Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier: GA+CuE9sUYIQb+T3g2ai2hh4nO63+Dp7k/A6ylW7Jg8=
Subject key identifier: E6:8A:BE:CB:2F:75:C4:E5:D5:98:47:AD:7D:5F:BD:95:D8:AF:99:51
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 019FF97F5A67A9C154F320F79FE5EBC1D4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number: 0571
Signing time: Thu 13 Aug 2026 05:01:40 +0000
Manifest this update: Thu 13 Aug 2026 05:01:40 +0000
Manifest next update: Fri 14 Aug 2026 05:01:40 +0000
Files and hashes: 1: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: 2giqRkHJOodoRdaH8hFuRtd5Hlw1mES6HlDlKWoEHPE=)
2: bHM7HWlokuLAKGZUYW39_tqn2Fk.roa (hash: k5ZFTQBnrO/pZ+ljvAJJsNDjRf0esZ6TDnbCraHVTUQ=)
3: nnVHZXt9DivgToJiSfHRWDPCX58.asa (hash: /8k8/1a46VaQnelGrFv4w1ybQa3EbefqWYHF9uEGkc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:7f:5a:67:a9:c1:54:f3:20:f7:9f:e5:eb:c1:d4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Aug 13 05:01:40 2026 GMT
Not After : Aug 14 05:01:40 2026 GMT
Subject: CN=e68abecb2f75c4e5d59847ad7d5fbd95d8af9951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:7e:e7:df:6e:d3:00:d6:0c:ea:b2:27:7a:
6b:74:e1:9f:54:79:0a:de:74:7b:1c:a9:d7:37:45:
69:63:2c:a8:b1:c5:c2:cf:b0:dd:7b:a0:5f:1d:ec:
40:c8:10:4f:9d:1d:87:36:36:8d:f1:c7:0f:d6:1a:
5c:cc:58:a4:69:ba:9b:d3:d2:48:08:ea:6e:12:a9:
31:d0:67:44:29:a3:34:99:30:de:34:66:18:80:e8:
47:80:cb:af:b6:33:33:37:7d:30:8f:bb:00:3a:ab:
42:5f:ba:5f:dc:7d:ce:3c:a4:f7:64:f3:25:e4:5d:
d6:31:47:bc:8d:46:ca:96:f4:14:b0:78:cf:ea:d3:
09:d4:c7:63:1b:1a:11:1c:87:18:14:ce:24:c9:91:
e9:96:8b:5c:12:91:e7:e6:2a:dc:50:59:bd:83:9c:
16:65:5b:08:73:aa:dc:02:87:37:8b:c2:c0:85:3a:
e1:b4:3c:be:ab:d2:83:2c:7d:1d:2b:36:a4:9b:77:
c6:7d:d4:bb:30:71:a7:d5:48:a3:06:53:42:28:38:
78:a0:0a:02:0b:03:c7:2e:0b:08:33:bd:22:d9:c5:
07:64:32:29:d2:64:4c:1b:40:1e:aa:50:ef:5d:92:
33:fd:8c:60:fa:31:dd:0d:df:2b:7f:c4:6c:1b:3e:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8A:BE:CB:2F:75:C4:E5:D5:98:47:AD:7D:5F:BD:95:D8:AF:99:51
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:25:67:24:eb:fe:a7:ed:39:99:8c:94:04:cc:88:49:25:99:
a5:6b:ca:93:99:12:13:db:7b:42:33:5a:af:06:5a:a5:ed:fc:
45:dc:6a:a3:61:07:2e:d4:00:13:b0:9f:28:02:75:51:d3:0f:
d5:86:e4:c7:5a:4c:4e:d1:84:56:67:38:ec:a0:c8:a8:cf:3b:
8e:3e:d9:d2:8d:ad:ba:17:4f:95:5a:26:a9:35:1e:ed:c4:88:
78:10:39:ea:e4:e8:a0:63:c3:03:fc:79:d7:02:6f:b3:6c:a3:
d9:1e:a6:bf:02:fd:9a:55:6f:b5:88:dd:ba:12:6c:ae:45:e1:
7a:82:73:b6:f8:bc:68:27:f6:b7:db:59:9a:b3:fe:69:dc:09:
e0:55:ed:5d:4a:5e:77:80:da:5c:49:eb:7e:42:2d:30:54:63:
58:d2:d2:6f:f2:80:16:41:79:0e:08:0b:64:8c:cf:99:66:93:
d2:c8:28:53:7a:e4:7f:d6:56:5b:22:d2:6e:52:17:ff:dd:ae:
1d:06:75:33:c2:6f:d3:2c:b4:dc:34:b9:d9:59:02:02:71:f5:
71:7a:8a:7b:f5:b5:60:ad:37:f8:40:9c:9a:28:15:05:aa:a2:
62:96:be:24:e3:95:6f:5d:ec:79:2d:0b:e6:ac:36:28:d6:a9:
cb:e4:7e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:03:14 2026 by rpki-client