Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
File: 7w7IG5xlO440BQj_hI2wZuNncrA.mft (raw, json)
Hash identifier: ukkV29xPBQfT6dSFZK3SLbepwsrv72XC6IAnluKVIOU=
Subject key identifier: DC:D0:BA:5F:81:AB:12:DF:39:F8:C3:F8:7B:9C:73:04:B0:63:93:28
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 019F1B68DD329A602074B27796F707ACD1ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
Manifest number: 09BB
Signing time: Wed 01 Jul 2026 02:01:24 +0000
Manifest this update: Wed 01 Jul 2026 02:01:24 +0000
Manifest next update: Thu 02 Jul 2026 02:01:24 +0000
Files and hashes: 1: 1-iYojE0-bkqoV5dZTp5mESZkuMc.roa (hash: IBrMOBEILaJ3aIFlHGFpIPbUN6/UuC5r0K5zqJd+Mnk=)
2: 7w7IG5xlO440BQj_hI2wZuNncrA.crl (hash: AlP7chGWvvlEQiEcP/Y8WURQ56XBLSH8qPCGGIWL3lo=)
3: atHWqvE_ZaHJPo5qCwW1PGxUw7s.roa (hash: jkDG3raOa2YgMVxrQwlxDz2jPOeQPczc27crizlM5xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:68:dd:32:9a:60:20:74:b2:77:96:f7:07:ac:d1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Jul 1 02:01:24 2026 GMT
Not After : Jul 2 02:01:24 2026 GMT
Subject: CN=dcd0ba5f81ab12df39f8c3f87b9c7304b0639328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:af:3a:e0:06:99:2f:8b:68:45:34:42:06:
72:ae:9a:c4:fc:a0:5d:22:44:6c:f6:22:2f:0d:81:
fa:63:d1:1a:5c:dc:b0:13:ff:76:c8:3b:8c:0e:03:
62:60:e3:0c:5c:fc:18:43:f7:34:17:d7:f0:28:16:
6f:e6:3e:3d:3a:d5:37:6c:7d:e4:a1:28:79:0e:34:
97:51:40:b6:8d:eb:b0:b6:c1:89:a6:f7:78:42:36:
b5:15:f0:5f:0d:2c:d9:15:5b:84:9b:04:2d:3f:27:
b1:48:ea:b6:59:a7:1a:1f:6d:0f:23:65:6a:c9:2d:
04:9d:7c:53:49:bc:2a:fe:5e:cc:f9:9f:c2:30:65:
5a:b6:76:5c:d4:df:6b:63:c0:21:04:ad:d8:aa:f7:
eb:c8:2b:74:bc:06:0b:35:d4:af:ed:47:6d:04:d9:
44:0f:ee:2d:31:8a:d4:23:3e:a0:a4:a3:f9:0c:78:
3d:ac:9e:38:b6:79:e2:9a:c6:a4:58:87:75:a2:98:
07:56:41:25:96:ce:91:95:0a:32:fc:4a:11:28:9a:
f7:0f:99:be:e3:b8:6d:90:ff:ef:3d:c2:59:c5:58:
6c:7a:7b:9c:94:e7:d6:c0:a7:56:c0:19:35:da:b4:
0a:3e:fa:47:52:2a:bf:9e:5f:f6:3a:c7:97:88:60:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D0:BA:5F:81:AB:12:DF:39:F8:C3:F8:7B:9C:73:04:B0:63:93:28
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bc:ad:8d:0b:41:6e:e2:0c:52:6c:1c:94:d7:65:2b:d1:6c:
1f:b7:af:ff:f3:72:5e:e6:bd:6b:67:bd:b4:b3:5d:55:1b:db:
1e:c4:ef:8d:90:85:9d:b1:b9:65:53:3b:5f:bb:29:cc:d5:9b:
15:49:25:42:12:ed:eb:ee:3c:e8:32:cd:f4:63:5f:2d:eb:d9:
0e:0e:ac:66:c0:4c:e5:d2:4d:52:c4:f4:01:26:fa:ad:0b:cd:
1f:d4:fd:20:10:9f:1f:85:cf:8f:0c:ee:8f:30:31:83:a9:93:
35:19:08:77:58:8b:c9:02:e4:58:d0:40:ed:56:d6:27:03:77:
d5:01:2e:c5:0e:e9:bd:4c:0e:7a:53:ea:f4:f7:cf:49:82:a3:
1f:5e:6b:6c:6e:f4:ed:17:30:e6:21:13:81:3e:ba:e9:fe:7e:
94:71:44:bf:70:8f:c5:12:58:68:cc:78:7f:60:b0:a2:34:fe:
67:ee:b1:5a:28:f0:8c:21:be:b9:f6:fc:58:af:96:56:b0:e2:
9a:e9:5d:eb:50:25:b9:24:d9:5f:22:40:7d:17:58:ea:95:e7:
fb:16:b8:37:d7:cf:13:0b:3f:da:9d:40:3d:56:32:5e:cf:16:
93:d1:cb:e3:ee:7e:7f:52:52:84:c2:14:fb:a3:79:35:27:de:
1d:1e:23:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 06:47:08 2026 by rpki-client