Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: Y/G0gkqE4rk1Y8FnLo/WASOAYg3qpgrtC+eHJHu16y4=
Subject key identifier: 08:33:A8:40:5C:B0:42:AF:BF:0F:BD:27:3D:02:99:0C:BC:66:50:09
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 019FA14DB9A358302745939F1E8F11BD7970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 02:00:53 +0000
Manifest this update: Mon 27 Jul 2026 02:00:53 +0000
Manifest next update: Tue 28 Jul 2026 02:00:53 +0000
Files and hashes: 1: 0HZFumgyvQaDDTRTrqWFDMHfuo8.roa (hash: 99s+y069IP+8cLI0Fct7Tuh7Nr9yOVSbyI/w/nS1ohM=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: j620yGaENTWvv0wzHWIdNJyrHlLXupsUN9mjWbXCLM4=)
3: JfyoN48fk_c9ic3qKJlpVrYlm4U.roa (hash: YO7Xai4MFWdK4ki2bUDwA4JpC3JpucBc+HE0rjiH0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:b9:a3:58:30:27:45:93:9f:1e:8f:11:bd:79:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Jul 27 02:00:53 2026 GMT
Not After : Jul 28 02:00:53 2026 GMT
Subject: CN=0833a8405cb042afbf0fbd273d02990cbc665009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:72:01:58:5f:ab:05:13:dc:8d:23:25:73:
80:8d:74:ec:d3:54:5c:1c:65:45:64:eb:2b:02:aa:
47:83:01:18:e3:7c:7e:2c:56:78:63:d0:99:1b:c7:
15:4f:b4:fa:cd:c4:14:6a:69:d5:04:a0:da:e3:75:
87:3b:80:28:78:a1:99:ff:e4:77:41:9d:2a:c2:3f:
41:86:dc:4a:e0:cf:2e:75:f5:ec:c6:54:39:93:ba:
9c:cf:82:e0:7f:26:b1:9f:dd:96:87:eb:69:1f:80:
e0:54:fc:1c:a6:6a:9c:26:eb:12:ed:99:5f:68:aa:
3f:0e:f1:a5:51:1d:91:4f:c4:36:f8:b3:d2:20:09:
5a:fa:c7:0a:f7:ec:f3:19:88:97:32:f5:1f:3f:7a:
b4:56:4b:e2:63:f3:0d:18:8d:3a:e5:f8:5d:93:17:
96:85:93:0a:03:05:1f:c6:d5:a9:d0:67:1a:01:c5:
ef:2a:aa:8f:2f:87:38:2d:41:9c:e0:b8:ef:b1:f6:
76:eb:2d:cf:f5:12:e9:9f:ad:80:d6:ec:68:c2:c3:
c9:b6:42:a5:b5:80:f7:c9:8c:d9:65:e9:73:73:28:
b1:67:36:7d:1e:ae:bc:e5:7e:30:c4:7e:70:ff:8e:
11:b7:5f:49:d9:b2:6d:8e:f3:0d:97:da:21:b8:35:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:33:A8:40:5C:B0:42:AF:BF:0F:BD:27:3D:02:99:0C:BC:66:50:09
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e9:30:e0:bb:14:6c:6f:da:33:bd:c6:2f:12:68:f6:ec:19:
50:1d:bc:85:55:a6:9c:4f:69:73:d1:79:9f:30:a8:25:ba:60:
05:8d:83:35:da:92:41:d1:65:ec:dc:91:57:c8:c2:d4:b8:80:
88:cb:be:ab:53:68:ce:cd:a6:8c:c1:dd:40:21:78:a8:79:65:
da:35:d3:c3:5b:fe:7d:b6:38:d0:b2:e1:88:9f:2b:fe:7c:08:
98:50:b9:4f:d8:77:ee:d5:14:f4:3a:f1:d5:20:64:7b:33:f5:
07:8d:b5:67:d4:55:c2:97:e2:41:c5:cb:c4:c4:7a:4a:4f:d8:
3b:df:c2:1c:08:52:60:c7:71:ae:ea:55:c1:8d:16:09:ab:f2:
8c:57:e9:d8:d3:4a:af:dd:49:dd:a0:e7:71:e7:6f:ad:d5:6e:
c3:9b:78:7e:d9:64:eb:9d:93:89:e0:d9:85:36:16:57:f0:69:
e5:46:3c:db:92:b5:f0:0a:cd:59:09:2e:a3:60:27:31:6c:97:
d9:2c:96:21:72:69:5c:00:09:3e:52:f1:6a:b4:bb:22:8e:83:
f9:b3:2f:14:b3:70:fe:4a:b1:68:40:7f:6e:fc:c8:24:e1:a0:
8d:34:96:21:b7:3b:3d:f5:3d:32:3b:fb:41:a8:99:ef:86:9b:
dc:56:1c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:19:02 2026 by rpki-client