Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: V4CwgRpMKq7Nh4EzIMZ2o9pCXCHkW2JrDIJX5GfW9b4=
Subject key identifier: 9E:D2:2B:B6:D8:DB:39:7B:04:AA:6E:B9:46:72:97:EF:1C:1D:F0:53
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 019F1830921B9DD36DE7E41DF8C244042420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 17C9
Signing time: Tue 30 Jun 2026 11:01:04 +0000
Manifest this update: Tue 30 Jun 2026 11:01:04 +0000
Manifest next update: Wed 01 Jul 2026 11:01:04 +0000
Files and hashes: 1: 6XsZO_TltMpWaIXpEJ9j4Ijt3Wo.roa (hash: AmndDW7NkmhQPmIE+LZ+wdkjraSPxi3//yw9gxzh3WQ=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: 86Ya50S/NALZOHt6kxvp6sG+GfTLRhdYFNk0KBwdLms=)
3: qS1FhvHNjTct9kkj2vIxWEw1yv8.roa (hash: WpowF4fjiVOFY59c2MXRRHLypjY6PRS8W4ndaISZRLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:92:1b:9d:d3:6d:e7:e4:1d:f8:c2:44:04:24:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Jun 30 11:01:04 2026 GMT
Not After : Jul 1 11:01:04 2026 GMT
Subject: CN=9ed22bb6d8db397b04aa6eb9467297ef1c1df053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:10:8d:28:7b:4c:25:10:21:68:7b:38:ef:
cb:91:05:e3:76:24:64:10:c3:62:bc:27:10:7e:5f:
c3:41:fd:eb:2a:c9:89:5e:01:0a:3c:b2:7f:1d:d5:
8c:ce:82:6a:0c:71:48:80:e4:a0:d4:0a:b8:ed:7e:
b4:66:30:78:c9:fa:4a:10:90:30:2d:c9:5f:fd:78:
7f:a3:6a:ac:34:fb:a0:14:39:91:aa:0f:42:6d:46:
e5:6f:c7:48:4d:ca:8d:c2:42:e0:4b:f3:84:6e:04:
9b:7a:b7:67:cf:07:6e:b7:a7:ec:87:0e:a4:8a:70:
c1:98:e3:80:f0:a4:c9:19:4e:13:0e:8d:d9:b0:db:
11:3d:48:3b:15:62:e1:15:c8:ac:2e:82:47:01:64:
ee:8f:f4:44:f0:f4:71:4e:78:54:3a:8b:c1:5c:d6:
10:8a:57:b1:4c:c4:f3:9a:08:8c:36:1f:4c:41:ca:
cf:5b:d7:5f:37:ac:9f:de:5c:83:c2:f8:6d:3d:12:
b1:81:b8:ec:b6:1c:ec:5c:a8:bc:c7:5b:d8:84:fb:
e3:a9:31:4d:e1:9f:56:38:68:4e:2d:9e:e1:e1:4c:
e8:84:ea:95:28:e9:a4:90:7e:9b:22:d5:29:b2:d8:
4d:8b:ac:59:db:45:b1:c9:db:6f:c0:a5:4e:d1:e3:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D2:2B:B6:D8:DB:39:7B:04:AA:6E:B9:46:72:97:EF:1C:1D:F0:53
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3a:26:77:74:f9:b1:f9:25:c7:a0:99:ec:a3:c3:73:ce:e8:
fd:44:a3:6f:27:0f:cc:6a:e0:77:a0:00:a9:2f:64:1f:10:03:
f7:4f:7c:22:e7:6f:b3:b0:8f:f0:f3:4b:29:6a:56:8b:3d:1b:
c1:7f:85:bb:42:49:54:c3:2c:3d:4d:63:4c:1f:1c:e0:0d:10:
91:1b:22:21:f2:c3:91:70:8b:02:b2:67:30:66:11:70:08:de:
22:c2:66:42:3d:1d:44:0c:a4:d5:66:4e:c0:ca:14:4c:d9:fb:
9f:0f:74:e8:9e:31:2b:cf:86:67:be:f4:ab:71:f2:bc:f7:5d:
7e:cf:5a:17:64:52:94:7a:7a:a2:15:f4:b7:65:96:eb:84:bf:
dc:2b:c0:6d:0d:67:b2:4c:2e:e3:c3:01:6f:2d:73:a0:70:8a:
8e:b7:aa:61:cb:b3:0d:75:44:f8:2d:16:5b:fb:02:28:4e:0d:
a0:4c:33:17:1f:e5:f6:70:c3:b5:c9:f1:44:ac:f9:5e:e7:78:
21:57:0d:c7:a6:2a:16:c3:33:a6:56:22:60:6a:62:2d:f8:06:
3f:e5:9f:5c:50:86:68:12:da:96:04:b3:7f:85:8b:8b:e0:a7:
63:dc:a4:1c:e2:f8:20:c0:ff:fa:e8:4c:df:62:e1:28:05:2e:
92:3a:a1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:57 2026 by rpki-client