Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: eJf5HAJhYdhefbfAy4XrjOcLY4rCnMhDfPtoViaZQNo=
Subject key identifier: 4B:D1:3C:58:E8:6B:3F:78:BF:21:9D:50:4B:A1:6D:09:E4:A2:19:F0
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 019F17C272D4FBD354FC66227B09D07004F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 16D2
Signing time: Tue 30 Jun 2026 09:00:47 +0000
Manifest this update: Tue 30 Jun 2026 09:00:47 +0000
Manifest next update: Wed 01 Jul 2026 09:00:47 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: yGl2USqPUHjidCcXrVR9lXkewhKlPyxyJKlc9asANXQ=)
2: Qy_dYjktdWTMwKlvlGZGCPvqukk.roa (hash: HyB9pQQ7gH7LCMcZGQN6Qp3fcmCpTOcafmUokwLnbLM=)
3: knZABU6A8bvYatZnGIApuHOdxF8.roa (hash: ZG17hdxOoYWoARbjcCtZd2S+SWHd1m7LFGZzi15/I2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:72:d4:fb:d3:54:fc:66:22:7b:09:d0:70:04:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Jun 30 09:00:47 2026 GMT
Not After : Jul 1 09:00:47 2026 GMT
Subject: CN=4bd13c58e86b3f78bf219d504ba16d09e4a219f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:1e:b5:43:d5:80:a2:ac:39:62:3d:0b:00:
13:ba:2f:cf:40:28:ab:c7:30:90:aa:75:ff:a2:06:
e9:b6:21:bf:d4:4a:b1:f8:bb:ca:27:20:14:d4:32:
c9:16:e6:8a:93:a6:cc:82:c2:11:e7:92:08:59:73:
46:d2:87:4e:71:95:5a:75:44:49:d8:f1:76:c2:4d:
4b:3d:06:3b:3f:93:cc:17:c9:d9:f3:9e:ae:ba:32:
30:56:4e:36:04:9b:de:f8:c5:07:0c:7b:85:e9:6d:
dd:f6:25:61:ad:2f:69:de:46:52:cb:f9:34:88:d7:
24:ea:b0:07:3a:ef:0e:b2:1a:ae:6a:70:3b:3d:c5:
5e:32:ea:45:fa:7a:6e:ab:5e:d0:9d:18:ea:94:0d:
2a:1f:c5:05:86:ec:76:4b:cd:f9:bf:49:8c:8d:e6:
6b:8f:ca:1c:53:b3:cc:82:9c:d3:73:a7:4c:db:17:
d8:91:83:71:26:52:a0:33:af:5e:3c:11:a3:2a:56:
21:48:b7:27:c3:87:d1:7f:3d:85:16:6f:bc:a2:5f:
9c:59:a0:95:fd:c6:10:e7:91:fc:46:15:29:77:01:
16:9a:d9:4b:3f:13:17:69:de:91:19:6e:e0:e1:3d:
97:f4:1a:ba:cd:f7:10:81:6b:1f:15:af:84:ff:c5:
b0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D1:3C:58:E8:6B:3F:78:BF:21:9D:50:4B:A1:6D:09:E4:A2:19:F0
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5b:1c:af:62:13:de:31:85:37:03:88:a9:e5:5d:46:6f:05:
4f:85:f3:28:9f:fd:93:a1:ec:14:78:7d:d8:88:e2:f0:18:19:
da:35:78:3b:8e:30:9f:ad:49:cc:d7:73:70:cf:10:36:f5:35:
2b:9c:89:c9:29:68:30:78:eb:5f:c6:e1:9e:7b:c5:21:51:18:
c8:62:f6:b0:98:af:bc:06:95:1d:bb:4b:c6:02:4f:80:d8:2c:
10:31:21:98:e4:f8:b3:38:c8:1d:a0:71:b2:93:86:b4:f3:d6:
14:e1:d9:ff:38:cc:8c:aa:ad:61:e0:29:8a:84:c5:70:f6:ad:
00:8a:e6:19:17:fe:f6:79:b3:9e:06:f9:cd:13:f1:47:fb:cb:
ad:c5:ad:2b:af:ca:6b:87:b6:10:ac:6a:8d:b4:2c:9d:7a:3f:
4e:b4:00:8f:52:a9:a1:ad:e3:73:7e:08:2e:ce:42:82:a8:8e:
e0:c6:64:10:48:9e:a7:3c:d3:b7:9b:e3:3a:d5:f6:11:dc:12:
2a:9d:b8:0c:cf:24:94:01:3b:a5:f8:c5:52:88:2a:2d:45:96:
50:31:e1:27:8a:65:4c:52:b5:0a:a0:66:0c:99:8b:3f:d9:c1:
7a:3d:a8:c1:2f:1e:27:a0:99:1a:b1:67:12:2e:d7:f8:39:2a:
5f:33:a1:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwnLU+9NU/GYiewnQcAT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzU3NjAzYjE3MWFmMzRlMWM2MjMxZTVlODJlNzdmMmQ1
ODlkYjkwHhcNMjYwNjMwMDkwMDQ3WhcNMjYwNzAxMDkwMDQ3WjAzMTEwLwYDVQQD
Eyg0YmQxM2M1OGU4NmIzZjc4YmYyMTlkNTA0YmExNmQwOWU0YTIxOWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfMetUPVgKKsOWI9CwATui/PQCir
xzCQqnX/ogbptiG/1Eqx+LvKJyAU1DLJFuaKk6bMgsIR55IIWXNG0odOcZVadURJ
2PF2wk1LPQY7P5PMF8nZ856uujIwVk42BJve+MUHDHuF6W3d9iVhrS9p3kZSy/k0
iNck6rAHOu8OshquanA7PcVeMupF+npuq17QnRjqlA0qH8UFhux2S835v0mMjeZr
j8ocU7PMgpzTc6dM2xfYkYNxJlKgM69ePBGjKlYhSLcnw4fRfz2FFm+8ol+cWaCV
/cYQ55H8RhUpdwEWmtlLPxMXad6RGW7g4T2X9Bq6zfcQgWsfFa+E/8Ww8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvRPFjoaz94vyGdUEuhbQnkohnwMB8GA1UdIwQY
MBaAFOx1dgOxca804cYjHl6C538tWJ25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMt
ZDMwY2VmOTExNGI3LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMtZDMwY2VmOTExNGI3
LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVscr2IT
3jGFNwOIqeVdRm8FT4XzKJ/9k6HsFHh92Iji8BgZ2jV4O44wn61JzNdzcM8QNvU1
K5yJySloMHjrX8bhnnvFIVEYyGL2sJivvAaVHbtLxgJPgNgsEDEhmOT4szjIHaBx
spOGtPPWFOHZ/zjMjKqtYeApioTFcPatAIrmGRf+9nmzngb5zRPxR/vLrcWtK6/K
a4e2EKxqjbQsnXo/TrQAj1Kpoa3jc34ILs5CgqiO4MZkEEiepzzTt5vjOtX2EdwS
Kp24DM8klAE7pfjFUogqLUWWUDHhJ4plTFK1CqBmDJmLP9nBej2owS8eJ6CZGrFn
Ei7X+DkqXzOhAQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:37:19 2026 by rpki-client