Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
File: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft (raw, json)
Hash identifier: EkBK2/jxRsvcLI7R4p87lFD1BGJlTUAharkYoN0B6Ls=
Subject key identifier: E0:BC:06:F6:F6:3A:08:36:C4:2A:14:A7:3C:66:73:64:0D:AA:CC:51
Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Certificate issuer: /CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Certificate serial: 019F17FA07F1D3349801C1A7B1294C3BA2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
Manifest number: 172B
Signing time: Tue 30 Jun 2026 10:01:29 +0000
Manifest this update: Tue 30 Jun 2026 10:01:29 +0000
Manifest next update: Wed 01 Jul 2026 10:01:29 +0000
Files and hashes: 1: 2tKSrvE8w4OPUMtHHmn4NBgdIN0.roa (hash: xtQTDappKS+L7HJWwmh8B32VXucrBAKNvYHP3fwsAXE=)
2: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl (hash: XMfg8EboIxKroLEBCMpRgsoeOGU49MyZLu0bO+sAHTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:fa:07:f1:d3:34:98:01:c1:a7:b1:29:4c:3b:a2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Validity
Not Before: Jun 30 10:01:29 2026 GMT
Not After : Jul 1 10:01:29 2026 GMT
Subject: CN=e0bc06f6f63a0836c42a14a73c6673640daacc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:67:60:28:93:91:ba:e9:d3:4a:0a:e8:c5:
30:64:f2:69:fc:b1:62:43:ad:39:4c:29:a3:07:7f:
e7:cf:c9:92:c4:a4:af:76:2c:ea:47:dc:43:91:20:
39:6e:4c:5a:61:dc:16:ce:ee:72:92:eb:61:73:97:
b1:3d:56:4a:94:64:c0:58:8f:21:3a:98:c2:07:eb:
ad:c7:07:b6:bb:a0:25:33:c6:27:a3:19:91:af:67:
94:eb:5b:22:86:72:dd:eb:2e:b9:19:4f:f5:0d:e5:
87:6b:83:32:b3:a8:81:3d:1f:c9:03:02:f3:38:88:
49:3f:ff:60:e4:d7:b9:b9:61:55:01:36:09:ed:01:
8d:9b:5a:43:b3:98:cc:89:fa:c7:5d:b6:f4:53:53:
fb:ea:e2:e1:fc:d6:a0:91:75:b2:53:0e:2c:03:42:
af:16:a7:3a:c7:0f:4c:1a:e5:63:e9:cc:ef:f8:de:
73:55:6b:a8:b9:ce:c9:6a:87:27:a9:42:2c:07:1c:
1a:ea:b3:b6:fb:fd:34:f3:90:5e:4c:f2:69:21:84:
f4:76:50:92:d4:0a:ad:f3:5e:e3:03:aa:e9:f7:e8:
33:93:b4:4e:61:be:d6:95:be:4b:90:bf:45:6a:f8:
6c:58:78:68:b9:03:1d:0c:0d:ca:c0:64:80:fd:fc:
bd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BC:06:F6:F6:3A:08:36:C4:2A:14:A7:3C:66:73:64:0D:AA:CC:51
X509v3 Authority Key Identifier:
keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:98:42:ba:08:db:3d:24:57:e8:64:f4:ff:b3:35:be:55:aa:
7d:7c:83:b8:a4:66:73:ed:fd:da:54:34:de:c8:06:e0:8c:ee:
92:ec:d2:a9:a7:6f:fd:ad:ff:2e:83:1c:36:6d:cc:1f:d3:04:
3d:1d:f1:91:54:37:8d:4d:84:cc:97:c2:1c:d8:9a:e7:38:32:
5f:71:ad:6a:7d:a9:7d:a1:2d:0e:bd:58:04:c2:9c:4c:6b:8b:
11:9a:93:cb:89:38:5f:6f:29:d3:f2:1c:70:06:ce:99:96:90:
37:51:8d:c6:fb:58:3d:67:37:0b:58:8f:12:2e:67:d7:db:72:
cc:ea:c7:0c:aa:f9:0b:c5:f6:1c:40:2e:02:1c:a9:7c:45:89:
fc:54:1a:ed:1f:27:58:3b:4f:ba:cb:b2:54:8b:87:b2:57:e0:
d5:35:96:43:9d:e6:03:91:65:bb:f3:e5:67:49:6f:ad:0c:fa:
c1:b1:48:7a:c5:33:c8:52:6f:aa:61:08:1a:2e:e8:c7:43:c3:
45:4a:1c:5f:2f:ae:1c:70:ab:4c:04:b6:7a:8a:3c:d7:1b:16:
09:9f:d8:ef:dd:9d:11:7d:41:ce:b9:e4:43:4f:51:d9:9b:0f:
7d:5c:93:26:62:9f:c1:c1:c5:8f:d4:e9:bb:23:a9:0b:b7:5e:
70:c2:40:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:19 2026 by rpki-client