0c:95:a7:13:9b:b8:2f:3e:84:5e:0d:1e:e6:ab:
55:51:fa:f8:c7:02:61:01:1e:ca:40:2b:d9:b9:6b:
e1:ac:70:0a:fd:e8:b3:b8:bd:17:78:42:d7:bc:27:
fc:50:e7:d6:2c:b6:7d:70:fc:df:c3:5a:38:16:06:
66:bc:bd:ed:45:f3:54:4c:ee:44:0d:ce:be:72:3b:
b4:77:f6:ff:12:b5:37:eb:9f:f6:2e:2d:82:28:c8:
b0:94:55:e7:db:68:17:79:36:5a:58:6c:0d:b0:49:
87:8e:7f:e5:2b:ec:f5:ea:5e:64:25:ae:2d:4d:ce:
d0:7c:8a:68:c0:93:2d:df:87:04:cb:9b:33:d4:c8:
9f:6b:ee:63:9c:23:04:25:b7:72:8b:1b:14:8b:7d:
35:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E6:42:F2:AB:B2:95:BC:79:5B:44:F1:0E:53:B0:EC:51:B5:43:A9
X509v3 Authority Key Identifier:
keyid:9F:B1:F5:0F:BF:83:94:88:29:2B:96:FD:93:21:6F:20:01:19:75:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:90:e4:ad:0b:9d:22:cb:c7:40:ca:bf:1d:37:24:53:05:48:
fa:70:08:b2:4c:3e:1e:e9:4d:33:8b:20:46:30:27:96:38:1e:
3c:55:06:da:f0:7f:e0:8b:1c:8d:ab:05:ef:2d:77:cf:f9:36:
82:58:da:65:c9:1a:da:8e:42:ec:50:87:4b:af:5b:f0:02:95:
00:26:08:7a:7f:99:36:62:3d:62:fd:be:46:4c:f7:94:9b:5d:
05:24:8f:65:5c:30:2b:9f:24:de:91:39:c2:91:7f:03:43:05:
c6:ba:8e:26:31:b9:60:a6:be:9a:a0:1c:cc:49:c8:e8:48:a4:
dc:73:ce:22:ff:d3:99:c2:5c:03:a3:4d:fd:7c:70:e4:0a:1f:
bb:51:5b:f7:58:0e:4e:a0:a3:1f:78:57:3f:12:4b:ff:0d:e9:
96:79:74:8b:ed:f6:ab:2f:28:cc:76:2f:db:53:8a:8f:69:cf:
b8:c3:f2:24:4a:a7:60:68:97:81:54:ff:10:45:0f:65:08:da:
dc:39:d8:86:59:46:9a:e4:00:b1:8d:e8:df:01:8b:0e:54:57:
13:fa:db:0a:17:19:e7:06:88:74:dd:9c:69:21:fd:62:b7:c6:
b7:c0:78:0f:6e:f4:db:f5:89:f1:7f:48:4f:13:44:c7:77:c1:
01:ae:03:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:43:07 2026 by rpki-client